Privacy Policy

Last updated: March 11, 2026

1. Introduction

Aurora Forecast by Revon ("we," "us," "our") provides an aurora borealis forecasting service through our iOS app and website at auroraforecast.io (together, the "Service"). This policy explains what data we collect and why.

2. What We Collect

iOS App

• Location (latitude & longitude): From GPS or manual input. Used to generate aurora forecasts for your area and determine local quiet hours for notifications.
• Installation ID: A random UUID generated on first launch, stored in your device's Keychain. This is your anonymous identifier — we never ask for your name, email, or account.
• Push notification token: Provided by Apple when you grant notification permission. Used solely to send you aurora alerts.
• Preferences: Notification threshold and lookahead window. Stored locally and synced to our server.
• Last active timestamp: When you last opened the app. Used to suppress notifications while you're already using the app.
• Subscription status: Managed through Apple's App Store via RevenueCat. We store your plan type and expiration date, linked to your Installation ID — not to any personal identity.

Website

• Outbound App Store clicks: We may record which App Store button you tapped for attribution and analytics.
• Analytics data: Page views, scroll depth, clicks, and referral source via Google Analytics. GA may place cookies on your browser.

3. How We Use Your Data

• Generate personalized aurora forecasts based on your location
• Send push notifications when aurora activity exceeds your threshold
• Manage your subscription entitlements
• Improve the Service through aggregated, non-identifying analytics
• Understand which website sections and App Store links help users discover the app

4. Third-Party Services

We share data with these services only as needed to operate the Service:

• Apple (APNs): Your device token to deliver push notifications.
• RevenueCat: Your Installation ID and purchase receipts to manage subscriptions. RevenueCat Privacy Policy.
• Supabase: Cloud database where we store device registrations, preferences, and notification logs. Supabase Privacy Policy.
• Google Analytics: Website analytics only (not in the iOS app). Opt out here.
• Vercel: Website hosting. May log IP addresses per standard web server operation.
• NOAA: We fetch public space weather data. No user data is sent to NOAA.

We do not sell your data. We do not use your data for advertising or profiling.

5. Data Retention

• Notification logs: Automatically deleted after 90 days.
• Device registrations & preferences: Retained while you use the Service. Contact us to request deletion.
• Subscription records: Retained as long as your subscription is active, plus a reasonable period for billing and support.
• Forecast cache: In-memory only, discarded within 1 hour.
• Website analytics: Governed by Google Analytics retention settings (default 2 months).

6. Data Security

All data is transmitted over HTTPS. Your Installation ID is stored in iOS Keychain (encrypted by the OS). Server-side data is stored in Supabase with row-level security — only our backend can access it. APNs communication uses HTTP/2 with JWT authentication.

7. Your Rights

You can at any time:

• Revoke location access in your device settings
• Disable push notifications in your device settings
• Uninstall the app to stop all data collection
• Request access to, correction of, or deletion of your data by emailing us

If you are in the EU/EEA, you have additional rights under GDPR including data portability and the right to lodge a complaint with your local data protection authority.

8. Cookies

The website uses cookies via Google Analytics. The iOS app does not use cookies. You can disable cookies in your browser settings or opt out of Google Analytics.

9. Children

The Service is not directed to children under 13. We do not knowingly collect data from children under 13. If we learn we have, we will delete it promptly.

10. Changes

We may update this policy. Changes take effect when posted with a new "Last updated" date. Continued use of the Service constitutes acceptance.

11. Contact

Questions about this policy? Email us at revonauroraforecast@proton.me.