Forecaster AI — Privacy Policy
DRAFT v1.0.1 (2026-10-27) — NOT LEGAL ADVICE. Attorney review required before launch. Fill every [BRACKET]. This draft describes what the code actually does as of web app v1.17.0 and Android app v1.2.0; if the code changes, this must change too.
Effective date: [EFFECTIVE DATE]
Griffin Keystone LLC ("we") runs Forecaster AI (the "Service"). This policy explains what information the Service handles, where it goes, and your choices.
1. Summary
- Most of what the app knows about you stays on your device: your location, settings, Rogue's learning history, your rain/dry reports, and chat.
- To unlock a subscription (when subscriptions are turned on), our server checks your email and the last 4 digits of your card against Square. We don't store the 4 digits.
- We do not sell or share your personal information for advertising, and the Service has no ads or third-party analytics.
- Weather and map providers receive the coordinates of the place you're viewing, because that's how weather data is requested.
- Our server's daily accuracy check uses a fixed list of public city locations and public weather-station readings — not your location.
2. Information we handle
| What | Where it comes from | Why | Where it's kept |
|---|---|---|---|
| Precise location (GPS) — only if you allow it | Your device | Show weather where you are; Android background alerts | On your device. The Android app saves your alert location rounded to about 100 m. |
| Coordinates of the place you view | You (GPS or city search) | Sent to weather/map providers (Section 4) to fetch data | Not stored by us. Netlify may keep standard request logs for a limited time. |
| Email address | You, at Square checkout and when unlocking | Find your subscription; consent records; support | Square (as our payment processor); our consent records |
| Card last 4 digits | You, when unlocking | Prove you're the person who paid | Not stored — compared once with Square's records and discarded |
| Square customer and subscription IDs, plan, paid-through date | Square | Decide whether access is active | Inside your access token and our server's device list |
| Random device ID | Generated by the app | Allow up to [MAX_DEVICES] devices per subscription | Your device and our server's device list |
| IP address | Your connection | Block repeated wrong guesses (rate limiting) | Stored only as a one-way hash, kept 1 hour |
| Consent records | You, before checkout | Proof that you agreed to the Terms and automatic renewal | Our server, for [RETENTION PERIOD] |
| Settings, Rogue's forecast/verification history, your rain/dry reports, saved chat key, chosen voice | You and the app | Run the app | Only on your device |
| Chat messages | You | Answer your questions | On-device model: never leave your phone. If you add your own Groq key: your message and a summary of the current weather data are sent to Groq, Inc. |
We do not collect your name, phone number, or full card number. The app does not use your microphone or camera.
3. How we use information
To provide and secure the Service, check subscriptions, prevent abuse, keep consent records, respond to support requests, and comply with law. We do not use your information for advertising or to build profiles about you.
4. Who receives information
- Square, Inc. — payments and subscriptions (Square's privacy notice applies).
- Netlify, Inc. — hosts the website and our server functions.
- Weather, science and map providers — receive the coordinates you're viewing and your IP address as part of normal web requests: U.S. National Weather Service and NOAA, NASA, USGS, Iowa State University (Iowa Environmental Mesonet), [Open-Meteo], [map tile provider(s)], [radar provider].
- Groq, Inc. — only if you add your own Groq API key for chat.
- Hugging Face / jsDelivr — if you download the on-device AI model (no chat content is sent).
- Authorities or others when required by law, or to protect safety.
We do not sell personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined in California law.
5. Sensitive information
Precise geolocation is "sensitive personal information" under some state laws. We use it only to provide the weather features you ask for, and it stays on your device except as described in Sections 2 and 4. You can use the Service without location by searching for a city instead.
6. Your choices and rights
- Location: turn it off in your phone or browser settings, or choose "search a city instead."
- Background alerts: turn them off in Settings → Background alerts.
- On-device data: clear it by clearing the app's storage or uninstalling.
- Access, deletion, correction, portability: depending on where you live, you may have the right to know, access, correct, delete, or get a copy of personal information we hold. Email [PRIVACY EMAIL]. ⚖️
7. Children
The Service is not for anyone under 18, and we don't knowingly collect information from children under 13. If you believe a child gave us information, contact [PRIVACY EMAIL] and we'll delete it.
8. Security
Access tokens are signed so they can't be forged; secrets are kept in server settings, not in the app; and connections use HTTPS. No system is perfectly secure.
9. Retention
Consent records: [RETENTION PERIOD]. Device list: until you sign out, are pushed out by a newer device, or [90] days after your subscription ends. Rate-limit records: 1 hour. On-device data: until you delete it.
10. International users
The Service is run from the United States. If you use it from elsewhere, your information is processed in the U.S.
11. Changes
We'll post changes here and update the effective date; for material changes we'll notify you in the app or by email.
12. Contact
Griffin Keystone LLC · [BUSINESS ADDRESS] · [PRIVACY EMAIL]
← Back to Forecaster AI · Terms · Privacy · Disclosures · Data sources