Weather Widget Magic · Legal

Privacy Policy

Weather Widget Magic for iPhone · Last updated: 17 October 2026

In short

  • No account. We never ask for your name or email address. The App uses a random, anonymous identifier.
  • Location is used to show the weather where you are. It leaves your device only to fetch weather data and, if you turn them on, to deliver alerts, Live Activities and AI Habits.
  • Photos and calendar events you use in widgets stay on your device.
  • Ads: personalised ads are shown only with your consent. We do not sell your personal data.
  • You are in control: every feature can be turned off, and turning it off deletes the related data on our servers.

This Privacy Policy explains which personal data Weather Widget Magic (the “App”) processes, why, on what legal basis, with whom it is shared, how long it is kept and what rights you have. It covers the App, its widgets, Live Activities and notifications, and the servers we operate for them. It is written to meet the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).

1. Who is responsible for your data

The controller is EDANFS, a sole proprietorship (ditta individuale) based at Via Belgrado 6, 33030 Camino al Tagliamento (UD), Italy, VAT number (P.IVA) 03028320301 (“we”, “us”).

Contact for any privacy matter: info@edanfs.com or +39 342 009 6919. We have not appointed a Data Protection Officer because we are not required to.

2. What we process, why, and on what legal basis

2.1 Anonymous app identifier

When you first open the App, Firebase Authentication creates a random anonymous user ID, and Firebase creates an installation ID. They are not linked to your name, email or Apple Account. We use them to connect your alert settings to your device, to deliver notifications and to protect our servers from abuse.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).

2.2 Location and weather

Data: your device’s location, only if you allow it in iOS (“While Using the App”); the cities you search for or save; the place name of your location.

Purpose: to show the weather, radar, air quality, UV index, tides and local time for the places you choose.

How it is used: to get the data, the coordinates of a place are sent:

  • from your device directly to Apple (Apple Weather/WeatherKit and place names), to OpenWeather (city search, air quality and time zone) and, for the Marine widget only, to TidesAtlas (tides). These providers also see your device’s IP address;
  • to our servers, which request data on your behalf from Rainbow.ai (short-term precipitation forecast, for an area of about 5 km around the place) and from Visual Crossing (temperature history, for the place rounded to a grid cell), without passing on any identifier.

Your saved cities and the latest weather are stored on your device, including the storage shared with the App’s widgets.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR), because you ask us to show the weather. You can withdraw location access at any time in the iOS Settings app; you can still search for places manually.

2.3 Alerts, Live Activities and AI Habits (optional)

If you turn on rain or hail alerts, official weather alerts, the rain Live Activity or AI Habits, we store on our servers (Google Firebase, European Union region in Belgium):

  • your anonymous ID and the push-notification and Live Activity tokens of your device;
  • the place you chose for the feature: coordinates, area code, place name, time zone, country, and whether it is your current position;
  • your language, your alert preferences and whether you have Premium (some alerts are Premium features);
  • for AI Habits: the activities you picked from the list, the times and the tone you chose;
  • records of the alerts already sent to you, so that you do not receive duplicates.

Purpose: to check the weather for your place and notify you when needed. To do this, our servers send the coordinates of the place, without any identifier, to Rainbow.ai (precipitation forecasts) and to Apple WeatherKit (official alerts and forecasts). For AI Habits, we send Google’s Gemini API only forecast facts, the type of activity, the language and the tone, never your location, place name or identifiers. Under the terms of the paid Gemini API, Google processes this content on our behalf and does not use it to improve its products.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR), because you ask us for these features.

2.4 Purchases

Apple processes all payments; we never see your payment details. Through Apple’s StoreKit we receive transaction information: which product, purchase and expiry dates, trial status, transaction identifiers and the storefront country. We use it to unlock Premium and one-time purchases and to restore them. We also share this transaction information, together with an anonymous identifier, with RevenueCat, which we use to analyse subscriptions.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) for unlocking purchases; our legitimate interest in understanding how subscriptions perform (Art. 6(1)(f) GDPR) for the analysis.

2.5 Advertising (free version)

The free version shows ads from Google AdMob. Premium subscribers do not see ads. In the European Economic Area, the United Kingdom and Switzerland, before showing ads we show you Google’s consent form, where you choose whether to allow personalised ads.

  • With your consent, Google can personalise ads using data such as your IP address, device and operating-system information, app information and your interactions with ads.
  • Without your consent, Google may show non-personalised or limited ads, which use less data, for example to limit how often you see an ad, to prevent fraud and to measure ads in aggregate.

We do not ask for permission to track you (App Tracking Transparency), so the App does not give Google access to your device’s advertising identifier (IDFA). You can change your choice at any time in the App under Settings › Privacy options.

Legal basis: your consent (Art. 6(1)(a) GDPR) for personalised ads and for storing or reading information on your device where the law requires consent; our legitimate interest in funding the free version (Art. 6(1)(f) GDPR) for non-personalised or limited ads. For its own processing, Google acts as an independent controller under its own privacy policy.

2.6 Usage analytics and crash reports

Firebase Analytics (Google) collects: an app-instance ID; events such as screens viewed, features used, buttons tapped and purchases started; device model, iOS version, app version and language; your country or region, derived from your IP address; and properties such as the widgets you have installed and whether you use the free or Premium version.

Firebase Crashlytics (Google) collects crash reports: the error trace, device model, iOS and app version, device state (such as free memory) and a crash-reporting installation ID.

Purpose: to understand how the App is used, fix errors and improve features. We see this data only in pseudonymous, mostly aggregated form.

Legal basis: our legitimate interest in understanding, improving and keeping the App stable (Art. 6(1)(f) GDPR). The data is pseudonymous and not linked to your identity. You can object at any time by turning off “Share usage analytics and crash reports” in the App under Settings › Privacy options, or by writing to us.

We also use Firebase Remote Config, which uses the installation ID, to change some App settings without an update (legitimate interest, Art. 6(1)(f) GDPR).

2.7 Weather radar and maps

The radar map is displayed with the Mapbox Maps SDK (or with Apple Maps on some devices). To load the map, your device requests map tiles from Mapbox, which receives your IP address, device information and the area of the map you are viewing. Mapbox may also collect usage and performance data, and location data if you allowed location access, to improve its maps; it does so as an independent controller under its own privacy policy. You can opt out by tapping the (i) button on the map and turning off Mapbox Telemetry.

Weather layers (rain, clouds, temperature, wind, lightning, hail, air quality and tropical storms) are loaded through our servers, so the weather providers do not receive your IP address.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

2.8 Data that stays on your device

The photos you pick for photo widgets (through the iOS photo picker, which gives the App only the photos you select), the calendar events shown by the Calendar widget (only if you allow calendar access), your widget settings, saved cities and preferences are processed on your device only. We do not upload them to our servers.

2.9 When you contact us

If you write to us, we process your email address, your message and anything you choose to include, to answer you. Legal basis: our legitimate interest in answering requests (Art. 6(1)(f) GDPR) or, where your request concerns the App you use, the performance of our contract (Art. 6(1)(b) GDPR).

3. Who receives your data

We share data only with the providers we need to run the App. Where they act as our processors, they are bound by data-processing agreements and may use the data only to provide their service to us.

RecipientWhat forRole and location
Google (Firebase, Gemini API, AdMob)Anonymous ID, database and servers, push notifications, Remote Config, analytics, crash reports, AI Habits texts, adsProcessor; independent controller for ads. Our database and servers are in the EU (Belgium); Google may also process data in the USA
AppleWeather data (WeatherKit), place names, Apple Maps, push notifications, App Store purchasesIndependent controller under Apple’s privacy policy; Ireland and USA
Rainbow.ai (Weather Forecast Technologies Ltd)Precipitation forecasts for the places of your alerts and of the hybrid forecast, requested by our servers without identifiersData provider
Visual Crossing CorporationTemperature history and weather map layers, requested by our servers without identifiersData provider; USA
OpenWeather LtdCity search, air quality and time zone, requested directly by your deviceData provider; United Kingdom
TidesAtlasTide data for the Marine widget, requested directly by your deviceData provider
Mapbox, Inc.Radar base map; optional telemetryData provider; independent controller for telemetry; USA
RevenueCat, Inc.Subscription analysisProcessor; USA

Copernicus/ECMWF, EUMETSAT, NOAA, Deutscher Wetterdienst, the U.S. National Hurricane Center and the Joint Typhoon Warning Center provide public weather datasets that our servers download. We send them no data about you.

We may also disclose data where the law requires it, to establish or defend legal claims, or to a successor if our business is transferred (in which case we will inform you in advance). We do not sell or rent your personal data to anyone.

The App contains links to third-party websites, such as the pages of the agencies that issue weather alerts. When you open one, that website’s own privacy policy applies.

4. Transfers outside the European Economic Area

Some recipients are located, or process data, outside the European Economic Area, for example in the USA or the United Kingdom. Such transfers rely on an adequacy decision of the European Commission (for the United Kingdom, and for US companies certified under the EU–US Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission. You can ask us for more information about these safeguards.

5. How long we keep data

DataRetention
Data stored on your deviceUntil you delete it or delete the App
Alert, Live Activity and AI Habits registrations, including the place and push tokensUntil you turn off the feature; deleted within 30 days afterwards. Deleted automatically if the App has not contacted our servers for 12 months (for example because you deleted it)
Records of alerts already sentUntil the alert expires
Anonymous app identifierAs long as you use the App; deleted together with the data above
Short-lived forecast caches per area (no identifiers)Up to 24 hours
Server logsUp to 30 days
Firebase Analytics dataUp to 14 months
Crash reports90 days
Subscription records at RevenueCatAs long as we use the service, or until you ask us to delete them
Emails you send usUp to 2 years after your request is closed

6. Your rights

Under the GDPR you have the right to:

  • access your data and receive a copy (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • receive your data in a portable format (Art. 20);
  • object at any time to processing based on our legitimate interest, including usage analytics and crash reports (Art. 21);
  • withdraw your consent at any time, for example for personalised ads, without affecting processing that took place before (Art. 7(3)).

The quickest way to delete the data on our servers is to turn off the related feature in the App. You can change ad choices and analytics in Settings › Privacy options, and location, notification, calendar and photo access in the iOS Settings app.

To exercise any right, write to info@edanfs.com. We will reply within one month. Because the App does not use accounts, we may ask you for information that helps us find your data. If we cannot identify you, we will tell you (Art. 11 GDPR).

You also have the right to lodge a complaint with a data protection authority, in particular in the EU country where you live or work. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Permissions the App asks for

All permissions are optional and can be changed at any time in the iOS Settings app:

  • Location (while using the App): weather for your current position;
  • Notifications: alerts, weather notifications, AI Habits and reminders about the App, for example the day before a free trial ends;
  • Calendar: only for the Calendar widget, processed on your device;
  • Photos: the App receives only the photos you pick for photo widgets.

8. Children

The App is not directed at children under 14, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

9. Automated decisions

Alerts and AI Habits messages are generated automatically from weather data. We do not take decisions that produce legal effects or similarly significantly affect you based solely on automated processing (Art. 22 GDPR).

10. Security

We use encrypted connections (HTTPS/TLS), keep our servers and database on Google Cloud with restricted access, and keep the API keys of most data providers on our servers rather than in the App. No system is completely secure, but we work to protect your data and will inform you and the authorities of any breach where the law requires it.

11. Changes to this Privacy Policy

We may update this Privacy Policy, for example when we add features or change providers. The date at the top shows the latest version. If a change is significant, we will inform you in the App before it takes effect.

12. Contact

EDANFS, sole proprietorship (ditta individuale)
Via Belgrado 6, 33030 Camino al Tagliamento (UD), Italy
VAT number (P.IVA) 03028320301
Email: info@edanfs.com · Phone: +39 342 009 6919

See also the Weather Widget Magic Terms of Use.