Privacy Policy
Neptune is a subscription weather app. It needs your location to give you a forecast, and an email address to give you an account. That is essentially the whole story — there is no advertising, no analytics, no tracking, and no third-party SDK of any kind in the app.
Who we are
Neptune Weather is operated by Aleph Collective LLC ("we", "us"). You can reach us about anything in this policy — including a request to access or delete your data — at support@neptuneweather.io.
What we collect
| Data | Why | When |
|---|---|---|
| Email address | It is your account identifier, and how we send password-reset codes. | When you register. If you use Sign in with Apple and choose to hide your address, we only ever receive Apple's private relay address. |
| Password | Sign-in. | Stored only as a salted hash. We cannot read it and cannot recover it for you. |
| Precise location | To produce a forecast, radar view, and alerts for a specific point on the Earth. A weather app cannot do its job without one. | The place you are viewing; any places you save; and, only if you turn on notifications, your device's current or last known position. |
| Subscription status | To know whether your subscription is active. | Your device sends Apple's signed transaction receipt; our server verifies its signature. We never receive your payment details — Apple handles the transaction. |
| Push token & notification preferences | To deliver the alerts you asked for to the right device. | Only once you enable a notification toggle. Turning them all off deletes the device record. |
| App preferences | So your unit system, accent colour and light/dark choice follow your account across devices. | When you change them. |
| Calendar event windows | Only if you enable the Plans feature — so we can warn you when weather turns bad for an upcoming event, even while the app is closed. | See "Your calendar" below. Titles never leave your device. |
What we do not collect
- No advertising or tracking identifiers. We do not track you across apps or websites, we do not use the advertising identifier, and we share nothing with data brokers or ad networks.
- No analytics or crash-reporting SDK. The app contains no third-party libraries at all.
- No payment information.
- No contacts, photos, microphone, camera, or health data.
Your calendar
The Plans feature is off by default. If you turn it on, the app reads your upcoming calendar events on your device using Apple's EventKit, works out where and when each one is, and checks the forecast for that place and time.
When push notifications are also enabled, so that we can keep watching after you close the app, the app uploads a deliberately minimal record for each tracked event:
- an opaque key — a SHA-256 hash of the event identifier, which we cannot reverse into anything meaningful;
- the event's coordinates, start and end times, and time zone;
- the hazards currently flagged for it, so we do not re-notify you about something you already know.
Event titles, notes, attendees, and your calendar itself never leave your device. Turning the feature off deletes the uploaded records.
How your location is used
Location permission is requested only when the app needs it, and it is escalated rather than demanded up front: the app asks for "While Using" first, and only asks for "Always" if you turn on notifications, which by their nature have to work when the app is closed.
Background location uses Apple's significant-location-change service — a low-power service that reports only when you have moved a meaningful distance. You choose that distance in Settings (1 km, 5 km, or 15 km). We store one current point per device, not a location history, and we overwrite it rather than accumulating a trail. A device whose position has not been updated for seven days stops being monitored automatically.
Who else sees anything
We do not sell your data and we do not share it for anyone else's marketing. Data reaches other parties only in these ways:
- Apple — for sign-in (if you use Sign in with Apple), for subscription billing, for push notification delivery, and for converting an address into coordinates. Apple's handling is governed by Apple's own privacy policy.
- Our hosting provider — our servers run on Vultr in the United States. They host the machines; they are not given access to use your data.
- Map tile providers — the 3D map's terrain and labels are streamed directly from your device to OpenFreeMap and to the public AWS Terrain Tiles dataset. Those requests carry your device's IP address and the map area you are looking at, but no account information — they have no idea who you are.
- Legal obligation — if we are compelled by valid legal process.
Weather data itself flows the other way: our servers fetch forecasts and radar from public sources (NOAA/NWS, ECMWF, MET Norway, Environment Canada, Deutscher Wetterdienst, and others). Those sources are never told anything about you.
How long we keep it
Account data — your email, saved places, preferences, and subscription state — is kept while your account exists. You can delete your account from inside the app: Settings → Account → Delete Account. That removes your account and its associated records, including saved places, device registrations, and calendar watches. Deletion is immediate and cannot be undone.
Radar and forecast archives we keep for accuracy verification contain no personal data — they are measurements of the atmosphere, not of you.
Security
All traffic between the app and our servers is encrypted with TLS. Your session tokens are held in the device Keychain. Passwords are stored only as salted hashes. Access tokens are short-lived and refresh tokens rotate on every use.
Your rights
You can access, correct, export, or delete your data. Deletion is available in the app; for anything else, email us and we will respond within 30 days. Depending on where you live you may have additional rights under the GDPR, the UK GDPR, or the CCPA — including the right to complain to your local data protection authority. We do not sell personal information as those laws define it.
Children
Neptune is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us data, contact us and we will delete it.
International transfers
Our servers are in the United States. If you use Neptune from elsewhere, your data is transferred to and processed in the United States.
Changes
If we change this policy in a way that materially affects you, we will update the effective date above and notify you in the app before the change takes effect.