Privacy Policy for Outdoor Outlook

Introduction

Outdoor Outlook ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Outdoor Outlook (the "App").

Please read this privacy policy carefully. By using Outdoor Outlook, you agree to the collection and use of information in accordance with this policy.

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. Data Storage Locations
4. Third-Party Services
5. Subscription Management - RevenueCat
6. Data Security
7. Data Retention
8. Your Privacy Rights
9. GDPR Compliance (European Users)
10. CCPA Compliance (California Users)
11. Children's Privacy
12. Changes to This Privacy Policy
13. Contact Us

Information We Collect

1. Information Stored Locally on Your Device

The following information is stored exclusively on your device using AsyncStorage and is never transmitted to our servers:

Weather Activities Data

• Activity names and descriptions
• Weather preferences (temperature ranges, wind tolerance, precipitation tolerance)
• Time slots and scheduling information
• Activity icons and categories
• Planned activities with start/end dates

User Preferences

• Temperature unit preference (Celsius/Fahrenheit)
• Notification settings and schedules
• App settings and configurations
• Onboarding completion status
• Widget preferences

Authentication Data (Local Cache)

• User ID
• Email address (cached locally)
• Display name (if provided)
• Authentication tokens (stored securely)

Weather Data Cache

• Current weather conditions
• 7-day forecast data
• Location coordinates
• Weather cache timestamps (data refreshes every 10 minutes)

Subscription Trial Data

• Trial start date (for 7-day automatic trial tracking)
• Trial status (active/expired)
• Subscription status cache (for offline access)

2. Information Shared with Third-Party Services

The following information is shared with specific third-party services to enable core app functionality:

Apple WeatherKit (Weather Data)

• Shared: Location coordinates (latitude/longitude)
• Purpose: Fetch weather forecasts and current conditions
• NOT Shared: Your activities, preferences, or personal information
• Privacy Policy: https://www.apple.com/legal/privacy/

RevenueCat (Subscription Management)

• Shared:
  • Anonymous User ID (no personally identifiable information)
  • Subscription status (active, expired, cancelled, in_trial)
  • Purchase receipts (from Apple App Store or Google Play Store)
  • Purchase dates and expiration dates
  • Product IDs (subscription plan type)
  • Device type and OS version
  • Country/region (for pricing)
• NOT Shared:
  • Email address
  • Name or display name
  • Payment card information (handled by Apple/Google)
  • Weather activities or preferences
  • Location data or coordinates
  • Weather forecast data
  • User-generated content
• Purpose: Process subscriptions, validate purchases, manage trial periods, prevent fraud
• Data Processing: RevenueCat acts as a data processor; you control your subscription data
• Privacy Policy: https://www.revenuecat.com/privacy
• Security: SOC 2 Type II certified, GDPR and CCPA compliant
• Data Retention: RevenueCat retains subscription data for the duration of your subscription plus 60 days after cancellation (for refund processing). You can request deletion at any time.

Cloudflare (Weather API Token Service)

• Shared: API requests (no personal data)
• Purpose: Generate secure tokens for accessing Apple WeatherKit
• NOT Shared: Your activities, location, or personal information
• Privacy Policy: https://www.cloudflare.com/privacypolicy/

OpenStreetMap Nominatim (Location Geocoding)

• Shared: Location names or coordinates for geocoding
• Purpose: Convert location names to coordinates and vice versa
• NOT Shared: Your activities, preferences, or personal information
• Privacy Policy: https://operations.osmfoundation.org/policies/nominatim/

Apple App Store / Google Play Store (In-App Purchases)

• Shared: Payment information, purchase receipts
• Purpose: Process subscription payments
• Handled By: Apple/Google (we never see your payment card information)
• Privacy Policies:
  • Apple: https://www.apple.com/legal/privacy/
  • Google: https://policies.google.com/privacy

3. Information We Do NOT Collect

We explicitly do NOT collect, store, or transmit:

• Payment card numbers or financial information (handled by Apple/Google)
• Precise real-time location tracking
• Contact lists or phone numbers
• Photos or media files
• Browsing history
• Social media data
• Biometric data (fingerprints, Face ID data)
• Health or medical information
• Background location data (we only request location when you use the app)

How We Use Your Information

Local Data Usage (On Your Device)

Data stored locally on your device is used to:

1. Display Your Activities: Show your weather-dependent activities and planned events
2. Provide Weather Recommendations: Analyze weather conditions against your activity preferences
3. Send Notifications: Alert you about upcoming activities and favorable weather conditions
4. Remember Preferences: Maintain your settings (temperature units, notification schedules)
5. Enable Widgets: Display current weather on your iOS home screen
6. Offline Functionality: Allow the app to work without an internet connection

Third-Party Data Usage

Data shared with third-party services is used solely for:

1. Weather Forecasts: Fetch accurate weather data from Apple WeatherKit
2. Subscription Processing: Manage your premium subscription through RevenueCat
3. Location Services: Convert location names to coordinates for weather lookups
4. Token Generation: Create secure API tokens via Cloudflare
5. Payment Processing: Handle subscription payments through Apple/Google

We do NOT:

• Sell or rent your personal information
• Use your data for advertising or marketing (no ads in the app)
• Share your data with data brokers
• Track you across other apps or websites
• Use your data for AI training or model development
• Create user profiles for commercial purposes

Data Storage Locations

Local Storage (Your Device)

Location: Your iPhone or Android device (AsyncStorage)

Data Stored:

• All weather activities and preferences
• App settings and configurations
• Weather data cache
• Subscription trial status
• Notification preferences

Retention: Data remains on your device until you:

• Delete the app (all local data is removed)
• Manually clear app data
• Use the "Clear All Data" option in Settings

RevenueCat Servers

Location: Cloud infrastructure (AWS, US-based with global CDN)

Data Stored:

• Anonymous User ID
• Subscription status and purchase history
• Purchase receipts from Apple/Google
• Device metadata (type, OS version, country)

Retention:

• Active subscriptions: Duration of subscription
• Cancelled subscriptions: 60 days after cancellation (for refund processing)
• You can request deletion at any time via office@keepingupwithtechnology.com

Apple/Google Servers

Location: Apple/Google cloud infrastructure

Data Stored:

• Purchase receipts and transaction history
• Payment information (credit cards, etc.)

Controlled By: Apple and Google (subject to their privacy policies)

Retention: Managed by Apple/Google according to their policies

Third-Party Services

Outdoor Outlook integrates with the following third-party services:

1. Apple WeatherKit

Purpose: Provide weather forecasts and current conditions

Data Shared: Location coordinates only

Privacy Policy: https://www.apple.com/legal/privacy/

User Control: You can deny location permission (app will require manual location entry)

2. RevenueCat

Purpose: Subscription management and payment processing

Data Shared:

• Anonymous User ID
• Subscription status and purchase receipts
• Device metadata (type, OS version, country)

Data NOT Shared:

• Email, name, or contact information
• Payment card details (handled by Apple/Google)
• Location data, activities, or preferences

Privacy Policy: https://www.revenuecat.com/privacy

Security: SOC 2 Type II certified

Compliance: GDPR and CCPA compliant

Data Processor Agreement: RevenueCat acts as a data processor; Keeping up with technology is the data controller

User Control:

• Cancel subscription anytime via Apple App Store or Google Play Store settings
• Request data deletion via office@keepingupwithtechnology.com
• Restore purchases on new devices

3. Cloudflare

Purpose: Secure token generation for Apple WeatherKit API

Data Shared: API requests (no personal data)

Privacy Policy: https://www.cloudflare.com/privacypolicy/

User Control: None required (no personal data shared)

4. OpenStreetMap Nominatim

Purpose: Geocoding (convert location names to coordinates)

Data Shared: Location names or coordinates for lookup

Privacy Policy: https://operations.osmfoundation.org/policies/nominatim/

User Control: Required for location-based weather (essential functionality)

5. Apple App Store / Google Play Store

Purpose: In-app purchase processing

Data Shared: Purchase information, payment details

Privacy Policies:

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy

User Control: Managed through your Apple ID or Google Account

Subscription Management - RevenueCat

What is RevenueCat?

RevenueCat is a third-party subscription management platform that helps us provide a seamless subscription experience across iOS and Android. Instead of building complex payment infrastructure ourselves, we use RevenueCat to handle subscription logic, receipt validation, and cross-platform subscription management.

Why We Use RevenueCat

1. Security: SOC 2 Type II certified with enterprise-grade security
2. Privacy: GDPR and CCPA compliant
3. Reliability: Used by 10,000+ apps including major brands
4. User Experience: Seamless subscription management across devices
5. Fraud Prevention: Automatic receipt validation and fraud detection
6. Cross-Platform: Single subscription works on both iOS and Android

Detailed Data Handling by RevenueCat

Data RevenueCat DOES Collect

Data RevenueCat Does NOT Collect

• Email address or name
• Payment card information (handled by Apple/Google)
• Location coordinates or addresses
• Weather activities or preferences
• User-generated content
• Contacts or phone numbers
• Photos or media files
• Browsing history
• Background location data
• Health or fitness data

How to Control Your RevenueCat Data

1. View Subscription Status: Open Outdoor Outlook → Settings → Subscription section
2. Cancel Subscription:
   • iOS: Settings app → [Your Name] → Subscriptions → Outdoor Outlook
   • Android: Google Play Store → Menu → Subscriptions → Outdoor Outlook
3. Request Data Deletion: Email office@keepingupwithtechnology.com with subject "Delete RevenueCat Data"
4. Restore Purchases: Settings → "Restore Purchases" (to sync subscription across devices)

RevenueCat Data Retention

• Active Subscriptions: Data retained for duration of subscription
• Cancelled Subscriptions: Data retained for 60 days (for refund processing)
• After 60 Days: Data automatically deleted unless you request earlier deletion
• On Request: We can delete your RevenueCat data within 30 days of your request

RevenueCat's Role as Data Processor

Under GDPR and CCPA, RevenueCat acts as a data processor, meaning:

• Keeping up with technology (Outdoor Outlook developer) is the data controller
• RevenueCat processes data only on our instructions
• RevenueCat cannot use your data for their own purposes
• We remain responsible for your data's protection
• You can exercise your data rights through us

Data Security

We take data security seriously and implement multiple layers of protection:

Local Data Protection

1. AsyncStorage Encryption: iOS automatically encrypts AsyncStorage data; Android encrypts when device encryption is enabled
2. Keychain Storage: Sensitive tokens stored in iOS Keychain (hardware-encrypted)
3. No Cloud Storage: Activities and preferences never leave your device
4. App Sandbox: iOS/Android app sandboxing prevents other apps from accessing Outdoor Outlook data

Network Security

1. HTTPS/TLS: All network communications use encrypted HTTPS connections
2. Certificate Pinning: API connections use certificate pinning where possible
3. Token-Based Authentication: Secure JWT tokens for Apple WeatherKit access
4. Receipt Validation: RevenueCat validates purchase receipts server-side

Third-Party Security

1. RevenueCat: SOC 2 Type II certified, GDPR/CCPA compliant
2. Apple WeatherKit: Apple's enterprise-grade security standards
3. Cloudflare: Industry-leading CDN with DDoS protection

Security Best Practices

• Regular security audits of dependencies
• Prompt security updates via App Store/Play Store
• No storage of payment card information
• Minimal data collection principle
• Secure coding practices and code reviews

Data Breach Protocol

In the unlikely event of a data breach:

1. We will notify affected users within 72 hours
2. We will report the breach to relevant authorities as required by law
3. We will provide details about what data was affected
4. We will offer remediation steps to protect users

Data Retention

Local Data (On Your Device)

Retention Period: Indefinite (until you delete the app or clear data)

Automatic Deletion:

• Weather cache: Automatically refreshes every 10 minutes (old data overwritten)
• Trial data: Persists until you subscribe or uninstall the app

Manual Deletion:

• Delete app: All local data permanently removed
• Clear app data: iOS (uninstall), Android (Settings → Apps → Outdoor Outlook → Clear Data)
• In-app option: Settings → "Clear All Data" (planned feature)

RevenueCat Data

Active Subscriptions: Retained for duration of subscription

Cancelled Subscriptions: Retained for 60 days after cancellation (for refund processing)

On Request: Deleted within 30 days of your deletion request

Automatic Deletion: After 60 days of cancellation (unless required for legal compliance)

Apple/Google Data

Managed By: Apple and Google

Retention: Subject to Apple's and Google's privacy policies

User Control: Manage through your Apple ID or Google Account settings

Legal Retention Requirements

We may retain certain data longer if required by law:

• Tax records: 7 years (UK law)
• Purchase records: As required by consumer protection laws
• Legal disputes: Until resolution + statutory period

Your Privacy Rights

You have the following rights regarding your personal data:

1. Right to Access

You can request a copy of all data we have about you:

• Local data: Export from Settings (planned feature) or via support request
• RevenueCat data: Request via office@keepingupwithtechnology.com
• Apple/Google data: Request through your Apple ID or Google Account

2. Right to Rectification

You can correct inaccurate data:

• Local data: Edit activities and preferences directly in the app
• Account data: Update in Settings → Account
• RevenueCat data: Contact support to correct subscription information

3. Right to Deletion ("Right to be Forgotten")

You can request deletion of your data:

• Local data: Delete the app or use "Clear All Data" in Settings
• RevenueCat data: Email office@keepingupwithtechnology.com with subject "Delete My Data"
• Account data: Delete account in Settings (planned feature) or via support

Deletion Timeline:

• Local data: Immediate
• RevenueCat data: Within 30 days
• Some data may be retained for legal compliance (e.g., tax records)

4. Right to Portability

You can request your data in a portable format:

• Email office@keepingupwithtechnology.com with subject "Data Export Request"
• We will provide your data in JSON format within 30 days
• Includes: Activities, preferences, subscription history

5. Right to Restrict Processing

You can request that we limit how we use your data:

• Disable notifications in Settings
• Revoke location permission (app will require manual location entry)
• Cancel subscription to stop payment processing

6. Right to Object

You can object to certain data processing:

• Disable location services (Settings → Privacy → Location)
• Cancel subscription to stop subscription data processing

7. Right to Withdraw Consent

You can withdraw consent at any time:

• Revoke location permission in device settings
• Disable notifications in app settings
• Cancel subscription in Apple App Store or Google Play Store

Exercising Your Rights

To exercise any of these rights:

Email: office@keepingupwithtechnology.com

Subject Line: Specify your request (e.g., "Data Export Request", "Delete My Data")

Information Required:

• Your email address associated with the app
• Description of your request
• User ID (found in Settings → About, if available)

Response Time: We will respond within 30 days (GDPR/CCPA requirement)

No Fee: Exercising your privacy rights is free of charge

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR).

Legal Basis for Processing

We process your data based on the following legal grounds:

1. Consent (Article 6(1)(a) GDPR):
   • Location access for weather forecasts
   • Push notifications
2. Contract Performance (Article 6(1)(b) GDPR):
   • Subscription management via RevenueCat
   • Payment processing via Apple/Google
3. Legitimate Interest (Article 6(1)(f) GDPR):
   • App functionality and improvements
   • Security and fraud prevention

Data Controller

Keeping up with technology Pty Ltd

Email: office@keepingupwithtechnology.com

Data Protection Officer

For GDPR-related inquiries:

Email: office@keepingupwithtechnology.com

We will respond within 30 days

Data Processors

We use the following data processors:

1. RevenueCat (Subscription management)
   • Location: United States (adequate protections via Standard Contractual Clauses)
   • DPA: https://www.revenuecat.com/dpa
2. Apple/Google (Payment processing)
   • Subject to their respective privacy policies

International Data Transfers

Some of our service providers are located outside the EEA:

• RevenueCat: United States (Standard Contractual Clauses)
• Apple WeatherKit: Global infrastructure (Apple's Privacy Shield commitment)
• Cloudflare: Global CDN (GDPR-compliant)

All international transfers comply with GDPR Article 46 safeguards.

Your GDPR Rights

In addition to the rights listed above, you have:

1. Right to Lodge a Complaint: You can file a complaint with your national data protection authority
2. Right to Not Be Subject to Automated Decision-Making: We do not use automated decision-making or profiling
3. Right to Be Informed: This privacy policy fulfills our transparency obligations

GDPR Contact Information

To exercise your GDPR rights or file a complaint:

UK Information Commissioner's Office (ICO):

• Website: https://ico.org.uk
• Phone: 0303 123 1113

Your Local Data Protection Authority: Find your authority at https://edpb.europa.eu/about-edpb/board/members_en

CCPA Compliance (California Users)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA).

Categories of Personal Information Collected

In the past 12 months, we have collected:

Sources of Personal Information

We collect information from:

1. Directly from you (when you use the app)
2. Automatically (usage data, device information)
3. Third parties (Apple/Google for subscription status)

Business Purpose for Collection

We collect personal information for:

1. Providing weather forecasts
2. Managing subscriptions
3. Sending notifications
4. Improving app functionality
5. Preventing fraud and ensuring security

Sharing Personal Information

We share personal information with:

1. RevenueCat (subscription management)
2. Apple WeatherKit (weather data)
3. Cloudflare (API token generation)

We do NOT:

• Sell your personal information
• Share your information with advertisers
• Share your information with data brokers

Your CCPA Rights

As a California resident, you have the right to:

1. Right to Know: Request disclosure of personal information collected
2. Right to Delete: Request deletion of your personal information
3. Right to Opt-Out of Sale: We don't sell your data, so this doesn't apply
4. Right to Non-Discrimination: We won't discriminate against you for exercising your rights

Exercising Your CCPA Rights

To exercise your CCPA rights:

Email: office@keepingupwithtechnology.com

Subject: "CCPA Request - [Right to Know/Delete]"

Verification: We may ask for verification to protect your privacy

Response Time: Within 45 days (may extend to 90 days if complex)

No Fee: Free for up to 2 requests per year

California "Shine the Light" Law

Under California Civil Code Section 1798.83, you can request information about disclosure of personal information to third parties for direct marketing. We do not share your information for direct marketing purposes.

Children's Privacy

Outdoor Outlook is not intended for children under 13 years of age (or under 16 in the EEA).

No Knowing Collection from Children

• We do not knowingly collect personal information from children
• We do not target our services to children
• We do not use age-gating mechanisms (the app is intended for general audiences)

Parental Rights

If you are a parent or guardian and believe your child has provided personal information to us:

• Email: office@keepingupwithtechnology.com
• Subject: "Child Privacy Concern"
• We will delete the information within 30 days

Age Restrictions

• Apple App Store rating: 4+ (general audiences)
• Google Play rating: Everyone
• COPPA compliance: Not directed at children

If you are under 18, please obtain parental consent before using Outdoor Outlook.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our data practices
• New features or services
• Legal or regulatory requirements
• User feedback

How We Notify You of Changes

1. In-App Notification: We will display a notification when you open the app
2. Email Notification: If you have provided an email address
3. Effective Date: The "Last Updated" date at the top of this policy will change
4. Material Changes: We will provide prominent notice for significant changes

Your Continued Use

Your continued use of Outdoor Outlook after changes constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, please discontinue use and delete the app.

Version History

• Version 2.0 (November 20, 2025): Added RevenueCat integration for subscription management, comprehensive GDPR/CCPA compliance sections
• Version 1.0 (December 2024): Initial privacy policy (Outdoor Outlook)

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

General Inquiries

Email: office@keepingupwithtechnology.com

Response Time: Within 2-3 business days

Privacy-Specific Inquiries

Email: office@keepingupwithtechnology.com

Response Time: Within 30 days (GDPR/CCPA requirement)

Data Protection Officer (GDPR)

Email: office@keepingupwithtechnology.com

Company Information

Keeping up with technology

App Name: Outdoor Outlook

Developer: Keeping up with technology

App Support: office@keepingupwithtechnology.com

Summary: Quick Reference

What We Collect

✅ Stored Locally (Your Device):

• Weather activities and preferences
• App settings
• Weather data cache (10 min refresh)
• Trial status

✅ Shared with RevenueCat:

• Anonymous User ID
• Subscription status
• Purchase receipts
• Device metadata

❌ We NEVER Collect:

• Payment card details (handled by Apple/Google)
• Contacts or phone numbers
• Photos or media
• Browsing history
• Background location tracking

Where Your Data Lives

Your Control

• ✅ Delete all local data (delete app)
• ✅ Cancel subscription anytime
• ✅ Request data deletion from RevenueCat
• ✅ Revoke location permission
• ✅ Disable notifications
• ✅ Export your data

Third-Party Services

Key Privacy Commitments

• ✅ No Ads: We don't show ads or share data with advertisers
• ✅ No Selling Data: We never sell or rent your personal information
• ✅ Local-First: Most data stays on your device
• ✅ GDPR/CCPA Compliant: Full compliance with privacy laws
• ✅ Transparent: Clear disclosure of all data practices
• ✅ User Control: You decide what to share and can delete anytime

Legal Disclaimer

This privacy policy does not create any contractual or legal rights in or on behalf of any party. We reserve the right to update this policy at any time. Your continued use of Outdoor Outlook constitutes acceptance of any changes.

This privacy policy should not be considered legal advice. For specific legal questions, please consult with a qualified attorney.

Last Reviewed: November 20, 2025

Version: 2.0

Effective Date: November 20, 2025