1. Introduction

This Mobile App Privacy Policy ("Policy") describes how Icarus Inc., the developer and operator of Hail Sentinel, ("Company," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the Hail Sentinel mobile application ("App") available on iOS and Android platforms.

By downloading, installing, or using the Hail Sentinel App, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with this Policy, please do not use the App and uninstall it from your device.

2. Data Controller Information

The data controller responsible for your personal information is:

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address, name, and password (stored in encrypted form).
• Profile Information: Any additional information you choose to add to your profile.
• Saved Locations: Addresses and geographic coordinates of locations you save for weather monitoring.
• Communication Data: Information you provide when contacting our support team or participating in surveys.
• Payment Information: Subscription purchases are processed through Apple App Store or Google Play Store; we receive transaction confirmations but do not directly collect or store your payment card details.

3.2 Information Collected Automatically

3.2.1 Location Data

The Hail Sentinel App collects location data to provide weather alerts and forecasts. We collect:

• Foreground Location: Your device's precise geographic location when the App is open and in use.
• Background Location ("Follow Me" Mode): With your explicit permission, the App may collect your location data even when the App is closed or not in use. This feature enables real-time weather alerts based on your current location as you travel. You can enable or disable this feature at any time in the App settings or through your device's location permissions.
• Location History: We may retain location data to improve forecast accuracy and provide historical weather information for your tracked locations.

3.2.2 Device Information

• Device type, model, and manufacturer
• Operating system type and version
• Unique device identifiers (such as device ID, advertising ID)
• Mobile network information
• Time zone and language settings
• App version

3.2.3 Usage Data

• App features accessed and actions taken
• Frequency and duration of App usage
• Crash reports and performance data
• Push notification interactions
• Search queries within the App

3.2.4 Push Notification Tokens

With your permission, we collect push notification tokens to send you weather alerts, storm warnings, and service communications.

3.3 Information from Third-Party Services

• Authentication Providers: If you sign in using Google, Apple, or other third-party authentication, we receive basic profile information as permitted by those services.
• Subscription Services: RevenueCat provides us with subscription status, purchase history, and entitlement information.

4. How We Use Your Information

We use your information for the following purposes:

4.1 Core Service Delivery

• Providing weather forecasts and hail predictions for your locations
• Sending push notifications for weather alerts and storm warnings
• Enabling the "Follow Me" feature for real-time location-based alerts
• Managing your account and saved locations
• Processing and managing your subscription

4.2 Service Improvement

• Analyzing App usage to improve features and user experience
• Improving forecast accuracy and alert timing
• Debugging and fixing technical issues
• Conducting research and development for new features

4.3 Communications

• Responding to your support requests and inquiries
• Sending service-related announcements and updates
• Providing information about subscription status and renewals

4.4 Legal and Safety

• Complying with legal obligations
• Protecting our rights, property, and safety
• Detecting and preventing fraud or abuse
• Enforcing our Terms of Service

5. Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the services you requested (account management, weather alerts, subscription services).
• Consent: Processing based on your explicit consent (location tracking, push notifications, marketing communications). You may withdraw consent at any time.
• Legitimate Interests: Processing necessary for our legitimate business interests (service improvement, security, fraud prevention), balanced against your rights and interests.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

6. Third-Party Services and Data Sharing

We use the following third-party services to operate the App:

6.1 Firebase (Google)

• Firebase Authentication: User account authentication and management
• Cloud Firestore: Database storage for user data and preferences
• Firebase Cloud Messaging: Push notification delivery
• Firebase Analytics: App usage analytics
• Firebase Crashlytics: Crash reporting and stability monitoring

Google's privacy policy: https://policies.google.com/privacy

6.2 RevenueCat

We use RevenueCat for subscription management and in-app purchase processing. RevenueCat receives:

• Anonymous user identifiers
• Purchase and subscription data from Apple/Google
• Device information for fraud prevention

RevenueCat's privacy policy: https://www.revenuecat.com/privacy

6.3 Apple and Google

In-app purchases are processed through Apple App Store (iOS) or Google Play Store (Android). These platforms have their own privacy policies governing payment processing.

6.4 Weather Data Providers

We may share anonymized or aggregated location data with weather data providers to receive accurate forecasts. This data cannot be used to identify you personally.

6.5 Other Disclosures

We may also disclose your information:

• To comply with legal process, court orders, or government requests
• To protect the rights, property, or safety of Icarus Inc., our users, or the public
• In connection with a merger, acquisition, or sale of assets (with notice to you)
• With your explicit consent for purposes not described in this Policy

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Policy:

Data Type	Retention Period
Account Data	While active + up to 3 years after deletion
Location Data (real-time)	Processed immediately, not permanently stored
Usage Data	Up to 2 years
Transaction Records	Up to 7 years (legal compliance)
Support Communications	Up to 3 years after resolution

When data is no longer needed, we securely delete or anonymize it.

8. Your Rights and Choices

8.1 All Users

All users have the following rights:

• Access: Request a copy of your personal information.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your account and personal data.
• Location Permissions: Control location access through your device settings at any time.
• Push Notifications: Manage notification preferences in the App or device settings.
• Account Deletion: Delete your account through the App settings or by contacting us.

8.2 European Users (GDPR Rights)

If you are in the EEA, UK, or Switzerland, you have additional rights:

• Right to Restriction: Request restriction of processing in certain circumstances.
• Right to Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.
• Right to Lodge a Complaint: File a complaint with your local data protection authority.

8.3 California Residents (CCPA/CPRA Rights)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: Request that we limit our use of sensitive personal information (including precise geolocation) to purposes necessary for providing the services.

To exercise your California privacy rights, contact us at privacy@hailsentinel.com or through the App's privacy settings.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, device ID)
• Geolocation data (precise location for weather services)
• Commercial information (subscription and purchase history)
• Internet or network activity (App usage data)
• Inferences drawn from the above

8.4 How to Exercise Your Rights

To exercise any of your privacy rights:

• Email us at privacy@hailsentinel.com
• Use the privacy controls in the App settings
• Submit a request through our support portal

We will respond to verifiable requests within the timeframes required by applicable law (generally 30 days for GDPR, 45 days for CCPA).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls limiting employee access to personal data
• Secure cloud infrastructure through reputable providers

While we strive to protect your information, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.

10. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Other lawful transfer mechanisms

By using the App, you consent to the transfer of your information to the United States and other jurisdictions as described in this Policy.

11. Children's Privacy

The Hail Sentinel App is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@hailsentinel.com. We will promptly delete such information.

12. Do Not Track Signals

The App does not respond to "Do Not Track" signals. However, you can control tracking through your device's privacy settings and the permissions you grant to the App.

13. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by:

• Posting the updated Policy in the App
• Sending a push notification or email (for significant changes)
• Updating the "Last Updated" date at the top of this Policy

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: