隐私

草稿——将经过法律审核并补充完整。以德语版本为准。

本文仅有德语和英语版本。以下为英语版本，以德语版本为准。

Last updated: October 2026

In short

No ads, no tracking, no accounts. Your exact location is never stored: our server immediately converts the coordinates into an area of about 5 × 5 km and discards them. You can delete everything we store about your device from within the app at any time – only the start of a trial week is kept for one year (see below).

Controller

Gerhard Kanzler, RZ-Solutions, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany · grantwetter@rz-solutions.dev

Location and weather

The app only asks for your location while you use it. The coordinates are sent encrypted to our server, which turns them into an area (geohash, approx. 5 × 5 km). We request weather data for the centre of that area from Apple Weather (WeatherKit, Apple Inc.) – never for your location. The place name shown in the app is looked up by your device itself using Apple's map service.

Device ID and abuse protection

To make sure only genuine Grantwetter apps can use our server, the app creates a random device ID. The server only stores a hash of it. In addition, Apple's "App Attest" confirms that requests come from an unmodified app. For rate limits we use your IP address only in hashed form and only briefly.

What is stored

The hashed device ID, the area, language, time zone, chosen persona and design, a push token if you enable notifications, and the status, expiry and product of your Grant Pass (details below). This device data is deleted automatically after 180 days of inactivity. To delete it right away: Settings › Privacy in the app.

Trial week

When you start the trial week, the app reports it to our server. The server stores only the hashed device ID and its own start time – so that each device gets exactly one trial week and personal comfort works during that week. This record is kept for one year even if you delete your data in the app (otherwise the week could be restarted at will) and is then deleted automatically. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

Comfort push

Only if you turn it on: on iPhone, notifications are delivered by Apple through its Apple Push Notification service, on Android by Google (see below). For this we additionally store your chosen times and, per day, a short entry of which line was sent – so you get at most one push a day. These entries are deleted after 30 days; when you turn push off, we remove the push token and the area right away.

Rain radar and rain alert

For the rain ticker the app asks our server about rain in your area (about 5 × 5 km). Our server gets the values from GeoSphere Austria in Austria, from the German Weather Service in Germany and from Apple Weather elsewhere – only the centre of the area is sent there, never your location and no device ID. We keep the values per area for at most 6 hours. The radar map images also come from our server, not directly from the weather services. The rain alert (Grant Pass) only exists if you turn it on: then, as with the comfort push, we store the push token and the area, plus lead time and quiet hours, and per alert a short entry of when an alert went out for which area – so you get at most two alerts a day. These entries are deleted after 7 days; when you turn the alert off, we remove the push token and the area right away unless the comfort push is still on.

Grant Pass (subscription)

Purchase and payment are handled entirely by Apple. We only receive the purchase receipt signed by Apple to check whether your Grant Pass is active – no payment details, no name, no Apple ID. We store the status, expiry date, product and the subscription's transaction number.

Line statistics

The app counts which lines were shown to you and sends this to our server once a day: only the line's identifier, how often it appeared and the language. The server keeps daily counters per line – no device ID, no location, nothing linked to you – and deletes them after 400 days. This tells us for which weather we are short of lines. You can turn it off in the app under Settings › Privacy. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

Personal comfort (AI)

Only when you tap "Personal comfort" with the Grant Pass or during the trial week do we send the chosen persona, weather condition, temperature, grant score, time of day and the displayed place name to Anthropic PBC (USA), which writes the text using the Claude model. No device ID or other identifier is sent. We do not store the text, only how many requests were made (for costs and limits). The transfer to the USA is based on the EU Standard Contractual Clauses.

Only on your device

Your sticker album, poke streak, recently shown lines, saved places and settings stay on your device (and in the app group used by widgets). Settings are synced between iPhone and Apple Watch directly via Apple, not through our server.

Android app

Everything above also applies to the Android app, with these differences: the device determines your location via Google Play services (Fused Location Provider) and the place name via Android's Geocoder, which uses Google services for this. Instead of "App Attest" the app uses Google's Play Integrity API: Google confirms to our server that the request comes from the unmodified app, installed from Google Play, on a genuine device. Google processes data about the app and device for this under its own terms; we only receive the result of this check, do not store it and only note that the device is verified. If verification fails, the app uses a restricted session without device attestation. The random device ID and your trial week period are kept in the app's settings and are included in the Android backup of your Google account if you have it turned on. Purchase and payment of the Grant Pass are handled entirely by Google Play. The app sends us the Google Play purchase token, and our server uses it to check via the Google Play Developer API whether your Grant Pass is active. We store the status, expiry date, product, order number and a hash of the purchase token (not the token itself) – no payment details, no name, no Google account. On Android, the comfort push and the rain alert are delivered by Google via Firebase Cloud Messaging: the app receives a push token from Google, which we store as described above; the notification itself contains the line and title keys, but neither your location nor a device ID. A push token is only created once you turn on push or the rain alert. With "Send feedback", the Android version and device model are sent instead of the iOS version and device type.

Website

The website runs on our own server in a data centre in Germany. When you visit it, technically necessary data (IP address, time, requested page, browser) is processed in server logs to keep the service secure. The logs are rotated automatically and not analysed. The website sets no tracking cookies – only cookies for your chosen language and design and, in the admin area, login cookies for administrators.

Contact

Messages sent through the contact form on the website and through “Send feedback” in the app are processed with Tellstack (tellstack.app), solely to answer and evaluate your feedback. From the app we only send your text, the type you picked (if any), your e-mail address (only if you enter it), the app version, iOS version, device type (iPhone or iPad) and language setting. No device ID, no location.

Legal bases

Providing the app and the Grant Pass: Art. 6(1)(b) GDPR. Abuse protection, server logs and rate limits: legitimate interest under Art. 6(1)(f) GDPR. Personal comfort and push notifications: your request or consent (Art. 6(1)(a) and (b) GDPR).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Just contact us using the details above. You can also lodge a complaint with a supervisory authority, for example the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.