Privacy
Privacy Policy
No accounts. No analytics SDKs. No trackers. No server that stores anything about you. This policy is long because the alternative is vague — and vague privacy policies are how apps lie.
The one-paragraph version
Quiet Sky has no user accounts, no analytics SDKs, no crash-reporting SDKs, no advertising IDs, no third-party trackers, and no server-side database of records tied to you. The app talks to weather, air-quality, sunset-quality, build-status, and geocoding APIs through a proxy we operate on Cloudflare Workers. The proxy forwards the minimum route data needed for each request and does not log requests to durable storage. Quiet Sky uses precise location when you allow it, because accurate forecasts and nowcasts need it. The weather providers receive the coordinates needed to compute your forecast, but never anything that identifies you. The proxy strips your IP, device, and identity before the request reaches any provider (see Section 2). Upstream APIs receive the Worker's IP, not yours. Your saved locations live only on your device. You can lower forecast location precision in Settings. We have no account system and no way to identify you, and we do not sell or share your personal information. The base map is served first-party from our own Cloudflare storage, and radar imagery is routed through the proxy as well, so map and radar traffic does not expose your IP or identity to a third-party map provider (see Section 3).
1. What data the app collects on your device
| Data | Source | Stored where | Sent anywhere? |
|---|---|---|---|
| Current location | Android location permission, if you allow it | On your device as "Current location" | Coordinates sent to weather APIs through the proxy at your selected precision (§3). |
| Locations you add | You type them or pick from search | On your device, app-private storage | Coordinates sent to weather APIs (§3). City names are not sent. |
| Provider preference | Your selection in Settings | On your device | No |
| Theme preference | Your selection in Settings | On your device | No |
| Forecast cache | Returned by the API for a location you asked about | On your device | No |
No personal information is collected. Quiet Sky does not ask for your name, email, phone number, or date of birth. There are no accounts, no sign-in, and no way to "log in."
Quiet Sky requests Android location permission only when you ask for local weather. On Android 12+ you can choose Precise or Approximate in the system prompt. Quiet Sky defaults forecast requests to full precision for nowcast accuracy, and lets you lower precision to Neighborhood or Coarse in Settings. It does not run background location tracking.
2. What data we collect on our server
We operate a Cloudflare Worker at aurora-weather-proxy.coldironguard.workers.dev that the app uses as a proxy between your device and upstream weather APIs. The proxy exists for three concrete reasons: (a) so we can swap providers without shipping a new APK, (b) so upstream API keys are not embedded in the client, and (c) so upstream APIs see Cloudflare's IP and not yours.
The proxy does not log requests to durable storage. Cloudflare's edge nodes write short-lived operational logs (retained ~7 days for the platform's own ops/abuse purposes). We do not enable Logpush, write to a database, or keep an analytics view. We cannot retrieve what your device asked for an hour ago, much less a day ago.
The proxy does not associate requests with users, because there is no user identity to associate them with. No per-device API key, no token, no cookie, no fingerprint.
What the proxy briefly handles while processing a request:
- The latitude/longitude you asked about for weather, AQI, and sunset-quality routes.
- The search text you typed for the location-search route.
- The type of data requested (forecast, hourly, AQI anchor, sunset quality, build status, place lookup).
- The HTTP headers your device sends. The proxy does not forward your device's User-Agent to providers; upstream requests carry only a generic proxy header and the provider API key.
- Your IP address, because Cloudflare's edge needs it to route the response. The Worker code does not read, log, or persist it.
What the proxy does not see, ever:
- The names of locations you've saved on your device.
- Your other locations (each request is for one lat/lon at a time).
- Any identifier that could be tied to your device or account across requests.
3. Third-party services and what they see
Quiet Sky uses these upstream APIs. Weather, air-quality, sunset-quality, build-status, and location-search requests go through our Cloudflare Worker proxy, so those upstream APIs receive our Worker's Cloudflare IP, not yours. The base map is served first-party from our own Cloudflare R2 storage, so no third-party map provider receives your requests, and radar tile imagery is routed through the proxy. The map and radar providers and the proxied radar-tile path are listed below.
| Upstream | What they receive per request | Privacy policy |
|---|---|---|
| Open-Meteo | Lat, lon, request parameters, via the Quiet Sky proxy | terms |
| Open-Meteo Air Quality | Lat, lon, AQI parameters, via the proxy | terms |
| Open-Meteo Geocoding | The text you type into search, via the proxy | terms |
| Foreca | Lat, lon, request parameters, via the proxy | privacy |
| Pirate Weather | Lat, lon, request parameters, via the proxy | docs |
| IQAir AirVisual | Lat, lon, via the proxy | privacy |
| SunsetHue | A broad location bucket (~55 km) and local date, via the proxy. The proxy coarsens coordinates for this route before sending; it never receives your IP, device, or identity. | privacy |
| RainViewer | Radar frame metadata and radar tile imagery are routed through the proxy by default in all builds. A developer-only build flag can opt out to the direct provider for debugging; release builds are always proxied. | privacy |
| Protomaps (self-hosted) | Production base map. Vector tiles are built from OpenStreetMap data and served from Quiet Sky's own Cloudflare R2 storage as a first party; no third-party basemap provider receives your requests. | First-party — covered by this policy |
| OpenStreetMap contributors | Source map data for the base-map tiles. Map data © OpenStreetMap contributors, used under the Open Database License. No requests are sent to OpenStreetMap from your device. | copyright / license |
Quiet Sky does not embed Firebase, Google Analytics, Crashlytics, Mixpanel, Amplitude, Sentry, Bugsnag, Adjust, AppsFlyer, the Facebook SDK, ironSource, Mintegral, Pangle, Unity Ads, AdMob, or any other analytics, attribution, or advertising SDK. Inspect the APK if you like — classes.dex will not contain any of those packages.
4. Permissions the app requests
| Permission | Used for | Required? |
|---|---|---|
ACCESS_FINE_LOCATION | Precise current-location forecasts and nowcast accuracy. Coordinates go only to weather providers through our proxy, which strips your IP, device, and identity first. | Optional — choose Approximate at the Android prompt, or search for a place instead. |
ACCESS_COARSE_LOCATION | Filling the first forecast from your approximate current location. | Optional — deny it and search for a place instead. |
POST_NOTIFICATIONS | Severe-weather alerts and daily summaries. Both off by default. | Optional — deny it and the app still works. |
ACCESS_NETWORK_STATE | Checking whether you're online before making a request. | Yes — used to avoid failed requests when offline. |
INTERNET | Talking to the weather proxy and, for map/radar, the selected provider. | Yes — denying it means no weather or map data. |
RECEIVE_BOOT_COMPLETED | Rescheduling background refresh after reboot. | Yes. No network activity at boot itself. |
Quiet Sky does not request contacts, calendar, microphone, camera, SMS, phone, storage outside its own private directory, Bluetooth, NFC, USB, or any "special" permissions like SYSTEM_ALERT_WINDOW or accessibility services. It requests precise location (ACCESS_FINE_LOCATION) only for forecast accuracy, and the proxy strips your IP, device, and identity before any request reaches a provider.
5. The Play Billing case
If you subscribe to Quiet Sky Pro (when subscriptions launch), the transaction is handled entirely by the Google Play Billing Library. We do not see your payment method. Google tells us "this purchase token belongs to an active subscription"; we cache that locally on your device. We do not get your name, email, billing address, or last four digits.
We do not currently operate a backend that records subscription state, so validation is done client-side against Google Play. If you uninstall and reinstall, the Play Billing Library restores your entitlement from Google's record.
6. Children
Quiet Sky is not directed at children under 13. We do not knowingly collect data from anyone — including children — because we don't have a backend that collects data.
7. Data retention
- Server side: Nothing is stored, so retention is "the request duration." Cloudflare's edge logs follow Cloudflare's policy (currently ~7 days).
- Device side: Your saved locations, preferences, and last-known forecast cache stay on your device until you clear app data or uninstall.
8. Your rights under GDPR / CCPA
Data controller. Quiet Sky is operated by Quiet Sky LLC (Spokane, WA, USA), reachable at [email protected]. Because the app keeps no server-side records tied to you, there is no centralized profile to administer.
The "right to know what we have on you" and "right to delete" both resolve trivially: we don't have anything on you to know about or to delete. There is no server-side record tied to you.
No sale or sharing of personal information. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). We have never done so and have no mechanism to. Because we do not sell or share personal information, no "Do Not Sell or Share My Personal Information" action is needed.
To clear what's on your device: Settings → Apps → Quiet Sky → Storage → Clear data. To be sure the proxy never sees you again: stop using the app. There is no account to close.
9. Security
Network traffic is HTTPS only. The app trusts the standard system certificate store. Local storage uses Android's standard app-sandbox protection; we don't currently encrypt the local DataStore with a user-derived key (it's protected by Android's userdata-partition encryption, the platform default).
10. Changes to this policy
If we change this policy, the new version replaces this one at the same URL and the effective date updates. If a change materially expands what data flows where, we'll note it in the app's "What's new" release notes for that version.
11. Things we'd rather be honest about than hide
- No Tor mode. Your ISP can see that you're talking to
coldironguard.workers.dev, just not what's in the request. - We don't claim to be GDPR/CCPA "compliant" as a marketing checkmark. We designed around not collecting data, which is the only honest way to make those frameworks easy.
- Cloudflare is a US company subject to US legal process. We would have nothing to hand over because the Worker writes none. Cloudflare's 7-day edge logs are subject to Cloudflare's own legal-process handling, not ours.
- The proxy proxies. It is not a VPN, Tor, or a mixnet — it's an HTTPS forwarder that terminates your IP at Cloudflare rather than at the upstream API.
12. Contact
Quiet Sky LLC — [email protected]. If you find a bug, a security issue, or something this policy says that turns out not to be accurate, please email and I'll respond.