Last updated: 3 September 2026
Windy Weather World Inc., a company duly incorporated in Delaware, having its registered address at 2093 Philadelphia Pike, Claymont, Delaware ("WindyApp" or "we", "our", "us"), receives, collects, stores, and manages users' personal data in accordance with this Privacy Policy. We take pride in treating our users' privacy the way we would like to be treated ourselves. We make sure we comply with applicable US data privacy laws, the EU General Data Protection Regulation, and other applicable laws and regulations.
This Privacy Policy explains how WindyApp collects and uses personal data when you use the Windy.app mobile application and related services (the "App" and the "Services").
Information for California, Nevada, and Virginia Residents:
If you are a California resident, please refer to the "Additional Information for California Residents" below. If you are a Nevada resident, please refer to the "Additional Information for Nevada Residents" below. If you are a Virginia resident, please refer to the "Additional Information for Virginia Residents" below.
1.1.1 You may provide us with your personal data in a number of ways, including, without limitation, when you sign up for and use the Services; purchase a subscription or make any payment for the Services; subscribe to alerts, information releases, news, newsletters, updates, or media releases; complete and submit forms to us; post content on or through the App; contact us directly; communicate with us for any matter; or interact with the App generally.
1.1.2 Personal data that may be provided by you includes:
1.1.3 We process personal data on different legal bases depending on the purpose of processing, as described in Section 3.2 below. Where processing is based on your consent, you may withdraw it at any time by contacting our support team at support@windyapp.co.
1.2.1 We collect data from users of the App. In particular, we automatically collect information about your use of the Services and your interactions with the App. This information may include your IP address, device and operating-system information, app version, language, country or region, device or app-instance identifiers, advertising identifiers where permitted by applicable law, diagnostic information, the date and time of access, and other information about how you interacted with the App and Services.
1.2.2 For app analytics and product improvement, we use Google Analytics for Firebase (also referred to as Firebase Analytics), provided by Google LLC (https://firebase.google.com/docs/analytics), and Amplitude (https://amplitude.com/). These services may process pseudonymous usage data, including app events, app-instance or device identifiers, device and app information, language, country or region, and diagnostic information. We do not intentionally send passwords, payment card details, or the contents of private user communications to these analytics services.
1.3.1 We may receive data about how and when you use the Services, store it in log files or other types of files associated with your account, and link it to other information we collect about you. This data may include, for example, your IP address, date and time of access, device and app information, and actions you have taken within the App. This type of data helps us improve our Services for you and for all of our users.
1.5.1 We may receive personal data from third parties in connection with your use of the App, including:
1.6.1 Please be informed that WindyApp does not collect or process special categories of personal data under Article 9 of the GDPR, including health data, biometric data used to uniquely identify a person, genetic data, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning a person's sex life or sexual orientation.
2.1 Minors and children under the age of 16, or another legal age applicable in your country of residence, should not use our Services. If you are between 13 and 16 years of age, you must obtain written consent from a parent or legal guardian, unless the law of your country of residence prescribes a higher age requirement. We do not knowingly provide Services to minors. If you access our Services, you represent that you have the legal capacity to enter into a binding agreement.
3.1 We use your personal data for the following purposes:
We use the following lawful bases under Article 6 of the GDPR. The applicable basis depends on the purpose and context of the processing:
| Processing purpose | Categories of personal data | Lawful basis |
|---|---|---|
| Providing and operating the Services; account and authentication management | Account and profile data, email address, user ID, authentication data, preferences, onboarding data, saved locations, and essential technical data. | Contract — Article 6(1)(b). |
| Location-based features and localization | Device location, selected location, saved spots, and location preferences. | Contract where necessary for a feature requested by you; consent where required by applicable law. |
| Subscriptions, payments, and transaction administration | Subscription status, purchase history, transaction IDs, billing information, and purchase-flow data. | Contract — Article 6(1)(b); legal obligation — Article 6(1)(c) for accounting and tax records. |
| Customer support and communication about the Services | Contact details, account information, and the content of your request. | Contract or pre-contractual steps — Article 6(1)(b); or legitimate interests — Article 6(1)(f), depending on the context. |
| Security, fraud prevention, troubleshooting, and technical operation | IP address, device and app identifiers, technical data, network data, logs, diagnostics, and actions in the App. | Legitimate interests — Article 6(1)(f). |
| Product analytics and improvement, including Firebase Analytics, Amplitude, Snowplow, and GrowthBook | App-instance or device identifiers, app events, usage and session data, experiment assignments, feature configuration, and technical diagnostics. | Consent — Article 6(1)(a), under the “Analytics and product improvement” category. |
| Campaign measurement and attribution through AppsFlyer | Advertising and device identifiers, AppsFlyer ID, installation data, campaign data, attribution events, and app launches. | Consent — Article 6(1)(a), under the “Campaign measurement” category. |
| Service notifications requested by you | Email address, push token, notification settings, and subscription or alert preferences. | Contract — Article 6(1)(b). |
| Marketing communications | Email address, push token, marketing preferences, and campaign history. | Consent — Article 6(1)(a), subject to applicable electronic communications laws. |
| Legal obligations, legal claims, and protection of rights | Relevant account, subscription, payment, communication, security, and log data. | Legal obligation — Article 6(1)(c), and legitimate interests — Article 6(1)(f). |
Where processing is based on consent, you may withdraw your consent at any time by writing to our support team at support@windyapp.co. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
4.1 We share personal data only where necessary for the purposes described in this Privacy Policy and on an applicable legal basis, including performance of a contract, consent, compliance with legal obligations, or our legitimate interests. We may also share anonymised information that no longer identifies you where appropriate for those purposes.
4.2 WindyApp is operated from the United States. If you visit the App or use the Services from outside the United States, your personal information may be processed in the United States, Europe, or other countries where we or our Service Providers operate.
Personal data disclosed to Google Analytics for Firebase and Amplitude, Inc. may be transferred to and processed in the United States.
Transfers to the United States are made, as applicable, under the EU–U.S. Data Privacy Framework and its UK Extension. Where these frameworks do not apply, the transfers are protected by the European Commission's Standard Contractual Clauses and, for transfers subject to the UK GDPR, the UK International Data Transfer Addendum.
Personal data disclosed to AppsFlyer Ltd may also be transferred to and processed in Israel and in other countries where AppsFlyer or its subprocessors operate. Transfers to Israel are based on the applicable adequacy decision. Where personal data are transferred to a country that is not covered by an adequacy decision, AppsFlyer relies on the European Commission's Standard Contractual Clauses and, for transfers subject to the UK GDPR, the UK International Data Transfer Addendum.
4.4 We may share personal information with people and entities that perform certain tasks on our behalf and are under our control (our "Service Providers"). We share only the information reasonably necessary for them to provide their services, and they may not use it for other purposes except as permitted by applicable law. Our relevant Service Providers include:
| # | Entity name | Webpage | Purpose |
|---|---|---|---|
| 1. | Google LLC | https://firebase.google.com/docs/analytics | Google Analytics for Firebase (Firebase Analytics) for app analytics and product improvement. |
| 2. | Amplitude, Inc. | https://amplitude.com/ | Product analytics and improvement of the Services. |
| 3. | AppsFlyer Ltd | https://www.appsflyer.com/ | Campaign measurement and attribution. |
| 4. | Stripe, Inc. | https://stripe.com/ | Payment processing and related payment services. |
| 5. | Zendesk, Inc. | https://www.zendesk.com/ | Customer support and management of support requests. |
| 6. | Apple App Store | https://www.apple.com/legal/privacy/ | Subscription and purchase processing for Apple users. |
| 7. | Google Play | https://policies.google.com/privacy | Subscription and purchase processing for Android users. |
4.5 We also use Snowplow and GrowthBook, which are self-hosted and operated by WindyApp. Snowplow is used for product analytics and GrowthBook is used for product experimentation and feature evaluation. These systems are not third-party cloud services.
4.6 Depending on the service and configuration, data transmitted to external services may include pseudonymous usage, device, app, and campaign-attribution data. We do not sell your personal information. We take reasonable steps to limit the information shared with each Service Provider to what is necessary for the relevant purpose.
5.1 The protection of your personal data is vital to us. We take commercially reasonable measures to protect your personal data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, considering the risks involved in the processing and the nature of the personal data. Our employees, contractors, and business partners may access personal data only on a need-to-know basis and under a strict duty of confidentiality. We use encryption for sensitive information and regularly test our systems to help ensure compliance with industry practices and standards. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
5.2 You agree to protect the security of your login information and password and not to transfer that information to any third party. We will not be liable to you for the use of your account by any third party.
5.3 If you become aware of any unauthorized use of your account, you must immediately notify us in writing.
6.1 You may access personal data held by us to correct, update, and remove inaccurate or incorrect data. Subject to applicable law, you may:
6.2 If you want to view, change, or remove data associated with your account, please contact us at support@windyapp.co. You may also withdraw your consent at any time by writing to our support team at support@windyapp.co. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. We will respond to your request without undue delay and in any event within one month of receiving it. This period may be extended by up to two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension and the reasons for it within one month of receiving your request. We generally do not charge a fee; however, where permitted by applicable law, we may charge a reasonable fee or refuse to act if a request is manifestly unfounded or excessive, in particular because of its repetitive character.
6.3 We do not carry out solely automated decision-making that produces legal or similarly significant effects concerning you within the meaning of Article 22 of the GDPR. We may use your selected activity type and country of residence to adapt the App for your convenience, including by displaying the appropriate system of measurement. We may also use aggregated or pseudonymous analytics data to understand product usage and improve the Services. These activities do not produce legal or similarly significant effects concerning you.
7.1 We may amend this Privacy Policy from time to time. Use of information we collect is subject to the Privacy Policy in effect at the time that information is used. If we make major changes in the way we collect or use information, we will notify you by posting an announcement on the App or sending you an email.
8.1 If WindyApp merges with or is acquired by another company or organization, or sells all or a portion of its assets, your personal data may be disclosed to our advisers and any prospective purchaser or the purchaser's adviser and may be among the assets transferred. Personal data will remain subject to this Privacy Policy.
9.1 We retain your personal data primarily in the United States and Europe. Unless a longer period is required by law or is necessary for the establishment, exercise, or defense of legal claims, we retain personal data for up to 10 years from the date of collection or from your last interaction with the Services, whichever is later. We may retain data for this period where necessary for the provision of Services, payment and accounting records, auditing, security, fraud prevention, or legal purposes. When the applicable retention period expires, we delete or anonymize the data in accordance with our procedures.
9.2 Countries where we process information may have laws that are different, and potentially not as protective, as the laws of your own country. We will comply with applicable laws when processing your information.
10.1 This section describes how we handle the personal information of California residents under the California Consumer Privacy Act ("CCPA"). It covers personal information that we collected, shared, or used during the last 12 months.
10.2 We describe the personal information we collect in Section 1, "Data Collected." Section 3, "Use of the Data," explains how we use personal information.
10.3 We share certain personal information as described in Section 4, "Sharing of Data." However, we do not sell your personal information to third parties.
10.4 WindyApp does not knowingly collect personal information from users younger than 16 years old.
10.5 In accordance with the CCPA, California residents are entitled, in addition to the rights described in this Privacy Policy, to:
10.6 To exercise your rights, please contact us at support@windyapp.co.
10.7 WindyApp does not tolerate discrimination. The quality of our Services is equal for all users and customers, irrespective of whether you exercise your rights under the CCPA.
11.1 WindyApp does not sell its users' personal information. Nonetheless, Nevada residents have the right to submit a request that we do not sell their covered personal information by contacting us at support@windyapp.co.
12.1 The Virginia Consumer Data Protection Act provides Virginia residents with certain rights, such as:
12.2 WindyApp does not sell personal information.
13.1 If you have any questions or concerns, please email us at support@windyapp.co.