Privacy Policy

Last updated: October 14, 2026

Raindex (“Raindex”, “we”, “us”, “our”) provides rainfall measurement information for general awareness. This Privacy Policy explains what we collect, why, who processes it, and the choices and rights you have. It covers both the Raindex app and the raindex.app website.

Our commitment in one line: never sold, never used to advertise to you. We do not use advertising identifiers (no IDFA), we show no ads, we do not work with data brokers, and we never sell your personal information. We do measure product usage, and section 2.6 says exactly what that means and how to turn it off.

1. Who we are (Data Controller)

The data controller responsible for your information is:

• Raindex, operated by Kirill Proskurin
• Av. Serpa Pinto 534, 4450-277 Matosinhos, Portugal
• Contact: support@raindex.app

If you are in the EU/EEA or UK and have questions about your data, email the address above and we will route your request appropriately.

2. What the app collects, and why

2.1 Precise location — while in use only

We request “While Using the App” location permission, and use it to place a pin at where you are so you can save it as a location. We do not collect location in the background and we do not build a movement history of you. If you deny location permission, you can still add locations by searching for an address or dropping a pin on the map.

2.2 Saved locations

When you save a location (for example “Back field”, “Job site”) its coordinates and label are stored on our server. This is required for rainfall history and for server-side alerts: it lets us send you a push when rainfall at a saved place crosses your threshold without your phone tracking you in the background. Saved locations are linked to your anonymous device ID, not to your identity.

2.3 Anonymous device identifier

On first launch the app generates a random UUID stored in the iOS Keychain. It identifies your device to our backend so we can associate your saved locations, alert settings, subscription entitlement and push token. It is not the Apple advertising identifier (IDFA), it contains no personal information, and we cannot use it to identify you as a person. There are no user accounts and we do not ask for your name, email or phone number to use the app.

2.4 Push notification token

To deliver rainfall alerts we register an Apple Push Notification service (APNs) token and store it with your device record. It is used only to send Raindex notifications.

2.5 Subscription and purchase data

Purchases are made through Apple’s In-App Purchase. We use Adapty to manage subscriptions and validate App Store receipts so we can grant the correct entitlement. We receive your subscription status (active, trial, expired) and the product purchased. We never see or store your payment card details — Apple handles billing.

2.6 Product analytics — optional, opt-out available

With PostHog we record behavioral events (screens viewed, buttons tapped, paywall shown, subscription started) to understand how the app is used and improve it. These events do not include your precise coordinates. You can turn analytics off at any time in Settings. We do not use any advertising or attribution SDKs.

2.7 Diagnostics

Server-side error events may be recorded to help us fix bugs. Native app crashes are reported through Apple’s standard Xcode Organizer crash reporting, and only if you have enabled “Share With App Developers” in iOS settings.

3. What the website collects

The website is informational, with one tool: the rainfall lookup at /how-much-rain. If you type a ZIP code there, it is used once to fetch that area’s rainfall and is not stored. If you choose “Use my location”, your browser asks your permission first; the position is rounded to about 1 km in your browser before it is sent, used once the same way, and not stored; Raindex’s own servers strip it from their logs. No other page can ask for your location: the site’s permissions policy allows geolocation on this site only, never in embedded third-party content. Neither the ZIP nor the position is sent to analytics. We use privacy-friendly, cookieless aggregate analytics (PostHog) to count page views and link clicks. Like any website, our host (Vercel) may keep short-lived request logs.

4. Who processes your data (sub-processors)

We rely on a small set of vendors, each only for the purpose listed:

We do not sell, rent or trade your personal information, and we do not share it for advertising.

5. Legal bases (GDPR / UK GDPR)

• Performance of a contract— core features: rainfall totals, history, alerts, saved locations, subscriptions.
• Legitimate interests— security, abuse prevention, and product improvement. You can object; see section 7.
• Consent— analytics where required by law; you can withdraw it anytime in Settings.

6. Data retention

We keep your device record, saved locations and alert settings until you delete them. You can erase everything at any time via Settings → Delete my data, which removes your device, saved locations, alert configurations and alert history from our servers, then wipes local app data. We may also delete records after a prolonged period of inactivity. Aggregate, non-identifying analytics may be retained for trend analysis.

7. Your rights and choices

• Access / portability — get a copy of your data.
• Correction — fix inaccurate data.
• Deletion — erase your data (one tap in Settings → Delete my data, or email us).
• Object / restrict — to processing based on legitimate interests.
• Withdraw consent — turn analytics off in Settings at any time.

California residents (CCPA/CPRA): you have the right to know, delete and correct your personal information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information. We will not discriminate against you for exercising these rights.

Canada (PIPEDA and Québec’s Law 25):you can access and correct the personal information we hold about you, withdraw your consent (for example by turning analytics off or deleting your data in Settings), and ask how it is used. You may complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d’accès à l’information. The person responsible for protecting personal information is the operator named in section 1.

EU/EEA and UK:you may also lodge a complaint with your local data protection authority or with Portugal’s Comissão Nacional de Proteção de Dados (CNPD), where we are established.

To exercise any right, use the in-app Delete my data control or email support@raindex.app. We respond within the timeframe required by applicable law.

8. International data transfers

Our servers and some processors may store data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. If you are in Canada, your information may be stored and processed outside Canada, including in the United States and the EU, where it is subject to the laws of those countries.

9. Security

Data is encrypted in transit using HTTPS/TLS. We restrict access to backend systems and store only what we need. No method of transmission or storage is 100% secure, but we work to protect your information.

10. Children’s privacy

Raindex is not directed to children. We do not knowingly collect personal information from children under 13 (United States) or under 16 (EU/EEA). If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy. We will revise the “Last updated” date and, for material changes, provide a more prominent notice. Continued use after changes means you accept the updated policy.

12. Contact

Questions or requests: support@raindex.app.