Privacy Policy
Last updated: September 4, 2026
Raindex (“Raindex”, “we”, “us”, “our”) provides rainfall measurement information for general awareness. This Privacy Policy explains what we collect, why, who processes it, and the choices and rights you have. It covers both the Raindex app and the raindex.app website.
Our commitment in one line: never sold, never used to advertise to you. We do not use advertising identifiers (no IDFA), we show no ads, we do not work with data brokers, and we never sell your personal information. We do measure product usage, and section 2.6 says exactly what that means and how to turn it off.
1. Who we are (Data Controller)
The data controller responsible for your information is:
- Raindex, operated by Kirill Proskurin
- Av. Serpa Pinto 534, 4450-277 Matosinhos, Portugal
- Contact: support@raindex.app
If you are in the EU/EEA or UK and have questions about your data, email the address above and we will route your request appropriately.
2. What the app collects, and why
2.1 Precise location — while in use only
We request “While Using the App” location permission, and use it to place a pin at where you are so you can save it as a location. We do not collect location in the background and we do not build a movement history of you. If you deny location permission, you can still add locations by searching for an address or dropping a pin on the map.
2.2 Saved locations
When you save a location (for example “Back field”, “Job site”) its coordinates and label are stored on our server. This is required for rainfall history and for server-side alerts: it lets us send you a push when rainfall at a saved place crosses your threshold without your phone tracking you in the background. Saved locations are linked to your anonymous device ID, not to your identity.
2.3 Anonymous device identifier
On first launch the app generates a random UUID stored in the iOS Keychain. It identifies your device to our backend so we can associate your saved locations, alert settings, subscription entitlement and push token. It is not the Apple advertising identifier (IDFA), it contains no personal information, and we cannot use it to identify you as a person. There are no user accounts and we do not ask for your name, email or phone number to use the app.
2.4 Push notification token
To deliver rainfall alerts we register an Apple Push Notification service (APNs) token and store it with your device record. It is used only to send Raindex notifications.
2.5 Subscription and purchase data
Purchases are made through Apple’s In-App Purchase. We use Adapty to manage subscriptions and validate App Store receipts so we can grant the correct entitlement. We receive your subscription status (active, trial, expired) and the product purchased. We never see or store your payment card details — Apple handles billing.
2.6 Product analytics — optional, opt-out available
With PostHog we record behavioral events (screens viewed, buttons tapped, paywall shown, subscription started) to understand how the app is used and improve it. These events do not include your precise coordinates. You can turn analytics off at any time in Settings. We do not use any advertising or attribution SDKs.
2.7 Diagnostics
Server-side error events may be recorded to help us fix bugs. Native app crashes are reported through Apple’s standard Xcode Organizer crash reporting, and only if you have enabled “Share With App Developers” in iOS settings.
3. What the website collects
The website is a set of static informational pages. It does not request your location at all — browser geolocation is disabled site-wide by the page’s permissions policy, so nothing on this site is able to ask. We use privacy-friendly, cookieless aggregate analytics (PostHog) to count page views and link clicks.
4. Who processes your data (sub-processors)
We rely on a small set of vendors, each only for the purpose listed:
| Processor | Purpose | Data involved |
|---|---|---|
| Railway (hosting) | Run our backend and database | Device ID, saved locations, alert settings, push token, alert history |
| Apple | App Store purchases, APNs push delivery, crash diagnostics | Purchase receipts, push token, crash logs |
| Adapty | Subscription management and receipt validation | Device/subscription identifiers, subscription status |
| PostHog | Product analytics (opt-out) | Behavioral events (no coordinates) |
| Mapbox | Map tiles for the in-app map | Standard map tile and viewport requests |
| NOAA | Source of rainfall and forecast data | Public U.S. government data; we send them nothing about you |
We do not sell, rent or trade your personal information, and we do not share it for advertising.
5. Legal bases (GDPR / UK GDPR)
- Performance of a contract— core features: rainfall totals, history, alerts, saved locations, subscriptions.
- Legitimate interests— security, abuse prevention, and product improvement. You can object; see section 7.
- Consent— analytics where required by law; you can withdraw it anytime in Settings.
6. Data retention
We keep your device record, saved locations and alert settings until you delete them. You can erase everything at any time via Settings → Delete my data, which removes your device, saved locations, alert configurations and alert history from our servers, then wipes local app data. We may also delete records after a prolonged period of inactivity. Aggregate, non-identifying analytics may be retained for trend analysis.
7. Your rights and choices
- Access / portability — get a copy of your data.
- Correction — fix inaccurate data.
- Deletion — erase your data (one tap in Settings → Delete my data, or email us).
- Object / restrict — to processing based on legitimate interests.
- Withdraw consent — turn analytics off in Settings at any time.
California residents (CCPA/CPRA): you have the right to know, delete and correct your personal information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information. We will not discriminate against you for exercising these rights.
To exercise any right, use the in-app Delete my data control or email support@raindex.app. We respond within the timeframe required by applicable law.
8. International data transfers
Our servers and some processors may store data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
9. Security
Data is encrypted in transit using HTTPS/TLS. We restrict access to backend systems and store only what we need. No method of transmission or storage is 100% secure, but we work to protect your information.
10. Children’s privacy
Raindex is not directed to children. We do not knowingly collect personal information from children under 13 (United States) or under 16 (EU/EEA). If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy. We will revise the “Last updated” date and, for material changes, provide a more prominent notice. Continued use after changes means you accept the updated policy.
12. Contact
Questions or requests: support@raindex.app.