Privacy Policy for Leeward

Last Updated: April 7, 2026

Overview

Leeward is a free hurricane tracking application for the Caribbean region. This privacy policy explains how we collect, use, and protect your information.

Information We Collect

Anonymous User Identifier

On first launch, Leeward generates a random anonymous identifier (UUID) stored in your device's secure Keychain. This identifier:

• Is not linked to your name, email, Apple ID, or any personal information
• Is used solely to count unique users, measure app reliability, and enable data deletion
• Survives app reinstalls (Keychain persistence) but not device resets
• Can be permanently deleted via "Delete My Data" in Settings

Legal basis (GDPR): Legitimate interest in service reliability and analytics. This identifier is a pseudonymous identifier under GDPR Article 4(5).

Device Token

When you enable push notifications, we collect your device's push notification token. This token is used solely to send you hurricane alerts for your selected Caribbean region.

Island Group Preference

We store your selected island group preference (e.g., Virgin Islands, Puerto Rico, Leeward Islands) and send it to our server for notification targeting. Your preference is also stored locally on your device.

Activity Data

We record the last time your device fetched weather data (debounced to at most once per hour). This is used to measure daily/monthly active users and detect inactive devices. No browsing history, location history, or usage patterns are collected.

How We Use Your Information

Push Notifications

Your device token is sent to our secure servers and used exclusively to deliver time-sensitive hurricane alerts when weather conditions change in your selected region.

Weather Data

The app fetches current hurricane advisory data from our servers based on your selected island group. This data is publicly available from the National Hurricane Center (NHC) and processed by our AI system to provide clear, actionable information.

Data Storage and Security

Device Token Storage

• Device tokens are stored securely on our Google Cloud Platform servers
• Tokens are encrypted in transit using HTTPS/TLS
• We retain tokens only while you have the app installed with notifications enabled
• Tokens are automatically removed from our system if push notifications fail (indicating app uninstallation)

Local Storage

• Your island group preference is stored locally on your device
• Your anonymous identifier is stored in your device's secure Keychain
• No personal information (name, email, location) is stored on our servers
• You can change your island group preference at any time

Third-Party Services

Google Cloud Platform

We use Google Cloud Platform to host our backend services. Data transmitted to our servers is subject to Google Cloud Platform's security and privacy practices.

National Hurricane Center (NHC)

Weather data is sourced from the National Hurricane Center's publicly available RSS feeds and tropical weather outlooks.

Gemini AI

Hurricane advisories are analyzed using Google's Gemini AI to generate clear, easy-to-understand summaries. No personal information is sent to Gemini — only publicly available weather data.

Your Rights and Choices

Notifications

You can enable or disable push notifications at any time through:

• The app's settings screen
• Your iPhone's Settings > Notifications > Leeward

Data Deletion

You can delete all your data from our servers at any time:

1. In-app: Go to Settings > "Delete My Data" — this permanently removes your device registration, anonymous identifier, and all associated data from our servers, and resets your local app settings
2. Disable notifications in the app settings, or
3. Uninstall the app (device token automatically removed after delivery failures)

Data deletion is processed immediately. There is no retention period after deletion.

Island Group Selection

You can change your selected island group at any time in the app's settings screen.

Children's Privacy

Leeward does not knowingly collect information from children under 13. The app is designed for general audiences and does not require age verification.

Data Retention

• Device tokens: Retained while the app is installed and notifications are enabled
• Anonymous identifier: Retained until you delete it via "Delete My Data" or reset your device
• Activity timestamps: Last-active time retained alongside device registration
• Failed tokens are automatically removed after delivery failures
• Devices with no activity for 60+ days may be marked inactive and stop receiving notifications

International Data Transfer

Our servers are located in Europe (Google Cloud europe-west1 region). By using Leeward, you consent to the transfer of your device token to our European servers.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties. Ever.

Contact Information

If you have questions about this privacy policy or our privacy practices, please visit our website at stormtracker-850293544854.europe-west1.run.app.

GDPR Rights (EU/EEA Users)

If you are located in the EU/EEA (including French Caribbean territories: Guadeloupe, Martinique, Saint-Martin, Saint-Barthélemy), you have the following rights under the General Data Protection Regulation:

• Right of access: You can view your data via the app's Settings
• Right to erasure: Use "Delete My Data" in Settings to permanently delete all server-side data
• Right to data portability: Your data consists of an anonymous identifier and island preference — available in the app
• Right to object: You can disable notifications or delete your data at any time

Data controller: Leeward App. Data processing location: Google Cloud Platform, Europe (europe-west1).

Legal Compliance

This app and privacy policy comply with:

• Apple's App Store Review Guidelines
• General Data Protection Regulation (GDPR) (EU/EEA users, including French Caribbean)
• California Consumer Privacy Act (CCPA) (California users)

Your Consent

By using Leeward, you consent to this privacy policy.

Summary:

• We collect your device token (for push notifications) and an anonymous identifier (for service reliability)
• No names, emails, locations, or personal data — ever
• No ads, no third-party sharing, no data sales
• You can delete all your data instantly via Settings > "Delete My Data"