your privacy

Privacy Policy

Last updated: August 9, 2026

This policy explains how Sunno (“Sunno,” “we,” or “us”) handles information in connection with the Sunno mobile app (the “app”). We built Sunno on a simple premise: a weather app does not need to know who you are, where you live, or what you do.

The short version

  • ✓ No ads. Ever.
  • ✓ No analytics, profiling, or tracking.
  • ✓ We never sell or share your data.
  • ✓ Your precise location never leaves your device; it's rounded first.
  • ✓ No account, no email, no identifier linking your sessions.
  • ✓ Our server caches weather to stay fast, but stores nothing about you.

Information we handle

Location

The app uses your device's location to show weather for where you are. Before any coordinate leaves your phone, it is rounded to two decimal places, a grid of roughly 1.1 km. Full GPS precision is used only to compute that rounded value and is never transmitted, stored, or logged. Location is optional: you can use the app entirely with city search and never grant location permission.

Billing and subscriptions

Subscriptions are processed by Apple's App Store or Google's Play Store, and subscription status is validated through Qonversion. We receive only what is necessary to confirm your subscription and grant access: anonymized purchase and entitlement data. We never see or store your full payment card details; those are handled by Apple, Google, and your bank.

Data stored on your device

Your saved places, unit preferences, notification settings, and cached forecasts are stored locally on your device. They are never synced to our server, and we have no way to read them.

What we do not do

  • We do not serve advertising of any kind.
  • We do not include analytics, attribution, or advertising SDKs.
  • We do not track your behavior across sessions or across other apps.
  • We do not sell, rent, or share your information with third parties for their own purposes.
  • We do not store your IP address, your precise location, or a record of what you have looked up.

How requests reach our server

When you open a forecast, your rounded coordinates are sent to our server, which fetches weather data from our providers, caches it, and returns it to you. The cache is keyed to the rounded grid, so nearby users share the same cached data, which is also why the privacy boundary and the cost of running the service reinforce each other rather than trade off.

Our server logs record only the request method, path, status code, cache outcome, and duration. They deliberately omit your IP address and the query string (which carries coordinates). The cheapest way to keep data private is to never write it down.

Third-party data sources

To deliver forecasts, radar, and alerts, our server contacts the following providers on your behalf. Your device never contacts them directly.

  • XWeather: forecasts, place search, historical weather, and marine conditions. Receives a rounded coordinate (~1.1 km) and nothing identifying.
  • Open-Meteo: model-spread data showing how much forecast models disagree, plus air-quality readings. Receives an even coarser coordinate (~11 km) and nothing else.
  • Atmospore: pollen levels and the 7-day pollen outlook. Receives a rounded coordinate and nothing identifying.
  • NOAA / NWS (U.S. National Weather Service): severe-weather alerts. Receives zone requests from our server's address, not yours.
  • LibreWXR: radar and satellite imagery compositing. Receives requests for fixed map tiles from our server, never your position or your address.

These requests carry the rounded coordinate or standard map-tile indices, never your identity, device, or precise location. None of these providers require an account or a key held on your device.

Push notifications

If you enable severe-weather push notifications, your device subscribes itself to topic-based notifications identified by weather zone and severity. We publish alerts to these topics, but we hold no device record and cannot tell which devices receive which alerts. Delivery is handled by Apple's and Google's push services.

Background alert checks can also run periodically on your device. These polls read the home forecast already in your device's cache and never send anything new to us.

Children's privacy

The app is not directed at children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect information from them. The app collects no personal information from anyone regardless of age.

Data retention

We retain no personal data about you. Weather data is cached on our server to serve subsequent requests and expires automatically; it is not associated with any individual. Billing entitlement data is retained only as long as needed to maintain your subscription.

Your choices

  • Grant or revoke location permission at any time in your device settings. The app works without it.
  • Enable or disable notifications at any time.
  • Manage or cancel your subscription from your Apple ID or Google Account settings.

Security

We protect what little data touches our service by minimizing it in the first place: we do not hold the information that is most valuable to lose. Communication between the app and our server is encrypted in transit, and our server enforces per-IP rate limiting to resist abuse.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above. Continued use of the app after a change means you accept the revised policy.

Contact

Questions about this policy? Write to paul@sunno-weather.com.