Privacy Policy — WhereIsMySun (WIMS)

Last updated: 1 November 2026 · Version 1.1 · Deutsch

WIMS shows you where the good weather is. For that the app needs your location — and only while you use it. No account, no sign-up, no database of our own. Most of it runs on your device. To fund the free app, it shows non-personalized ads (Google AdMob) — no cross-app tracking, no advertising ID (IDFA or Android advertising ID). If you remove ads via in-app purchase, the ad SDK never even starts.

This policy covers the app on iPhone (iOS) and on Android. Where the Android app works differently, it is marked “Android:”.

1. Controller

Eugen Dukhin
Pähler Weg 18B
82205 Gilching
Germany
Contact: eugen.dukhin@gmail.com

2. What data, why, and on what legal basis

a) Location (only while in use, “When In Use”; Android: approximate only)

• Purpose: to answer “where to today?” — find destinations within range, judge the weather on arrival, determine the direction.
• On the device: The decision (drive out / stay home, which direction) is computed locally. The worded explanation is also generated by an on-device AI model (Apple Foundation Models) — it never leaves your device. Android: there, Gemini Nano (Google ML Kit GenAI) writes it on the device; without a model, the app uses fixed sentence templates. Here too the texts never leave the device — ML Kit only reports technical usage data to Google (e.g. device model, error codes, input and output length, no content).
• Transfer: To fetch the forecast, coordinates are sent to Apple WeatherKit (processed by Apple, not linked to your identity, no persistent device/user identifiers). No location is passed to the ad SDK. For the drive time in the destination view, start and destination coordinates are sent to Apple Maps (MapKit) under the same conditions.
• Android: The app only requests your approximate location (via Google Play services, “Fused Location Provider”). For the forecast, coordinates (starting point and destinations) and your time zone are sent to our weather proxy (a Cloudflare Worker), which rounds them to about 100 m and passes them on to Apple WeatherKit. The proxy processes them only for that request and stores or logs neither coordinates nor weather data; Apple sees the proxy, not your IP address. Your IP address serves the proxy only briefly as a counter against abuse (requests per minute); the provider Cloudflare processes standard access data, as with the CDN (d). For the drive time, start and destination coordinates are sent to the Google Routes API. To determine your home country, Android's geocoder (Google) translates the location into country and state. Here too, no location is passed to the ad SDK.
• Legal basis: Art. 6(1)(b) GDPR (the requested function) together with (a) (consent via the iOS or Android location prompt, revocable at any time).

b) Advertising (Google AdMob) — only without the ad-free purchase

• Purpose: funding the free app via a discreet banner.
• Non-personalized (npa=1): no cross-app tracking, no ATT prompt, no IDFA, no profiling for personalized ads. Google processes technically necessary data for delivery, fraud prevention and frequency capping (e.g. device type, truncated IP/coarse region, banner interaction; on Android also the app set ID, an identifier that is only valid across apps from the same developer) under its own policies. Android: the app does not read the advertising ID — the permission for it (AD_ID), which the ad SDK brings along, is removed from the app.
• No precise location is passed to the ad SDK. Google's consent dialog lists the standardized purposes of the IAB framework, including “precise geolocation data” — WIMS does not provide such data to Google; at most, Google can derive a coarse region from the IP address.
• Can be switched off: With the “Remove ads” or “All countries” purchase, no banner is loaded and the ad SDK is not started.
• Consent (EEA, United Kingdom, Switzerland): At launch, a consent dialog from Google (User Messaging Platform, IAB TCF) asks for your consent; until you have decided, the app loads no ad. Your choice is stored locally on the device and can be changed or withdrawn at any time via “Privacy settings” in the ad row or the country packs sheet. If you decline, Google serves at most limited ads (“limited ads”) without accessing device storage for advertising purposes.
• Legal basis: In the EEA, the United Kingdom and Switzerland, Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent via the dialog); elsewhere Art. 6(1)(f) GDPR (legitimate interest: funding a free app with non-personalized ads).

c) In-app purchases (Apple, Google Play)

Purchases (ad-free, countries) are handled by Apple (StoreKit / App Store), on Android by Google Play (Play Billing). We receive no payment data, only the unlock status, which is stored locally on your device.

d) Country packages (CDN)

The app downloads destinations as static country files over HTTPS from our CDN (Cloudflare Pages). The CDN provider processes standard server access data (incl. IP address) for delivery and security. No app-specific identifiers are sent.

e) Local settings

Home country, categories, radius and purchase/package status are stored only locally (iOS: UserDefaults, Android: app storage/SharedPreferences) and never leave the device — except in a device backup that you yourself turned on in iCloud or your Google account.

f) Destination photos and short descriptions (Wikipedia / Wikidata)

When you open a destination's detail view, the app fetches the place's short description and photo over HTTPS from Wikipedia and Wikidata (Wikimedia Foundation). Only the place identifier (Wikidata ID or article title) and the device language are transmitted — never your location. The provider processes standard server access data (incl. IP address). No app-specific identifiers are sent.

g) Android: map (Google Maps SDK)

The map view of the Android app loads the map via the Google Maps SDK for Android. Google receives your IP address, the visible map area (through the map tiles loaded), technical device data (e.g. model, Android version), a pseudonymous SDK identifier, SDK crash reports and how you use the map (panning, zooming), and processes them under its own policies, including to improve its services.

3. What WIMS does NOT do

• No registration, no account, no user database of our own.
• No cross-app/website tracking, no IDFA, no ATT prompt, no advertising ID on Android.
• No analytics SDKs, no profiling, no selling of data.
• No storing of your location history.
• Advertising is not personalized.

4. Recipients / services used

• Apple — WeatherKit (forecast; on Android via our proxy), MapKit (drive time, iOS) & StoreKit (purchases, iOS): apple.com/legal/privacy
• Google — AdMob (non-personalized advertising); on Android also Maps SDK (map), Routes API (drive time), Google Play (purchases, location service, geocoder) and ML Kit (usage data of the on-device AI): policies.google.com/privacy, partner sites
• Cloudflare — delivery of the country packages (CDN); on Android also the weather proxy (Cloudflare Workers): cloudflare.com/privacypolicy
• Wikimedia Foundation — Wikipedia / Wikidata (destination photos and short descriptions): foundation.wikimedia.org/…/Privacy_policy

5. International transfers

Apple, Google, Cloudflare and the Wikimedia Foundation may also process data in the USA. Apple, Google and Cloudflare rely — also for the Android services (Google Maps, Routes, Play, ML Kit; Cloudflare Workers) — on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework; the Wikimedia Foundation processes data in the USA under its own privacy policy. Details in the linked policies.

6. Retention

The app processes location data only at runtime for the current query and does not store it permanently; our weather proxy (Android) stores neither coordinates nor weather data. Transmitted coordinates as well as ad, map, CDN and Wikipedia access data are subject to the respective providers' retention periods.

7. Your rights (GDPR)

Access, rectification, erasure, restriction, objection, data portability (Art. 15–21) and the right to lodge a complaint with a supervisory authority (Art. 77). As WIMS keeps no account and stores no personal data, we generally hold no data about you; for data held by Apple, Google, Cloudflare or the Wikimedia Foundation, please also contact them. You can withdraw location access at any time via iOS Settings → Privacy & Security → Location Services → WhereIsMySun or Android Settings → Apps → WhereIsMySun → Permissions → Location, and ad consent via “Privacy settings” in the ad row or the country packs sheet. To turn ads off permanently: the “Remove ads” in-app purchase.

8. Children

WIMS is not directed at children and does not knowingly collect data from children.

9. Changes

This policy will be updated before new features are introduced; the date above indicates the current version.