Norya privacy policy
Norya has no account. The score is calculated on your iPhone, and your places stay there.
Last updated: 19 August 2026
The short version
Norya has no account. No sign-up, no email, no password, no name. The app doesn't know who you are, and has no way of finding out.
The score is calculated on your iPhone. Your saved places stay there.
Exactly one thing goes to a server, and only if you turn alerts on: an anonymous device identifier, the place you chose to watch, and your thresholds.
No advertising. No trackers. No analytics. No data resold. There is no analytics kit in the app, not even a counter of how often you open it.
Who is responsible
Teddy Verneuil, sole trader
14 bis rue Magellan, 56860 Séné, France
SIRET: 792 687 576 00043
Contact: [email protected]
What stays on your iPhone
This data never leaves the device and disappears when you uninstall:
- Your saved places: name, coordinates, time zone.
- The last forecast calculated, so the app stays useful offline.
- The history of nightly peaks: at most thirty nights, so you can compare tonight with last night.
- Your settings: temperature unit, map layers, alert thresholds, onboarding state.
- A summary of the place you follow, shared with the widget in a space reserved for the app.
Your location
If you allow it, Norya reads your location to suggest a starting place. It is used in two ways, and two ways only:
- Locally, to calculate the score.
- Sent to Apple (the WeatherKit service) to get the weather for that spot. Apple states that it doesn't link these requests to your identity.
It is not sent to the publisher, or to anyone else, unless you turn alerts on, the case described below.
You can refuse location access: the app then works with the places you search for yourself.
What leaves, and only if you turn alerts on
Alerts have to work with the app closed. So a server has to know what to watch. When, and only when, you turn alerts on, Norya sends and stores:
| Data | Why |
|---|---|
| A randomly generated device identifier | To attach a rule to a device |
| The Apple notification token (APNs) | To send the notification |
| The coordinates and name of the place being watched | To calculate the score for that spot |
| Your threshold, the confidence requirement, your quiet hours | To decide whether to alert you |
| The device language and time zone | To write the notification and respect your quiet hours |
That's all. No name, no email, no advertising identifier, no history of what you looked at. The database schema contains no other column.
Technically the server also keeps the number of consecutive readings above your threshold and the date of the last alert sent, so it doesn't wake you twice for the same thing.
No analytics
Norya measures nothing. No TelemetryDeck, no Firebase, no Sentry, no home-made counter. The publisher doesn't know how many screens you open, or which ones, or for how long.
The only statistic that reaches him is the one Apple gives every developer in App Store Connect: aggregated, anonymous download and crash figures, which you can limit in iOS Settings → Privacy → Analytics & Improvements.
The services called
| Service | What it receives | Where |
|---|---|---|
| Apple: WeatherKit | The coordinates of a place, for its weather | Ireland / United States |
| Apple: App Store, StoreKit | Your purchases, handled by Apple alone | Ireland |
| Apple: APNs | The notification token, if alerts are on | Ireland / United States |
| Apple: Maps (MapKit) | The map areas you look at | Ireland / United States |
| Cloudflare, Inc. | The alert service and its database | Global network |
| NOAA SWPC | Nothing personal: global files, the same for everyone | United States |
| GFZ Potsdam | Nothing personal: a global index file | Germany |
| Open-Meteo | The watched coordinates, called by the alert service | Germany |
| NASA GIBS / ESDIS | The night imagery tiles you display | United States |
Norya has no advertising or analytics processor.
Why, and on what basis
- Performing the service: calculating a score, drawing a map, keeping your places. Without this processing the app has no purpose.
- Your consent: location and notifications. You grant them, and you can withdraw them at any time in the iOS settings.
- Performing a contract: handling purchases, which Apple takes care of.
For how long
- On the device: as long as the app is installed. Uninstalling erases everything.
- On the alert server: as long as the rule exists. Deleting it erases the device and its rule immediately, in cascade.
- The space weather snapshot cached by the server: 2 hours. It contains no user data.
- A device whose token Apple reports as no longer valid is erased automatically.
Where it is hosted
The alert service runs on Cloudflare Workers, with a D1 database and a KV cache. Cloudflare is a US company with a worldwide network; transfers outside the European Union rely on the European Commission's standard contractual clauses.
The Apple services are operated by Apple Distribution International Ltd. (Ireland).
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability set out in the GDPR.
In practice: since Norya holds no data that identifies you, the most direct and most complete way to exercise them is the Settings → Your data → Delete my data button. It erases the places and the alert settings, and asks the service to forget your device, token and coordinates included.
You can also write to [email protected]. You will get an answer within thirty days. Be aware, though, that with no account the publisher cannot find "your" data from your name or your address: no link exists between you and a device identifier.
If you disagree, you can refer the matter to the French data protection authority, the CNIL (cnil.fr).
Security
Exchanges with the alert service go over HTTPS. The notification signing secrets are held by the server alone and never appear in the app or in the source code. No user data is stored in the clear anywhere other than in the alert database described above.
No system is infallible; in the event of a data breach likely to create a risk, the people concerned and the CNIL would be informed within the legal deadlines.
Children
Norya is not aimed at children and knowingly collects no data about them. Since it collects no identifying data at all, it has no way of knowing anyone's age in any case.
Changes
This policy may change along with the app. The date of the last update appears at the top of this page; any significant change will be announced in the app.