Privacy Policy

StrikeCast(“we”) provides real-time lightning information for general awareness. This policy covers both the StrikeCast app and this website. Our commitment in one line: never shared, never tracked. We use no advertising identifiers (no IDFA), show no ads, work with no data brokers, and never sell your personal information.

Who we are

The data controller is StrikeCast, operated by Kirill Proskurin, Av. Serpa Pinto 534, 4450-277 Matosinhos, Portugal. Contact: support@strikecast.app.

What the app collects, and why

• Precise location — while in use only. Used to compute your distance to the nearest strike and the approaching / moving-away trend. We never collect location in the background and build no movement history.
• Saved locations. Coordinates and labels you save are stored on our server so our server-side geo-fence can alert you without your phone tracking you in the background. They are linked to an anonymous device ID, not your identity.
• Anonymous device identifier. A random UUID stored in the iOS Keychain links your device to its saved locations, alerts and subscription. It is not the Apple advertising identifier and contains no personal information. There are no user accounts.
• Push token. Stored to deliver lightning alerts.
• Subscription status. Purchases run through Apple In-App Purchase; we use Adapty to validate receipts and grant entitlements. We never see your payment card details.
• Product analytics — optional. With PostHog we record behavioral events (screens, taps) to improve the app, never including your coordinates. You can turn analytics off in Settings → Privacy.
• Diagnostics. Server errors may go to PostHog; native crashes use Apple’s standard crash reporting.

What this website collects

The website shows live lightning activity for a city using that city’s center coordinates — it does not request or store your precise location. We use privacy-friendly, cookieless aggregate analytics (PostHog) to count page views and link clicks, and we honor your browser’s Do Not Track / Global Privacy Control signal.

Who processes your data

Railway (hosting/database), Apple (purchases, push delivery, crash diagnostics), Adapty (subscription management), PostHog (analytics, opt-out), and Mapbox (map tiles). Lightning data comes from NOAA GOES-GLM, a public U.S. government source — we send them nothing about you. We do not sell, rent or share your personal information for advertising.

Your rights and choices

You can access, correct, delete, port, and object to processing of your data, and withdraw consent at any time. Delete everything with one tap in the app: Settings → Data → Delete my data (removes your device, saved locations, alerts and history from our servers, then wipes local data). California residents have the right to know, delete, correct, and opt out of sale/sharing — we do not sell or share personal information. To exercise any right, use the in-app control or email support@strikecast.app.

Retention, transfers, security

We keep your data until you delete it (or after prolonged inactivity). Servers and some processors may be in the United States; for EEA/UK transfers we rely on Standard Contractual Clauses. Data is encrypted in transit (HTTPS/TLS).

Children

StrikeCast is not directed to children and we do not knowingly collect data from children under 13 (US) or 16 (EU/EEA).

Changes & contact

We may update this policy and will revise the date above; material changes get a more prominent notice. Questions: support@strikecast.app.