Privacy Policy

Last updated 8 October 2026

The short version

Nimbus has no accounts, no adverts, no analytics and no tracking. Your location is used to fetch a forecast and is not stored anywhere but your own phone. The only information sent off your device is what is needed to return weather for a place, plus anonymous crash reports that help fix bugs.

Who is responsible

Nimbus is an independent app built and maintained by Michael Whelan, who is the data controller for the purposes of the UK GDPR and EU GDPR. You can reach me at nimbus@michaelwhelan.dev.

Location

If you grant the location permission, Nimbus reads your device's coordinates and sends them to Open-Meteo to retrieve the forecast for that point. The permission is optional: you can decline it and search for places by name instead, and you can revoke it at any time in your device settings.

To turn coordinates into a place name, Nimbus asks your device's own geocoder, which on Android is provided by Google Play Services. That lookup happens through the operating system rather than through me.

Your coordinates are never attached to crash reports, never written to any server I control, and never used to build a profile of you.

Location search

When you search for a place, the text you type is sent to Open-Meteo's geocoding service to return matching places. Your recent searches are kept on your device only.

What stays on your device

The following is stored locally on your phone, is not transmitted anywhere, and is deleted when you uninstall the app:

• Your saved and recently searched locations
• The currently selected location and your last known position
• Cached forecasts and sunrise/sunset times, so the app works offline
• Your preferences, such as units and theme
• The location your home screen widget displays

Crash and error reports

Nimbus uses Sentry to report crashes and errors so they can be fixed. A report contains the error and its stack trace, which part of the app it came from, the app version, the operating system version and the device model. Reports are sent to Sentry's European infrastructure.

Reports deliberately exclude your IP address, your device name, your coordinates and your saved places. They are not linked to an identity, and there is no way for me to connect a crash report back to a particular person.

What Nimbus does not do

• No advertising, and no advertising identifiers
• No analytics, usage tracking or behavioural profiling
• No tracking across other apps or websites
• No accounts, sign-up or email collection
• No selling or sharing of personal data with anyone

Other services

Weather and geocoding come from Open-Meteo. Crash reporting is handled by Sentry. The app is distributed through Google Play, which collects its own installation and crash data under Google's privacy policy. Opening a link from inside the app — the coffee page, for example — hands you to that site, which will see a normal web request from your browser.

Legal basis and retention

Location is processed on the basis of your consent, given through the Android permission prompt and withdrawable at any time. Crash diagnostics are processed on the basis of legitimate interest in keeping the app working. Crash reports are retained by Sentry for 90 days and then deleted. Everything else lives on your device for as long as you keep the app installed.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Because Nimbus holds no account and stores your data on your own device, the fastest way to erase everything is to clear the app's storage or uninstall it. For anything else, or to complain, write to nimbus@michaelwhelan.dev. You also have the right to lodge a complaint with your local data protection authority.

Children

Nimbus is not directed at children and does not knowingly collect any information from them.

Changes

If this policy changes, the updated version will be posted here with a new date at the top, and material changes will be noted in the app's release notes.