Privacy policy
FirstDrop has to know where you are in order to warn you about the weather there. That is personal data, so the short version is this: we collect as little as possible, we never sell it, and your location is never shared with advertisers.
Data controller
Allan Noer, an individual, Denmark
Email: allan@noer.biz
FirstDrop is run by one person, not a company, so there is no company registration number. If you need a postal address — for a formal request under the GDPR, for instance — write to us and you will be given one.
There is no account
You never sign up, and we never ask for your name, email address or phone number. On first launch the app generates a random device ID on your phone. It is the only thing linking your saved places to your device, and it cannot be used to identify you as a person.
What we process
| Data | Why | Legal basis |
|---|---|---|
| Device ID Random identifier generated on your phone |
Link your saved places and settings to your device | Necessary to provide the service, Art. 6(1)(b) |
| Saved places Name and coordinates |
Watch the radar at exactly those spots and alert you | Necessary to provide the service, Art. 6(1)(b) |
| Your current location Only if you turn “Follow me” on |
Alert you where you are right now, even when the app is closed | Consent, Art. 6(1)(a) — you switch it on and off yourself |
| Push token Plus platform (iOS/Android) |
Deliver the alert to your phone | Necessary to provide the service, Art. 6(1)(b) |
| Language and time zone | Alerts in your language, and quiet hours in your local time | Necessary to provide the service, Art. 6(1)(b) |
| Quiet hours Start and end time |
Hold back rain alerts overnight | Necessary to provide the service, Art. 6(1)(b) |
| Error reports Error message, stack trace, app version, platform, device ID |
Find and fix crashes | Legitimate interest, Art. 6(1)(f) |
We do not process special categories of personal data, and we do not build profiles on you.
Advertising
FirstDrop shows one kind of ad: a short video you choose to watch in order to unlock a paid feature for a while. There are no banners, no interruptive ads, and no ad on launch. Subscribers see none at all.
Ads are served by Google AdMob. We request non-personalised ads only. That means Google does not use a profile about you to pick the ad, and your location is never sent to advertisers. Google receives the technical information needed to serve and measure the ad — see Google's privacy terms.
In the EU, EEA, UK and Switzerland we ask for consent first through Google's certified consent management platform (UMP), and the ads SDK is not initialised until you have answered. You can change or withdraw your consent at any time in the app under Settings → Ad privacy choices.
We do not ask for App Tracking Transparency permission, because we do not track you across apps.
Who we share data with
- Apple and Google — their push services (APNs and FCM, via Expo's push service) deliver the notification to your phone.
- Google AdMob — only when you choose to watch an ad, as described above.
- DMI and MET Norway — our server looks up the weather at your places' coordinates with the national weather services.
- OpenFreeMap and OpenStreetMap — provide the map tiles the app draws the radar on top of.
We do not sell your data, and we do not share it with data brokers or ad networks beyond what is described here.
Where data is stored
Data is stored in the EU. Some of the providers listed above may process data outside the EU/EEA; where they do, it is on the basis of the European Commission's standard contractual clauses or a valid adequacy decision.
How long we keep it
- Saved places are kept until you delete them in the app. Deleting a place removes it from our database.
- Device information (device ID, push token, language, time zone, quiet hours) is kept for as long as the app is installed and alerts are enabled. If you turn notifications off or uninstall the app, the push token stops working and the record is cleaned up.
- Error reports are written to the server's operational log, not to our database. The log is rotated daily and automatically deleted after 90 days.
You can have everything associated with your device deleted at any time — see below.
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. Where you have given consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Write to allan@noer.biz. Because we do not have accounts, we need your device ID to find your data — you will find it in the app under Settings. We respond within one month.
If you are unhappy with how we handle your data you can complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark.
Children
FirstDrop is not directed at children, and we do not knowingly collect data about children under 13. If we become aware that we have, we delete it.
Changes
If we change this policy we update the date at the top. If the change is significant, we say so in the app.
FirstDrop does not replace official weather warnings from the authorities. In dangerous weather, always follow official guidance.