Privacy Policy

Outly ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights under applicable law, including the General Data Protection Regulation (GDPR) where applicable.

Data controller: Hirohito Higa, reachable at support@outlyapp.net.

Information We Collect

• Location — Your coordinates (rounded to two decimal places) are stored on our servers to fetch local weather data and to schedule your daily notification. We also derive a human-readable location name from those coordinates via reverse geocoding. Your location data is permanently deleted when you delete your account.
• Device token — Your APNs device token, used solely to deliver push notifications to your device.
• Locale and timezone — Your device language and IANA timezone, used to generate notifications in your language at the correct local time.
• Notification preferences — Your chosen notification time, day-of-week schedule, and whether to notify the day before or the day of the activity.
• Activity and weather preferences — Your selected activity types, weather emphasis keywords (e.g., wind, UV, air quality), custom weather priorities, and display units (temperature, wind speed).
• Subscription identifier — If you subscribe, Apple provides an original transaction ID that we store to verify and manage your subscription status. No payment card or billing details are ever transmitted to us.
• Notification delivery logs — We keep a log of each notification sent to your account, including the message text, timestamp, and delivery status. These logs are used for debugging and are permanently deleted when you delete your account.

Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Contract performance (Art. 6(1)(b)) — Processing your location, preferences, device token, and subscription identifier is necessary to deliver the notification service you have subscribed to.
• Legitimate interests (Art. 6(1)(f)) — We may use aggregated, non-identifiable data to improve the accuracy and relevance of our service. We also process error information to maintain service reliability.

How We Use Your Information

• To generate and deliver daily weather notifications tailored to your activity, preferences, and location.
• To maintain your account and manage your subscription.
• To monitor and debug notification delivery failures.

What We Do Not Do

• We do not sell your data to third parties.
• We do not use your location for advertising or tracking.
• We do not collect your email address, phone number, or any contact information.
• We do not collect advertising identifiers (IDFA) or track your behavior across other apps.
• We do not share your information with anyone except as strictly required to operate the service (weather data, push notification delivery, subscription verification, and error monitoring).

Data Retention

Your data is retained only as long as you have an active account. You can delete your account at any time from the app's settings screen, which immediately and permanently removes all your personal data — including your location, preferences, device token, subscription identifier, and notification logs — from our servers. After deletion, no personal data is retained except where required by law.

If your APNs device token becomes invalid (e.g., after uninstalling the app), your account is automatically deactivated and no further notifications are sent.

Third-Party Services

• Open-Meteo — Weather and geocoding data provider (Austria). Your coordinates are sent to retrieve weather forecast data and to derive a location name via reverse geocoding. Privacy policy.
• Anthropic — AI used to generate personalized notification messages (United States). We send weather forecast data, your locale, timezone, and activity preferences; no personal identifiers (user ID, device token, or location coordinates) are included. Anthropic retains API inputs for up to 30 days per their usage policy. Privacy policy.
• Apple Push Notification Service (APNs) — Push notification delivery (United States). Your device token and notification message are transmitted to Apple's servers to deliver each notification. Privacy policy.
• Apple App Store / StoreKit — Subscription management (United States). When you subscribe, Apple handles all payment processing and sends us only an original transaction ID to confirm your subscription status. We never receive your payment details. App Store Server Notifications are used to keep your subscription status up to date. Privacy policy.
• Railway — Cloud infrastructure provider (United States) hosting our API server. Privacy policy.
• Sentry — Error monitoring service (United States), used to detect and diagnose crashes and delivery failures. Error reports may include stack traces and operational context; no personal identifiers are intentionally included. Privacy policy.

International Data Transfers

Some of our third-party service providers are located outside the European Economic Area (EEA), including Anthropic, Apple, Railway, and Sentry in the United States. Where personal data is transferred outside the EEA, we rely on those providers' compliance with applicable data transfer mechanisms, including Standard Contractual Clauses (SCCs) or equivalent frameworks recognized under GDPR.

Your Rights

If you are located in the European Economic Area or otherwise covered by applicable privacy law, you have the following rights:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Request deletion of your personal data ("right to be forgotten"). You can also do this directly in the app's settings screen.
• Restriction — Request that we limit how we use your data in certain circumstances.
• Data portability — Request your data in a structured, machine-readable format.
• Objection — Object to processing based on legitimate interests.

To exercise any of these rights, contact us at support@outlyapp.net. We will respond within 30 days.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority. In the EU, you can find your authority at edpb.europa.eu.

Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this policy, please contact us at support@outlyapp.net.