Privacy

Last updated 8 August 2026

A weather app has to know where you are, and that is about as personal as data gets. This page says exactly what SkyPanda keeps, what leaves your phone, and who else sees it.

The short version

SkyPanda does not track you. Nothing about you is sold, and nothing is shared with anybody except the weather services that answer the question you asked. Your weather station's access token never leaves your phone. The free version carries one advert, served by Google AdMob and asked for without personalisation, so it is chosen by the app it appears in rather than by anything we know about you. A Premium subscription removes it.

Your account

Accounts are handled by Firebase Authentication. Signing in with Apple, with Google, or with an email address gives us your email address, and a display name and profile picture if the service you used provides one.

Alongside that we store the settings that should follow you to a new phone: your units, which hazards may interrupt you and at what threshold, your briefing times, the places you have asked to be briefed on, the order of the cards on your screen, and which forecasters you have switched off. Also a push notification token, so we can send a briefing, and the dates you signed up and last opened the app.

Location

To draw a forecast Your coordinates are sent to our server and to the weather services, because that is the question. Forecasts are cached against a grid cell rather than against you, so the same answer is shared with everyone nearby.

Stored, only if you allow background location One current position is kept on your account so a briefing can be sent while the app is closed. It is overwritten each time and no history is kept.

Places you save A briefed place is stored with its name, coordinates and time zone. A place allowed to raise alerts is stored as a rounded coordinate.

Your calendar

Only if you grant calendar access. SkyPanda reads events in the next few days and sends the title, start and end time, location and all-day flag to our server, so a briefing can mention the plans the weather is going to interfere with.

Those event details are sent to Google's Gemini API to judge whether the weather actually affects them. If you would rather no calendar text left your phone, do not grant calendar access. Everything else in the app works without it.

Your weather station

If you connect a WeatherFlow Tempest, the access token is kept in your phone's Keychain and is never sent to us. The app talks to WeatherFlow directly.

Sharing readings with PandaCast is off unless you turn it on. If you do, temperature, wind, rainfall and lightning counts are pooled so that everyone nearby gets a better forecast. The coordinates stored with a shared reading are snapped to the centre of the grid cell, never your station's real position, because a backyard station's exact location is effectively a home address.

Who else sees your location

A forecast is a question asked of several services at once. Depending on where you are, your coordinates go to some of these:

OpenWeatherMap, Apple WeatherKit, Open-Meteo and MET Norway, worldwide
NOAA and the National Weather Service, Environment Canada, Deutscher Wetterdienst, KNMI, Meteo-France and the Japan Meteorological Agency, inside their own countries
RainViewer, Iowa State University Mesonet and NASA GIBS, for radar and satellite imagery
Google, as our hosting and database provider, for push notifications, and for the AI features
Google AdMob, in the free version only, to fill the one advertising card. It is sent what any advertising request carries, including your device's IP address and general region, and is asked not to personalise. A Premium subscription stops the request being made at all
WeatherFlow, from your phone, if you connect a Tempest

Each has its own privacy policy and we do not control them. None of them is told who you are: they are asked about a place, not about a person.

This website

The phone on the front page shows real weather rather than a screenshot, so it has to guess roughly where you are reading from. It uses the internet address your browser connects with, which resolves to a city at best and is often somewhere else entirely. The lookup is done by ipwho.is, which receives the address and nothing else, and the answer is held in memory for an hour so that reading three pages costs one lookup. It is never written to a database and never attached to an account.

It is a guess, and the page says so when it is showing one. If it cannot be made, or if you have blocked the request, the page shows Orlando and carries on.

The page also asks your browser for your real location when it loads, which is the browser's own permission prompt and is entirely yours to refuse. Refusing costs nothing: the address guess is already on screen and stays. If you allow it, the coordinates are sent to our server to fetch that forecast and are used for nothing else. They are not stored, not logged against you, and not attached to an account. If your browser tells us you have refused before, the page does not ask again.

The site sets no cookies and carries no analytics or tracking of any kind. It remembers one thing, for the length of the tab only: that you said yes, so moving between pages does not ask twice.

What we do not do

No personalised advertising, no advertising identifier and no tracking prompt. The advert in the free version is requested non-personalised, which means it is chosen by context rather than by a profile of you.
No analytics SDK of our own, and no profiling of you for anybody's marketing. Google's advertising SDK is in the app and brings its own measurement library with it; what it receives is described above.
Nothing is sold, and nothing is shared for anybody else's marketing.
No location history is built up. What is stored is one current position, overwritten.

If any of that ever changes, this page changes first and the app will say so.

One thing is planned and is worth saying before it arrives rather than after. A free tier may show a single sponsored card among the forecast cards, clearly labelled, and never to anybody who subscribes. It would be drawn by us in the app's own style, and which card you see would not depend on anything we know about you: no profile, no ad network, no third party watching what you look at. If that ever stops being true, this page says so before the app does it.

Deleting your data

Signing out clears the account's data from the phone, including the weather station token. To delete the account itself and everything stored against it, write to the address below and it will be removed.

Children

SkyPanda is not directed at children and does not knowingly collect anything from anyone under 13.

Getting in touch

Questions about any of this, or a request to delete your data: privacy@skypanda.app.