Storm Recon
Draft for placement only. Pending final version.

Storm Recon

Privacy Policy

Effective date and last-updated date to be set at publication.

1. Who We Are

Storm Recon is published by Bacon Cheese Frosting LLC ("BCF", "we", "us"), a Wyoming limited liability company.

1309 Coffeen Ave, Ste 1200, Sheridan, WY 82801, United States
[email protected] · +1 (307) 316-2342

This policy explains what Storm Recon collects, what it does not, where the data goes, and how to get rid of it. It covers the Storm Recon iOS app only.

2. The Short Version

Storm Recon is built to need as little about you as possible.

  • There is no account. No name, no email address, no phone number, no password, nothing to log into, and no way for us to identify you.
  • We never receive your precise location. The only location that ever reaches a server we operate is a grid cell roughly 50 kilometres across, rounded on your phone before anything is sent, and only if you turn notifications on.
  • Your phone does ask other people about where you are. Weather, radar, maps, routing and campground look-ups are queries your phone makes directly to the services that answer them, and a query about where you are has to say where you are. Those go straight from your phone to them and never through us. §4 names every one of them.
  • We do not sell your data, we do not share it for advertising, and we do not track you across other apps or websites. There is no advertising identifier in Storm Recon and no App Tracking Transparency prompt, because there is nothing to ask you for.
  • We do not watch you move. Storm Recon can only see where you are while the app is open on your screen. It does not use background location, so it cannot follow you down the road, and it is not a turn-by-turn navigation app — when you want directions it hands the route to the maps app you chose.
  • We collect nothing you type. There is no field in Storm Recon that sends free text anywhere.

The rest of this policy is the detail.

3. What We Collect

a. If you turn on notifications

To tell you that an official weather alert covers where you are, our server needs to know roughly where you are. When you enable notifications we receive:

  • An approximate location — your position rounded to a grid cell roughly 50 km across (0.45° of latitude and longitude). The rounding happens on your device, before anything is transmitted. We never receive your exact coordinates.
  • The push token Apple issues for your device. This is the delivery address a notification is sent to. It is not a name and not an account, it is specific to this app on this device, it cannot be used to recognise you anywhere else, and it changes if you delete and reinstall the app. Because we store it and it persists, we treat it as a device identifier and declare it as one on our App Store privacy label.
  • The notification settings you chose — how assertive you asked us to be, your vehicle category (used to decide whether a given hazard warrants a louder alert for your kind of rig), your chosen alert sounds, and whether you are currently opted in.

We also store the National Weather Service forecast, county and fire zones that your approximate cell falls in, so we can match zone-based products such as Flood Watches and Extreme Heat Warnings. These zones are resolved from the already-rounded cell. No additional location precision is collected to make notifications work.

If you never turn notifications on, none of this is collected and no record of your device exists on our server.

b. Analytics and crash reports

Storm Recon uses Google Analytics for Firebase and Firebase Crashlytics to see which features get used and to diagnose crashes. This includes your approximate region (derived by Google from your IP address, not from your device's location), your device model and iOS version, a random identifier for this installation of the app (Google calls it an app instance ID), and a few of your settings — such as your vehicle category and how assertive you asked notifications to be — so we can tell whether a feature is working for the people it was built for.

It never includes your name, an advertising identifier, or anything Google could use to advertise to you. We have turned off Google Signals and ad personalisation, and reporting is device-based rather than identity-based.

c. What we never collect

We do not collect your precise location, your name, email address, phone number, contacts, photos, calendar, health data, financial data, purchases, browsing history, or any text you type. We do not use the advertising identifier (IDFA), we do not present an App Tracking Transparency prompt, and Storm Recon contains no advertising and no advertising SDKs.

4. What Leaves Your Device, and When

Storm Recon queries a number of services directly from your phone, and those queries necessarily carry the location you are asking about. We do not receive or store the coordinates in those queries. With the exception of Apple's services, these organisations are not acting on our behalf; their own privacy terms govern what they do:

PurposeService
Weather conditions and forecastsApple WeatherKit
Maps, place search, driving routesApple Maps / MapKit
Official watches, warnings and advisoriesNational Weather Service (api.weather.gov)
Severe-weather outlooks; watch-box shapesNOAA Storm Prediction Center; Iowa Environmental Mesonet
River gauge levels and flood forecastsNOAA National Water Prediction Service
Wildfire perimeters and satellite detectionsNIFC WFIGS; NASA FIRMS
Evacuation ordersCAL FIRE / California OES; Oregon OEM; Washington State EOC
Campground details, hookups and availabilityRecreation.gov (RIDB); National Park Service
Private campgrounds and RV parksOpenStreetMap (Overpass)
Terrain elevationU.S. Geological Survey
Map tiles and radar imageryCARTO; RainViewer

Two services receive data on our behalf, and only as described in §3:

  • Cloudflare hosts the server that stores approximate location cells and push tokens, in a database operated by BCF.
  • Google receives analytics and crash data through Firebase.

5. How We Use It

  • Approximate location is used for exactly one thing: deciding whether an official weather alert or evacuation order covers where you are, so we can notify you.
  • Analytics and crash data are used in aggregate to understand which parts of the app are used, how it behaves during real weather events, and what is broken.

We do not use any of it to make automated decisions about you, to build a profile of you, or to advertise to you. We do not sell it and we do not share it for advertising or cross-context behavioural advertising.

6. Your Choices

  • Notifications can be turned off at any time in iOS Settings or in the app. Turning them off stops the collection in §3(a) and stops us sending you anything.
  • Location is requested only while you are using the app. Storm Recon does not use background location. You can revoke the permission at any time in iOS Settings; the app will tell you it cannot see your weather rather than imply conditions are clear.
  • Deleting the app ends all collection.

7. Retention and Deletion

  • Push registrations are deleted when Apple tells us the token is no longer valid — which is what happens when you delete the app — and in any case no more than 12 months after we last heard from your device. If you turn notifications off, we stop sending immediately and mark the registration inactive; the record is deleted on the same schedule.
  • Analytics data is retained by Google for 14 months and then deleted. Crash reports are retained on Firebase's standard schedule.

Deleting the app deletes everything we could connect to you. It is the fastest and most complete route, it needs nothing from us, and it takes effect without a request.

You can also write to [email protected]. We will respond within 45 days, and if a request genuinely needs longer we will tell you why and take one further 45-day extension, as the law allows. Please understand what we can honestly promise: we hold no account, no name, no email address and no identifier you could quote to us, so in most cases the substantive answer will be a description of the categories above and a pointer to the self-service route, rather than a file with your name on it. That is a consequence of the design, not an evasion of the request.

8. Children

Storm Recon is not directed at children and we do not knowingly collect information from anyone under 13. If you believe a child has provided us with information, write to [email protected] and we will delete it.

9. California Residents

If you live in California, the CCPA/CPRA gives you rights to know what personal information we collect, to have it deleted, and to correct it. The categories we collect are described in §3; there are no others. We do not sell personal information and we do not share it for cross-context behavioural advertising, and we have not done so in the preceding twelve months. We do not collect sensitive personal information as that term is defined, and we do not offer financial incentives for personal information. To exercise these rights, write to [email protected] — and please see §7 for what we are able to find, and for our response times.

We will not discriminate against you for exercising any of these rights.

10. Residents of Other U.S. States

A number of other states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others — have consumer privacy laws granting rights comparable to those in §9, such as access, deletion and correction. If you live in one of them, we extend the same commitments to you, on the same terms and the same timeframes as §7 and §9. Write to [email protected].

We do not sell personal data, we do not process it for targeted advertising or profiling, and we do not collect the categories those laws treat as sensitive — including precise geolocation, which we deliberately do not receive.

11. Security

Data in transit is encrypted. Our server is operated by BCF on Cloudflare's infrastructure. Because we hold no accounts, no credentials and no directly identifying information, there is very little here to lose — which is itself a deliberate design choice rather than a claim about our defences. No system is completely secure, and we do not claim ours is.

12. Where Data Is Processed

Storm Recon is available in the United States only, and BCF's own processing takes place in the United States.

Some of the queries your phone makes directly, listed in §4, reach servers outside the United States — the OpenStreetMap query service we use for private campgrounds is hosted in Germany, and map-tile and radar imagery are served from global content networks. We do not control those services and we do not receive what they receive.

13. Changes

If we change this policy in a way that matters, we will post the new version at this address with a new effective date, and — if the change materially expands what we collect — say so in the app.

14. Contact

Bacon Cheese Frosting LLC
1309 Coffeen Ave, Ste 1200, Sheridan, WY 82801, United States
[email protected] · +1 (307) 316-2342