Frostcast — Privacy Policy
Effective: 2026-10-01
What we collect
Nothing that identifies you by name. Frostcast has no accounts, no analytics SDK, no crash reporting SDK, no advertising and no tracking. The only data that leaves your device is described below: a rounded location for forecasts, place lookups through your phone's built-in geocoding service, and purchase verification.
Location
With your permission, the app reads your current location on the device to fetch a forecast for where your car is parked. The coordinates are rounded on your device to a forecast grid cell of about 5 km, and only the rounded value is sent to our forecast server. To show the name and time zone of a place, and to find a place you search for by name, the app uses your phone's built-in geocoding service (Apple on iOS, Google on Android), which receives the coordinates or the search text under its own privacy policy. We never share your location with anyone else or use it for anything other than the forecast. If you prefer, you can search a place by name instead of using your current location.
Weather requests
Forecasts are fetched through our own server (https://frostcast.expo.app), which forwards the rounded coordinates to the weather data provider (Apple Weather or Open-Meteo). The server keeps a short-lived cache of forecasts per grid cell and a short-lived rate limit per IP address in memory. Our hosting provider (Expo, EAS Hosting) records each request in a log that is kept for a limited period to operate and secure the service; an entry contains the requested address, which includes the rounded coordinates, the time, and the country or region derived from the IP address. We use this log only to run and fix the service and never combine it with other data.
Purchases
Frostcast Pro is a one-time purchase handled by the App Store or Google Play. We use RevenueCat to verify the purchase; the app connects to RevenueCat when it starts, so that a purchase can be checked or restored, and RevenueCat receives an anonymous app-generated identifier, purchase receipts and basic technical information such as the app and OS version, not your name or email. To have that purchase record deleted, email the operator address below; we delete it within 30 days (you can restore the purchase again later through the store).
Stored on your device only
Your settings (parking, clearing method, departure time, notification times, units, language, saved place, the date you accepted the terms) stay on your device. Deleting the app deletes them.
Notifications and background refresh
If you enable notifications, they are scheduled locally on your device from the forecast the app already loaded. The app may ask the operating system to refresh the forecast in the background; this uses the same rounded location and involves no push server.
Weather data
Forecasts are estimates. They may be wrong. Frostcast does not check laws or road conditions. You are responsible for checking that all windows are clear before you drive.
Website (frostcast.expo.app)
This website uses Google Analytics (Google LLC) to understand how pages are used. It counts page views and clicks on the store links without identifying you. Visitors from the EEA, the UK and Switzerland are measured without cookies. You can also disable cookies in your browser settings.
Legal bases (EEA and UK)
If you are in the European Economic Area (EEA) or the United Kingdom, we rely on these legal bases under Article 6 of the GDPR and the UK GDPR:
• Forecasts for your current location or a place you search for, place names and time zones, notifications and background refresh: performance of our contract with you, that is, providing the app you chose to use (Art. 6(1)(b)). Reading your current location also needs your permission in the operating system, which you can withdraw at any time in your device settings.
• Verifying and restoring your Pro purchase: performance of our contract with you (Art. 6(1)(b)).
• The hosting log and the rate limit on our server: our legitimate interest in running the service and keeping it secure (Art. 6(1)(f)).
• Website measurement with Google Analytics (without cookies for visitors from the EEA and the UK): our legitimate interest in understanding how the website is used (Art. 6(1)(f)).
• Replying to your emails: our legitimate interest in answering you (Art. 6(1)(f)) and, for requests about your rights, our legal obligation (Art. 6(1)(c)).
Who receives data
We do not sell personal data or share it for advertising. These providers process data on our behalf under their terms with us:
• Expo (650 Industries, Inc., USA): hosts our forecast server and this website, and keeps the request log described above.
• RevenueCat, Inc. (USA): verifies and restores purchases.
• Google LLC (USA): Google Analytics for this website.
Our server sends only the rounded coordinates to the weather data provider (Apple Weather or Open-Meteo), without your IP address or any identifier. Apple (App Store, geocoding on iOS) and Google (Google Play, geocoding on Android) handle payments and place lookups as separate controllers under their own privacy policies.
Transfers outside the EEA and the UK
We are based in Japan. The European Commission has decided that Japan provides an adequate level of data protection, and the UK also recognises Japan as adequate. Transfers to our providers in the United States are protected as follows: Google LLC is certified under the EU-U.S. Data Privacy Framework and its UK Extension; Expo and RevenueCat use the European Commission's standard contractual clauses set out in their terms, and for UK data the safeguards those terms provide.
How long data is kept
• Rate-limit counters per IP address: only in our server's memory, counted in one-hour windows, never written to storage, and lost when the server restarts. Cached forecasts are stored per grid cell for up to one hour and contain no information about you.
• Hosting request log: kept by Expo for a limited period that Expo sets to operate and secure the service. We do not export or copy it.
• Purchase records at RevenueCat: kept so that your purchase can be verified and restored, until you ask us to delete them (we then delete them within 30 days).
• Website data in Google Analytics: up to 14 months.
• Settings on your device: until you delete the app.
• Emails you send us: as long as needed to handle your request.
Your rights
Depending on where you live, and in any case if you are in the EEA or the UK, you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. You can withdraw permissions at any time (location and notifications in your device settings); this does not affect processing that took place before. To exercise these rights, email the operator address below. We will reply within one month. Because we do not hold your name or contact details, we may ask for information that lets us find your data, such as the order number on your store receipt; if we cannot identify your data, we will tell you.
Complaints
If you are in the EEA, you can complain to the data protection supervisory authority of the member state where you live or work, or where you think the infringement took place. If you are in the UK, you can complain to the Information Commissioner's Office (ico.org.uk). You can also contact us first at the operator address below.
Do you have to provide data?
No law or contract requires you to provide personal data. Location is optional: you can search a place by name instead of allowing location access. To show a forecast, the app has to send the rounded location of your current or searched place to our server, which creates the log entry described above. Purchase data is processed only if you buy Pro, to verify and restore the purchase.
Automated decisions
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects. The app's frost estimate is calculated on your device from forecast data and your settings; it is information for you to use, not a decision about you.
Operator (data controller)
SUTEKINA JIKAN, LLC (Ichinomiya, Chiba, Japan) is the controller of the personal data described in this policy.
info@sutekinajikan.com
Changes
If this policy changes, the new version will be shown here.