Privacy Policy

Last updated: 2 November 2026

The legally binding version of this document is the Bulgarian one. This English translation is provided for convenience only; in case of any discrepancy, the Bulgarian text prevails.

This policy covers the "Vremcho" mobile app, the vremcho.com website (including its weather forecast pages) and access to "Vremcho" through AI assistants.

Summary

• The app uses the location provided by the user solely to deliver the most accurate weather forecast possible and to send weather and other notifications for that location
• We do not sell personal data and do not share it with third parties beyond the cases described in this policy
• We do not create user profiles linked to a name, email address or user account
• The app uses a randomly generated identifier that contains no name or email address but can link records from the same device
• You can manage location and notification permissions from your device settings at any time
• When you use "Vremcho" through ChatGPT or another AI assistant, no account is needed and we do not store your location (see section 2.8)
• The forecast pages on the website require no account or access to your location, and analytics cookies are used only with your consent (see sections 2.9 and 6)

1. Data controller

The data controller within the meaning of Regulation (EU) 2016/679 (GDPR) is the developer of "Vremcho".

Contact for questions about this privacy policy: contact form

2. Data we collect

2.1 Location

When GPS location is used, precise coordinates are sent to our server to determine the name of the relevant place and provide the forecast. Coordinates retained for forecasts and notifications are normally rounded to two decimal places (approximately 1 km).

2.2 Device identifier

When the app is first used, a random identifier (a string of characters) is generated to identify your device within the service. It is not linked to a user name, email address or Apple/Google account, but it can link location, settings, usage and error data to the same device.

The identifier is used for:

• Storing your notification preferences on our servers
• Short-term storage of user activity for the purpose of diagnosing usage and tracking errors that occur in our systems

2.3 Notification delivery key

The notification platform (Google or Apple, depending on the device) generates a dedicated key required to deliver notifications to your device. This key is sent to our servers so that we can deliver the notifications you have enabled.

2.4 App usage data

We record pseudonymised events about how the app is used, through analytics tools whose servers are located in the EU. The events are associated with the device identifier described in section 2.2:

• The start and end of individual usage sessions (with a random session identifier and duration)
• Screens viewed and features used (e.g. opening a menu or viewing particular sections of the weather forecast)
• Changes to the location source (GPS/manual entry)
• Enabling/disabling notifications and permissions
• Choice of app theme and language

Within product analytics we do not store data that can directly reveal your identity.

2.5 Error reporting

When an error or crash occurs while the app is being used, we send a report to our servers in order to trace the cause. The report contains:

• Details of the affected modules in which the error or crash occurred
• App version, operating system and device model
• The device identifier (see section 2.2) — to track errors that occur repeatedly on the same device

2.6 Standard server logs

Our servers record standard data about the individual requests made by your device, including IP address, date and time of the request, the request address (URL) and its parameters, the app version, operating system and device model, as well as the type of network connection (e.g. Wi-Fi or mobile data) and the mobile operator. This data is used solely for diagnostics, security and optimising the service.

2.7 Contact form

The website contact form is also accessible from the app. When you submit an enquiry, we collect the message and, if you provide them, your name and email address to handle and respond to it. Form submissions are not automatically associated with the device identifier in section 2.2.

2.8 Use through ChatGPT and other AI assistants

"Vremcho" also provides forecasts through ChatGPT and other AI assistants that support the Model Context Protocol (MCP). When you ask the assistant about the weather, it sends a request to our server. Using the service this way requires no "Vremcho" account and does not use the device identifier in section 2.2.

What we receive from the assistant:

• The name of the place you ask about and what the request is for (e.g. a 14-day forecast, current conditions, sea water temperature, etc.)
• The language of the conversation, so that we can answer in the same language
• An anonymised user identifier generated by the assistant (for ChatGPT, openai/subject). It contains no name or email address and does not allow us to establish your identity
• An approximate location (city, region and approximate coordinates), when the assistant provides one. We use it only when you ask about the weather "here" or "nearby" without naming a place, to find the nearest populated place
• Standard technical data about the request (see section 2.6). For ChatGPT, the IP address is that of an OpenAI server, not of your device

We do not receive your name, email address or the account through which you use the AI assistant, nor the rest of your conversation — only the data the assistant sends for the specific request.

What we store:

• A hash of the anonymised identifier (or of the IP address, when the assistant sends no identifier) — solely to limit the number of requests and protect the service from overload, for up to 15 minutes
• Finished answers — cached for up to 1 minute by place and request parameters, with no user identifier
• Aggregate statistics — daily counts of requests by type, outcome and response time, and the names of places we could not recognise (with no identifier), to improve place search — for up to 90 days
• Technical records — the type of request, the resolved place, the language and the outcome, with no user identifier and no coordinates; kept like the server logs in section 2.6

We do not store your approximate location or coordinates, do not create profiles, do not show ads and do not sell data. Error reports for these requests do not contain the request parameters, location or user identifier.

The assistant (e.g. OpenAI's ChatGPT) processes your conversation as an independent controller, under its own privacy policy. What data "Vremcho" receives also depends on the assistant's settings.

2.9 Use of the website

The weather forecast pages on the website are available without a "Vremcho" account. You choose a place through the page address (URL) — the website does not request access to your location and does not use the device identifier in section 2.2.

• Hosting — the website's hosting provider processes your IP address and standard technical data about requests (e.g. the page address, date and time, browser type) in order to load the pages and protect them from abuse
• Browser settings — your chosen theme (light or dark), your cookie choice and whether you have closed the suggestion of another language version are saved in your browser (local storage) and are not sent to us
• Visit analytics — through Google Analytics, under the conditions in section 6

3. Legal basis for processing (GDPR)

4. Sharing data with third parties

We do not sell, disclose or provide personal data to third parties, except in the cases set out below or where you have given your explicit permission to do so.

4.1 Service providers

To provide the functionality of the app and the website we work with providers in the following categories:

• Precipitation notifications (Nowcast) — your coordinates (with an accuracy of about 1 km) are sent to providers of short-term forecast data for approaching precipitation
• Weather warnings — official warnings of bad and dangerous weather are obtained from government authorities and European meteorological services
• IP-based geolocation — the first time the app is opened, your IP address is sent to a service for approximate location determination in order to suggest the nearest populated places
• Notifications — the Google and Apple platforms process the notification keys for individual devices and deliver the notifications to your phone
• Radar and satellite data — radar and satellite imagery is served from cloud storage infrastructure
• Product analytics — pseudonymised app usage data is processed by analytics tools on servers located in the EU
• Error reporting — error and crash reports are processed by observability tools on servers located in the EU
• Website hosting — the website and its forecast pages are served by a cloud infrastructure provider, which processes the IP address and technical request data
• Website analytics — website visit data is processed by Google Analytics under the conditions in section 6
• Contact form — service providers for abuse prevention and message delivery process the technical data and content needed to send the enquiry

All service providers process data in accordance with their own privacy policies and receive no data beyond what is necessary to provide the respective service.

4.2 Transfers outside the EEA

Some of our providers (e.g. Google, Apple) may process data outside the European Economic Area (EEA). In those cases the transfer takes place on the basis of standard contractual clauses (SCCs) adopted by the European Commission, or an adequacy decision. For more information you can consult the privacy policies of the respective providers.

4.3 Legal obligations

We may disclose data where this is required by law or under a lawful order of a competent authority.

5. Background location

If you have granted location access and have enabled notifications for precipitation or bad and dangerous weather, the app may periodically check for an updated GPS location. This is done solely in order to send notifications matching your current position, and to refresh the forecast.

You can restrict or stop access to your GPS location at any time:

• Android: Settings → Apps → "Vremcho" → Permissions → Location
• iOS: Settings → Privacy & Security → Location Services → "Vremcho"

If you prefer not to share your GPS location, you can enter the place you want manually.

6. Cookies and tracking

The mobile app does not use cookies. It uses the identifier described in section 2.2 and the technical notification key described in section 2.3. On Android, clearing the app's data removes the identifier. On iOS, it is stored in Keychain and may remain after the app is deleted and reinstalled.

The "Vremcho" website may use cookies for analytics purposes, including for user analysis, as required by Google Analytics to collect statistical information about visits and traffic. You can control or restrict the use of cookies at any time through your web browser settings.

Analytics cookies are activated only if you accept them in the cookie notice. You can change your choice at any time through "Cookie settings" at the bottom of every page; if you decline, we remove the Google Analytics cookies. Without your consent, Google Analytics receives only anonymous signals without cookies, which contain no identifier.

Besides cookies, the website saves some of your settings in your browser (see section 2.9).

7. Data retention

8. Security

• All communication between the app, the website or AI assistants and our servers is encrypted
• Device identifiers are randomly generated and are not matched to a name, email address or user account, but they can link data from the same device

9. Your rights (GDPR)

If you are located in the EU/EEA, you have the following rights:

• Right of access — you have the right to obtain confirmation as to whether we process personal data about you and, if so, a copy of that data together with information about the purposes and conditions of processing
• Right to rectification — if the data we process about you is inaccurate or incomplete, you have the right to request its correction
• Right to erasure — in certain circumstances, such as where the data has been processed unlawfully or you have withdrawn your consent, you have the right to request the erasure of your personal data (the "right to be forgotten")
• Right to restriction of processing — in certain circumstances you have the right to request a temporary restriction of the processing of your data until the matter in question is resolved
• Right to data portability — where your data is processed on the basis of your consent or for the performance of a contract, you have the right to receive it in a structured, commonly used and machine-readable format
• Right to object — you have the right to object to the processing of your data where it is based on legitimate interest
• Right to withdraw consent — where processing is based on your consent (e.g. precise location or analytics cookies), you may withdraw it at any time through your device settings or through "Cookie settings" at the bottom of the website, without affecting the lawfulness of processing carried out before the withdrawal
• Right to lodge a complaint — you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg

To exercise your rights: contact form

We respond within 30 days.

10. Changes to this policy

In the event of material changes we will notify you through a notification in the app, on the website or through an updated date at the top of this document. Continued use of the app or the website after the changes take effect constitutes acceptance of the updated policy.

11. Contact

For any questions about "Vremcho": contact form