Brizze Privacy Policy

This Privacy Policy explains what information Brizze (the "App"), operated by Nanoologi Ltd. ("Nanoologi", "we", "us", or "our"), collects, how it is processed and secured, how third-party weather data providers are utilized, and the rights and choices available to you.

1. Using Brizze Anonymously (Without an Account)

Creating an account or signing in is completely optional. You can browse global wind spots, inspect interactive maps, review forecast charts, and check live station readings without providing a name, email address, or phone number.

No Device Location Tracking: Brizze does not track, log, or record your device's physical GPS location. The map view is not centered around your physical position, and no background or foreground location permissions are requested for basic operation.

2. Meteorological Data Sources & Weather Providers

To deliver live weather station observations, high-resolution wind forecasts, wave telemetry, and spot intelligence, Brizze interfaces with reputable third-party meteorological sources and data networks. We are committed to transparency regarding how data is fetched:

• Open-Meteo (Open-Meteo GmbH): Numerical weather and marine forecast models (hourly wind speeds, gusts, wind directions, wave heights, and wave periods) are queried via Open-Meteo APIs. Only the geographic coordinates (latitude and longitude) of the pre-configured spot and desired weather parameters are transmitted in API requests. No user identifiers, names, emails, IP tracking identifiers, or device profiles are shared with or stored by Open-Meteo.
• Holfuy (Holfuy Kft.): Real-time automated physical weather station telemetry and live anemometer readings are retrieved directly via Holfuy station endpoints. Queries strictly request public station IDs. No user personal data or device tokens are shared with Holfuy.
• Windguru (Windguru.cz): Spot forecast references and direct external links are provided to allow users to verify conditions against Windguru's computational models. Brizze does not share your account or personal data with Windguru. When clicking an outbound Windguru link, you navigate to their website or app, subject to Windguru's own privacy policy.
• Windy.app (Windy Weather World Inc.): Spot forecast references and deep links are integrated so riders can consult complementary forecast charts. Brizze does not transmit your personal information to Windy.app. Interacting with outbound links is governed by Windy.app's independent terms and privacy policy.
• Israel Meteorological Service (IMS): Public weather telemetry and coastal station feeds are queried using station identifiers. No personal user information is transmitted.
• Webcam Providers: Outbound streaming video links and embedded feeds (such as SkylineWebcams, WaveHub, and spot hosts) are accessed directly. Nanoologi does not transmit user profiles to webcam hosts.

3. Information We Collect If You Choose to Sign In

If you choose to create an account or sign in (via Google Sign-In, Sign in with Apple, or Email/Password), we store the following minimal profile information:

• Account Credentials: Your name and email address as authenticated by your selected sign-in provider;
• Authentication Provider: The authentication method used (e.g. Google, Apple, or Email);
• In-App Preferences: Your selected display theme (dark/light), interface language, wind-speed measurement unit (knots, bft, m/s, km/h, mph), and list of saved favorite spots;
• Push Notification Device Token: If you explicitly grant permission to receive wind alerts, a random cryptographic push notification token (FCM/APNs) is registered to deliver alerts when conditions trigger at your saved spots. This token is instantly deleted from active delivery upon signing out.

4. Push Notifications & Alerts

If you enable push notifications, the App registers your device with Apple Push Notification service (APNs) and/or Google Firebase Cloud Messaging (FCM). Notifications are strictly utilized for functional alerts (such as wind condition shifts at favorited spots or critical service announcements). We do not send unsolicited marketing notifications. You can revoke notification permissions at any time via the App settings or your device's system settings.

5. Diagnostic Logs & Crash Reporting

To maintain high app stability, fix crashes, and ensure backend performance, we use Google Firebase Crashlytics. When an unhandled crash or system error occurs, Crashlytics automatically collects technical diagnostic data, including device hardware model, operating system version, app version, and stack traces. This diagnostic data is pseudonymous, aggregated, and never linked to your personal identity or email address.

6. In-App Purchases & Subscription Data

Brizze integrates RevenueCat, Inc. to administer in-app purchases and subscription entitlements. When the App initializes, an anonymous device identifier may be communicated with RevenueCat to check entitlement status. All financial transactions, credit card handling, and billing are processed exclusively through Apple App Store or Google Play Store. Nanoologi never receives, processes, or stores your payment card details.

7. Third-Party Service Providers Overview

We work exclusively with industry-standard, secure infrastructure providers under strict data processing agreements:

• Google Firebase / Google Cloud Platform: Cloud Firestore (database), Firebase Authentication, Cloud Messaging (FCM), Crashlytics, and Remote Config;
• Google Maps SDK: Interactive map display and spot tile rendering (operating without location tracking enabled);
• RevenueCat, Inc.: In-app purchase verification and entitlement management;
• Apple & Google: Identity authentication (Sign in with Apple / Google Sign-In) and platform app store commerce.

8. Data Retention & Account Deletion

We retain account data for only as long as your account remains active. You possess the permanent right to delete your account and all associated preferences, favorite spots, and tokens. You can initiate an account deletion directly within the App settings or by sending an email request to rnd@nanoologi.com. Upon receipt, all personal account data will be permanently purged within thirty (30) days.

9. Your Legal Rights (GDPR & CCPA / CPRA)

Depending on your jurisdiction, you hold specific statutory rights under data protection laws, including:

• Right of Access: The right to request confirmation of what personal data we hold and receive a portable copy;
• Right to Rectification: The right to correct inaccurate or incomplete personal details;
• Right to Erasure ("Right to be Forgotten"): The right to have your account and personal records permanently deleted;
• Right to Restriction & Objection: The right to object to or restrict processing of your data;
• Non-Discrimination: We will never discriminate against you, deny services, or provide a differing quality of service for exercising your privacy rights.

To exercise any of these rights, contact us at rnd@nanoologi.com.

10. Children's Privacy

Brizze is not directed toward children under the age of 13 (or under 16 where required by European law). We do not knowingly collect or solicit personal data from children. If we discover that personal information from a minor has been collected without parental consent, we will promptly delete it.

11. Security Measures

We implement industry-standard technical, cryptographic, and organizational safeguards to protect all transmitted and stored data, including TLS/HTTPS encryption in transit, strict Firestore security rules, access control, and credential isolation.

12. Updates to This Privacy Policy

We may revise this Privacy Policy periodically to reflect technological advancements, regulatory changes, or updates to our data providers. The "Last updated" date at the top indicates when the latest modifications took effect.

13. Contact Our Data Protection Team

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: