Privacy Policy

The short version

Aurora Iceland is an aurora forecast app made by Meðalheimur ehf, a small Icelandic company. The app has no user accounts, shows no ads, and we do not sell or share your data for advertising. We collect the minimum needed to show you a forecast, deliver aurora alerts you asked for, and honor your purchase.

What we collect, and why

Device identifier. The app generates a random identifier for your installation. We use it to store your alert preferences and to restore your Aurora Pass if you reinstall the app. It is not your advertising ID and it does not identify you personally.

Location. The app uses a location to compute your forecast. By default this is a place you pick from a list (for example Reykjavík or Vík). If you tap "Use my location", the app reads your device GPS position once, with your permission, and uses those coordinates the same way. Coordinates are sent to our servers with each forecast request, and — if you enable alerts — stored with your device record so we can watch the sky where you are. The app never tracks your location in the background.

Push token and alert preferences. If you enable aurora alerts, we store your push notification token and your chosen thresholds so our servers can send you an alert when conditions are right.

Purchase records. When you buy a Trip Pass or subscription, Apple or Google processes the payment. We never see your card details. We store the transaction identifier, product, and expiry date so your purchase can be restored across reinstalls.

Server logs. Our servers keep standard technical logs (IP address, request time) for security and troubleshooting.

The website (auroraiceland.app) sets no cookies and runs no analytics or trackers.

What we do not collect

No accounts, names, or email addresses (unless you email support yourself). No contacts, photos, or files. No advertising identifiers. No background location tracking. We do not sell personal data, and we do not use it for advertising or profiling.

Service providers

We use a small number of processors to run the service:

Apple App Store / Google Play — payment processing and subscription management, under their own privacy policies.

Firebase Cloud Messaging (Google) — delivery of push notifications. Firebase receives your push token.

Mapbox — map rendering. When you open the map, your device requests map tiles from Mapbox, which receives your IP address and standard telemetry as described in the Mapbox privacy policy.

Amazon Web Services — hosting of our forecast servers and database.

Weather and space-weather data comes from Open-Meteo and NOAA; only the coordinates being forecast are sent to them, never your identity.

How long we keep data

Device records and alert preferences are kept while your alerts are active and deleted after 12 months of inactivity, or immediately on request.

Purchase records are kept as long as needed to restore purchases, and as required by Icelandic accounting law.

Server logs are kept for up to 90 days.

Legal bases (GDPR)

We process data to perform our contract with you (showing forecasts, delivering the pass you bought), with your consent (device location, push notifications — both revocable at any time in your device settings), and under our legitimate interest in keeping the service secure and working.

Your rights

You can ask us to access, correct, or delete the data connected to your device identifier at any time — email us and we will handle it promptly. You can also revoke location and notification permissions in your device settings, which stops the related processing immediately. If you are in the EEA, you have the right to lodge a complaint with your data protection authority; in Iceland that is Persónuvernd.

International transfers

Our processors (Google, Mapbox, Amazon Web Services) may process data outside the EEA, in particular in the United States, under the EU standard contractual clauses or an adequacy decision.

Children

Aurora Iceland is not directed at children under 13 and we do not knowingly collect personal data from them.

Changes to this policy

If we change this policy, we will post the new version here with an updated date. Material changes will be highlighted in the app.

Contact

Meðalheimur ehf (kt. 430221-0190), Brattahlíð 32, Iceland.

Email: medalheimur@medalheimur.is