We built Arcticlyn with a simple principle: your data belongs to you. The app works without a user account and without storing personal information on our servers. This policy explains exactly what we do — and do not — collect.
Who We Are
Arcticlyn is a mobile application for real-time aurora borealis monitoring developed and operated as an independent product. For any privacy-related questions, you can reach us at hello@arcticlyn.com.
Data We Collect
Arcticlyn is designed to minimize data collection. Here is a complete and honest list of what the app accesses:
- Location (GPS) — used in real time to fetch your local cloud cover forecast, calculate your OVATION aurora probability, determine astronomical darkness at your latitude, and assess moon impact during the viewing window. Location is never stored on our servers and never shared with third parties.
- Device push token — only if you opt in to aurora alerts. Used exclusively to deliver notifications to your device. Stored securely and never used for advertising.
- Local cache — the app stores recent aurora data locally on your device (localStorage) to enable instant loading and reduce API calls. This data never leaves your device.
We do not collect your name, email address, browsing history, contacts, or any other personal identifier unless you are a hotel operator registering for the For Hotels plan.
Third-Party Services
The app uses the following external data sources. None of them receive personally identifiable information from us:
- NOAA SWPC — provides Kp index, solar wind data, and Bz. Public API, no personal data transmitted.
- NOAA OVATION — aurora probability model. Your rounded GPS coordinates are used to query local probability. No personally identifiable data sent.
- Open-Meteo — cloud cover forecast by GPS position. Coordinates are sent per request but not stored or linked to any identity by Open-Meteo. See open-meteo.com for their privacy policy.
- Firebase Cloud Messaging (FCM) — used to deliver push notifications to opted-in users. Subject to Google's privacy policy. We only store the device token, not any Google account information.
- Nominatim / OpenStreetMap — used for reverse geocoding your location into a human-readable city name displayed in the app header. No data retained by us or OpenStreetMap beyond the immediate response.
How We Use Your Data
Every piece of data we access has a single, specific purpose:
- GPS coordinates → calculate aurora visibility at your location
- Push token → deliver critical aurora alerts you have opted into
- Local cache → faster load times and reduced network usage
We do not use any data for advertising, profiling, behavioral analysis, or any purpose other than providing the aurora forecasting service.
Data Retention
Because the app operates without a user account, there is no user profile to retain. All data processed by Arcticlyn is either transient (used for a single request and discarded) or stored locally on your device under your control.
If you are a hotel operator with a For Hotels account, we retain your account information (business name, email address, subscription status) for as long as your subscription is active. Upon account deletion, your data is permanently removed within 30 days.
Push Notifications
Aurora alerts are entirely opt-in. You can withdraw consent at any time through your device Settings → Notifications → Arcticlyn or by toggling alerts off within the app. Withdrawing consent does not affect any other functionality of the app.
If you are a guest at a partner hotel and connected via QR code, your device token is linked to that property for a period of up to 24 hours. You can unlink at any time by removing the app or revoking notification permissions.
Your Rights
You have the right to access, correct, or request deletion of any personal data we hold about you. Since the consumer app collects no personal data on our servers, these rights primarily apply to hotel operator accounts.
To exercise any of these rights, contact us at hello@arcticlyn.com. We will respond within 30 days.
Children's Privacy
Arcticlyn is not directed at children under the age of 13. We do not knowingly collect any information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.
Changes to This Policy
We may update this Privacy Policy as the product evolves — particularly when new features such as push notifications or hotel management are rolled out. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
We are happy to answer any questions about how we handle your data. Write to us and we will respond within 30 days.
hello@arcticlyn.com