Last updated: Version 2.3 — in force as of 24 September 2026 · last updated 10 October 2026
We measure, in aggregate, the use of certain features (for example the “Greetings of the Season” backgrounds) in order to decide on our developments. This measurement relies on a pseudonymous measurement identifier stored on your device (not linked to your identity, capped at 13 months then renewed) and a server-side retention limited to 25 months. The statistics produced are anonymous.
Disabling the measurement has no effect on how the service works.
This summary does not replace the detail that follows.
Controller
ONEA ENVIRONMENT LIMITED
43 Castelnau Mansions, SW13 9QU London, United Kingdom
Company number: 08312262
Contact: privacy@oz-forecast.com
Representative in the European Union (Article 27 GDPR)
In accordance with Article 27 GDPR, ONEA ENVIRONMENT LIMITED has designated a representative in the EU/EEA: Data Protection Representative Limited (trading as “DataRep”). For any question relating to the processing of your data, address your correspondence to “DataRep”, at one of its locations in the EU/EEA — e.g. France: DataRep, 72 rue de Lessard, 76100 Rouen, France; Ireland: DataRep, 77 Camden Street Lower, Dublin, D02 XE80, Ireland. DataRep has contact locations in the 30 EU/EEA countries and in Switzerland. For any question about our products/services, please contact privacy@oz-forecast.com instead.
If you reside in the European Union, you may address either ONEA ENVIRONMENT LIMITED or its representative, in particular to exercise your rights.
Representative in Switzerland (nFADP)
Representative in Switzerland: Data Protection Representative Limited (“DataRep”), Leutschenbachstrasse 95, 8050 Zurich, Switzerland (correspondence addressed to “DataRep”).
Data-protection contact: privacy@oz-forecast.com
It covers the OZ Météo mobile application and the oz-forecast.com website. It does not cover:
Language. This policy is available in French and in English; the other languages offered in the application concern the interface and are not versions of this policy. Each version prevails in the territory where it is made available; no version may be invoked to reduce the rights you hold under the version written in your own language. The English version is the reference for our representative under Article 27 GDPR and for supervisory authorities.
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Precise geographic location | Display the weather for your location and nearby alerts | Your consent (Art. 6(1)(a)), withdrawable at any time | Processed in memory. Not stored in our databases. May appear in the API’s technical logs for 30 days |
| IP address | Estimate your city if you do not enable geolocation; security and abuse prevention | Legitimate interest (Art. 6(1)(f)) | Resolved locally via an offline database, with no call to a third-party service. API/CDN logs 30 days |
| Selected city | Recall your city from one visit to the next | Legitimate interest (Art. 6(1)(f)) | Your city preference is stored only on your device. The city name is sent to our servers with each weather request, solely to return your forecast; it is not used to profile you (may appear in technical logs for 30 days) |
| Display preferences | Keep your settings | Legitimate interest (Art. 6(1)(f)) | On your device only |
Technical identifier oz_uid | Limit spam and duplicates in reports | Legitimate interest (Art. 6(1)(f)) | On your device. 12 months, then regenerated |
| Technical logs | Security, diagnostics, availability | Legitimate interest (Art. 6(1)(f)) | 30 days |
| Product-usage measurement (pseudonymous measurement identifier, event name, platform) | Measure, in aggregate, the use of certain features in order to decide on our developments. Opt-out available (see the “Your choices” box at the top of the page) | Legitimate interest (Art. 6(1)(f)) — objection/opt-out at any time | Identifier on your device capped at 13 months then renewed; server-side measurement data ≤ 25 months (purge) |
| Acquisition attribution (utm source / referrer + platform, at the time of purchase) | Know which channel a subscription comes from | Legitimate interest (Art. 6(1)(f)) | Nothing is stored on your device. Read at checkout (last-touch) and filed with the order on the server side |
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
Report location, category (jellyfish, flood, fire…), optional comment, oz_uid identifier | Alert other users to an observed phenomenon | Performance of the service you request (Art. 6(1)(b)) | Deleted automatically 24 h after publication. Backups purged within 30 days |
A report is public. Do not include any data allowing a person to be identified — name, physical description, number plate, phone number — nor any information about anyone’s health. Reports containing such data are deleted as soon as we become aware of them.
If a report concerns you or contains personal data, write to privacy@oz-forecast.com: we delete it without delay.
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| E-mail address, account identifier, Paddle customer identifier | Create and manage your account, open access to paid features, contact you about the service | Performance of the contract (Art. 6(1)(b)) | Duration of the account; failing any login and subscription for 3 years, the account is purged after a reminder. In the event of deletion at your request, see § 10: nothing is kept on our side. |
| Subscription status (plan, state, period end date) | Verify your access to Premium features | Performance of the contract (Art. 6(1)(b)) | Duration of the contract, then 6 years (limitation period — Limitation Act 1980, s. 5), unless you exercise your right to erasure (see § 10). |
| Proof of consent — acceptance of the terms, version, timestamp, consent to renewal | Establish your consent in the event of an audit or dispute | Legal obligation (Art. 6(1)(c)) and legitimate interest for evidential purposes | Contract-linked consents (acceptance of the terms, request for immediate performance and waiver of the right of withdrawal): duration of the contractual relationship + 6 years (applicable limitation period). Consents relating to terminal equipment and geolocation: 12 months, unless you exercise your right to erasure (see § 10). |
| Tailor-made orders: product, status, consents, delivery date | Fulfil your order and establish that it was delivered | Performance of the contract (Art. 6(1)(b)) and legitimate interest for evidential purposes | 6 years after delivery (proof of performance, limitation period — Limitation Act 1980, s. 5), unless you exercise your right to erasure (§ 10), which shortens this period. |
| History of requests and complaints | Handle your requests and keep a record | Legitimate interest (Art. 6(1)(f)) | 3 years |
| Withdrawal declarations and acknowledgments — e-mail address, contract concerned, order reference where provided, reason if you give one, time of submission | Handle the exercise of your right of withdrawal and prove its receipt within the legal time limit | Legal obligation (Art. 6(1)(c)) — Art. L221-21 | Duration of the relationship + 6 years (limitation period), shortened by any erasure (see § 10) |
| Payment data | Collect payment | Processed by Paddle, never by us | See Paddle’s policy |
We never have access to your card number. It is transmitted directly to Paddle, in a PCI-DSS certified environment.
Who sells, who provides. Your purchases are concluded with Paddle, which acts as seller and as an independent controller for the sales transaction. We receive from it the information that your subscription is active, together with a transaction reference, which we keep in order to open the corresponding rights for you. We do not copy your billing data — no name, no address, no country, no card fragment. The service itself is provided by ONEA.
The “Best Moment” feature indicates the best time slot for an activity based on the real weather. It relies on weather data (non-personal) and, if you provide them, on the elements below.
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Feedback on a recommendation (to come — not yet available) (“Did you follow this advice?”, “Was it the right time?” — 👍/👎 and optional reason), with the decision context: activity, recommendation identifier, engine and data versions, without identifying you | Will measure, in aggregate, whether our recommendations are useful and improve them (service quality). Free and optional. Opt-out via the “Your choices” box at the top of the page | Legitimate interest (Art. 6(1)(f)) — objection/opt-out at any time | Pseudonymous measurement data, server-side ≤ 25 months (purge) |
| Window-alert intent (Premium feature — to come) activity, chosen place, desired criteria, and the notification channel (application notification or e-mail address, as you choose) | Will watch the forecast and notify you when a good window appears for the activity and place you have defined | Performance of the contract (Art. 6(1)(b)) for the feature; your consent (Art. 6(1)(a)) for sending notifications, withdrawable at any time | While the alert is active, then deletion on its removal or on termination |
| Per-city forecast history (successive forecast snapshots, no personal data) | Measure the stability of the forecast from one computation to the next in order to display an honest confidence index | — (non-personal data) | A few rolling days, per city |
Nothing is mandatory. The daily decision is provided with no collection whatsoever; feedback will be optional and aggregated; alerts will be created only if you request them. Notifications observe a limited frequency (no spam) and stop as soon as you wish.
OZ Moments turns a recommendation into a shareable invitation: the organiser creates a Moment (title, activity, place, time slots), obtains a private link and shares it. Guests reply with no account and no payment.
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Moment created by the organiser (title, activity, place, time slots, display name/pseudonym) and an unguessable link token | Create and display the invitation, generate the private sharing link | Performance of the requested service (Art. 6(1)(b)) | Deleted automatically 30 days after the last time slot (or immediately on the organiser’s request) |
| Guest reply (RSVP: yes/no/maybe, first name or pseudonym, optional message) | Allow the guest to reply and the organiser to see who is coming | Performance of the service requested by the organiser (Art. 6(1)(b)) | With the Moment; deleted when the Moment is deleted or on the guest’s request |
| Guest’s e-mail address — only if they provide it (e.g. for a reminder) | Send a reminder the guest has requested | Guest’s consent (Art. 6(1)(a)), withdrawable | Until the reminder, then deletion, or on request |
Guests are not OZ users and are never required to create an account, install the application or pay in order to reply. A Moment link is accessible only with its private token. To exercise their rights (access, deletion), a guest, like an organiser, may write to privacy@oz-forecast.com; the organiser may also delete their Moment (which deletes the associated replies).
| Processing | Legitimate interest pursued |
|---|---|
| IP address | Provide localised weather to those who decline precise geolocation; protect the service against abuse, overload and attacks |
| City and preferences | Spare you re-entering everything each time you open the app |
oz_uid identifier | Prevent a single device from flooding reports |
| Technical logs | Detect outages and security incidents |
| Retention of evidence and complaints | Establish our rights and yours in the event of a dispute |
| Product-usage measurement | Understand, in aggregate, which features are used in order to guide our developments — with no profiling and no advertising tracking (opt-out available) |
| Feedback on “Best Moment” recommendations | Measure, in aggregate and pseudonymously, whether our recommendations are useful in order to improve them — optional, without profiling (opt-out available) |
| Acquisition attribution (at checkout) | Know the channel a subscription comes from, with no storage on your device |
For each, we have assessed the balance between this interest and your rights and freedoms. This assessment is documented and available on request.
⚖️ Your right to object
You have the right to object, at any time and on grounds relating to your particular situation, to any processing we base on our legitimate interest.
Simply write to privacy@oz-forecast.com. We will cease the processing, unless we demonstrate compelling legitimate grounds overriding your interests, or the need for the processing to establish, exercise or defend a legal claim.
OZ stores certain information directly on your device: your city, your display preferences and the anti-spam identifier oz_uid. This information is strictly necessary for the operation of the service you request and falls under the consent exemption provided for in Article 5(3) of Directive 2002/58/EC (Article 82 of the French Data Protection Act).
In addition, there is the usage-measurement identifier, kept for 13 months then renewed, and the token recording your objection if you exercise it. This identifier is not a matter of strict necessity: it benefits from the audience-measurement exemption, whose conditions we observe — limited purpose, on our own behalf only, anonymous statistics, no cross-referencing, no cross-site tracking, and free objection at any time. The objection token is, for its part, strictly necessary to honour your refusal.
We place no advertising cookie, no third-party audience-measurement tracker, no pixel. We use neither Apple’s IDFA nor Android’s AAID. The application therefore triggers no App Tracking Transparency request.
You can erase this information at any time from the application settings, by uninstalling it, or via your browser settings for the web version.
| Permission | Why | If you decline |
|---|---|---|
| Location | Display the weather and alerts for your location | The app works: you enter your city, or we estimate it from your IP address |
| Notifications | Alert you to a nearby phenomenon | No automatic alert; everything else works |
Each permission is requested separately, at the moment it becomes useful, never as a bundle. You can revoke them at any time from your device settings. No data is collected in the background when the application is closed.
| Recipient | Role | Data | Location |
|---|---|---|---|
| Supabase | Database of accounts and access rights | Email, account identifier, subscription status, transaction reference | Database in the European Union (eu-west-1, Ireland); support access possible from the United States, framed by the standard contractual clauses (SCC Module 2) + UK addendum |
| Paddle | Seller: collection, taxes, invoicing, subscription management — independent controller | Identity, billing address, transaction and payment data | Per Paddle’s policy (United Kingdom / United States) |
| Railway | API hosting | IP address, requests, logs | European Union (Netherlands) |
| Cloudflare | Delivery of images and maps, security | IP address, connection data | Global network |
| Resend | Sending service e-mails | Email, message content | Sending region European Union; storage/access possible in the United States per the provider’s documentation, framed by the standard contractual clauses (SCC) + UK addendum |
| DB-IP | Offline geolocation database | None — your IP does not leave our servers | — |
ipapi.co / ipwho.is | Exceptional fallback if the offline database is unavailable | Truncated IP address | United States |
| Public sources (NASA, GDACS, USGS, DWD, Copernicus…) | Weather and environmental data retrieved by our servers then passed to the application | No personal data — your device does not contact these sources | — |
| Basemap provider (CARTO) | Display of the map background. Tiles are loaded directly by your browser from the provider | IP address (technically necessary to deliver the image to you) | United States / global network |
| NASA GIBS | Display of satellite imagery (cyclones, imagery). Tiles loaded directly by your browser | IP address (necessary to deliver the image) | United States |
| EODC (flood imagery) | Display of flood satellite tiles (COG). Loaded directly by your browser | IP address (necessary to deliver the image) | European Union (Austria) |
| GloFAS / JRC (flood forecasting) | Display of the flood-forecast overlay (WMS). Loaded directly by your browser | IP address (necessary to deliver the image) | European Union |
| Open-Meteo (geocoding) | Search for a city by name, relayed by our servers | No personal data — your device does not contact this provider | — |
| Anthropic (AI weather narrative) | Generation of the weather narrative, relayed by our servers. We transmit only the city, public weather data, the language and the tone desired | No personal data transmitted — your device does not contact this provider | United States / global network |
| Microsoft Azure (narrative voice) | Spoken reading of the narrative (speech synthesis), relayed by our servers. We transmit only the narrative text and the language | No personal data transmitted — your device does not contact this provider | European Union (France Central) |
An important distinction. Weather and environmental data (forecasts, alerts, analysis satellite) are retrieved by our servers, which relay them to the application: the public sources never see your device or your IP address. By contrast, the basemap tiles (CARTO), the satellite tiles (NASA GIBS for cyclones, EODC for flood imagery) and the flood-forecast overlay (GloFAS / JRC) are, for performance reasons, loaded directly by your browser from the provider: the provider then receives your IP address, technically indispensable to deliver the requested image to you. These providers act as independent controllers for that connection data.
A processing agreement compliant with Article 28(3) GDPR is concluded with each of our processors.
Content generated by artificial intelligence. The weather narrative and its spoken reading are AI-generated content. This information is provided to you under Article 50(4) of the European Artificial Intelligence Regulation (“AI Act”); it is also recalled in the interface, next to the narrative.
We neither sell nor rent your data. We disclose it to no data broker and no advertiser. We may be required to disclose data to an authority upon a lawful request; we then verify its regularity and, unless prohibited, inform you.
Our database is hosted in the European Union. Some other providers are established outside the Union. These transfers are framed by the “EU-US Data Privacy Framework” adequacy decision where the recipient is certified (UK extension for transfers from the United Kingdom), or failing that by the European Commission’s standard contractual clauses (decision 2021/914), supplemented for the United Kingdom by the ICO addendum and a transfer impact assessment. You can obtain a copy of the safeguards by writing to privacy@oz-forecast.com.
Flows to the United States. When the map is displayed, your browser loads the map background (CARTO) and the NASA GIBS satellite tiles directly from these providers, whose infrastructure may be located in the United States; the only data transmitted is your IP address, technically necessary to deliver the image (see section 7). The flood tiles (EODC) and flood-forecast tiles (GloFAS / JRC) are, for their part, served from the European Union. The geolocation fallback ipapi.co / ipwho.is, called only if our offline database is unavailable, receives a truncated IP address. These transfers are limited to connection data and rely, depending on the provider, on its Data Privacy Framework certification or on the standard contractual clauses.
How to exercise them. Write to privacy@oz-forecast.com, or address our representative in the Union (section 1). We respond within one month (extendable by two months if complex). Exercising your rights is free of charge; a manifestly unfounded or excessive request may give rise to reasonable fees or to a reasoned refusal. We may ask for what is needed to verify your identity, without keeping it beyond the processing.
A limit depending on your situation. If you use OZ for free, much of the data does not allow you to be identified (neither location nor city kept; oz_uid stays on your device): if we cannot link you to data, we will tell you and will not collect information to identify you (Article 11 GDPR). If you have an account or have made a purchase, you are linked to an e-mail address and your rights are exercised in full; the data relating to the sale is held by Paddle (address requests to it, or go through us).
You can delete your account yourself and immediately: sign in, open Discover › Sign-in and choose “Delete my account”. For security, we ask you to confirm your identity (one-time code sent by e-mail) then to confirm the action in words. The deletion is then immediate and permanent. You can also write to privacy@oz-forecast.com from your account address; we then delete it within one month.
When you delete your account, nothing is kept on the OZ side: your data is erased, including order records; proof of consent is detached from the account and no longer constitutes enforceable evidence. Invoices and accounting records are held by Paddle, the seller and official reseller, in accordance with its legal obligations.
If you have a current subscription, we cancel it automatically upon deletion (stop of renewal, end of access); for any refund question, the seller Paddle is responsible. You can also manage your subscription at any time from the Paddle customer portal.
Our measures: encryption in transit (HTTPS/TLS) and at rest; least-privilege access with strong authentication of administrative access; access logging; backups purged according to the periods in section 3; automatic deletion of reports after 24 h; verification of the signature of all notifications from our payment provider; security updates.
In the event of a data breach, we record it in our register, notify the supervisory authority within 72 hours if the breach presents a risk, and inform you individually and as soon as possible where the risk is high.
OZ is not intended to collect children’s data without the consent of the holder of parental authority. Age of digital consent: 16 years by default in the European Union, lowered by certain Member States to as low as 13 years (notably 15 years in France). In the United States, we do not knowingly collect data of children under 13 years without verifiable parental consent (COPPA). Subscription to a paid plan is reserved for those aged 18 and over (or with the agreement of the legal representative): the age of consent to processing and the age to contract are distinct.
If you are the holder of parental authority and believe your child has provided us with data, write to privacy@oz-forecast.com: we delete it.
We take no decision based solely on automated processing producing legal effects concerning you (Article 22 GDPR), and carry out no profiling for advertising, commercial or behavioural-analysis purposes. Alerts and forecasts result from weather models applied to a location; they do not constitute profiling and in no way replace official safety warnings (Article 13 of the general terms of service).
If you believe your rights are not respected, you may lodge a complaint with the supervisory authority of your country of residence, your place of work, or the place of the breach.
We invite you to contact us first: this resolves most situations more quickly.
Any substantial change (new purpose, new data category, new recipient, lengthening of a period) is notified to you at least 30 days before it takes effect. Where a new purpose relies on your consent, it is requested again. Minor corrections take effect on publication.
Questions relating to your data: privacy@oz-forecast.com
Representative in the European Union: see section 1
Postal address: ONEA ENVIRONMENT LIMITED, 43 Castelnau Mansions, SW13 9QU London, United Kingdom