Cyclari Privacy Policy
Last updated: 11 November 2026 · App: Cyclari (com.cyclari.storms) on Google Play
At a glance
- No account and no sign-in. We never ask for your name, email or phone number.
- Your content — up to five saved places (name and coordinates), alert settings and downloaded storm data — stays on your device.
- The app is free and shows ads from Google AdMob. Where the law requires it, we ask for your consent first, and you can change your choice in Settings at any time.
- We use Google Firebase (Analytics and Crashlytics) to count app usage and fix crashes, with pseudonymous identifiers only.
- We use Singular to measure which of our ad campaigns brought you to the app. It receives your advertising ID and IP address (used for approximate location) and only starts after your consent choice where consent is required.
- We do not sell your personal data.
- Questions: privacy@atenely.com
1. Who we are
Cyclari is published on Google Play by ATENELY TOV, a company registered in Ukraine (“ATENELY”, “we”, “us”). We are the controller of the personal data described here. This policy applies only to the Cyclari app; our website and other apps have their own policies.
2. Data the app uses
| Data | Why | Who receives it |
|---|---|---|
| Your app content and settings | To run the app | Nobody — stored only on your device |
| Advertising ID, IP address, device and app information, ad interactions | To show and measure ads, prevent fraud and, with consent, personalise ads | Google (AdMob) and the ad partners it works with, listed by Google at “Ad technology providers” and in the consent form |
| App-instance ID, device model, OS version, approximate country, in-app events, crash logs | To understand usage and fix bugs | Google (Firebase Analytics and Crashlytics) |
| Advertising ID, App Set ID, IP address (to derive approximate location), device and app information, Google Play install referrer, app opens, a few in-app events (for example finishing the first-run screens) and ad revenue | To attribute installs to our ad campaigns and measure them | Singular Labs, Inc. (attribution); results may be passed to the ad platforms we advertise on, such as Google Ads, Meta and TikTok |
| Your consent choices | To respect your privacy choices | Google (User Messaging Platform) |
3. Permissions and data on your device
- Approximate location (optional) — used once, when you tap “Use my location”, to add your current area as a place; you can add places by search or on the map instead.
- Notifications — alerts when a storm cone first reaches one of your places, for new storms, advisories and official warnings.
Place search uses the geocoder built into Android (on most devices provided by Google). It receives the text you type, and the coordinates of a point you pick on the map so it can name it.
To show official watches and warnings, the app sends the coordinates of each saved place to the US National Weather Service API (api.weather.gov). These requests carry the app name and our support email, not anything that identifies you.
Storm alerts use Firebase Cloud Messaging topics: your device subscribes to the ocean basins you follow and to coarse map cells, about 200 km across, around your places. A topic name reveals only that rough area, never the exact place. Our alert relay on atenely.com reads public National Hurricane Center data and sends alerts to these topics; it receives nothing from your device and keeps no list of subscribers.
You can refuse or withdraw any permission in Android settings; the related feature will then stop working, the rest of the app keeps working. Data stored on your device is deleted when you clear the app’s storage or uninstall it. If Android backup is turned on, your device may include it in your personal Google backup, which you control.
4. Advertising and consent
Cyclari is free because it shows ads served by Google AdMob. To serve ads, the Google Mobile Ads SDK processes your device’s advertising ID, IP address, device and app information and how you interact with ads. If you are in the European Economic Area, the United Kingdom, Switzerland or another region where consent is required, the app shows Google’s consent form before any ad is requested; you can accept, decline or choose purposes, and change your choice later in the app’s Settings under “Privacy choices”. If you decline, you may still see non-personalised or limited ads.
You can also reset or delete your advertising ID in Android settings (Settings → Privacy → Ads). Google’s use of data is described in How Google uses information from sites or apps that use our services.
5. Analytics, crash reports and install attribution
We use Google Analytics for Firebase and Firebase Crashlytics. They process pseudonymous data such as an app-instance identifier, device model, operating system version, approximate country derived from the IP address, app events (for example which screens are opened) and crash traces. We use these reports in aggregate to improve the app and do not use them to identify you. Analytics events never include text you type or your precise location.
Install attribution (Singular)
We use Singular, a mobile measurement partner, to understand which of our own ad campaigns lead to installs. The Singular SDK in Cyclari sends Singular your device’s advertising ID, the App Set ID, your IP address (used to derive approximate location, such as country and city), device model, operating system and app version, the Google Play install referrer, app opens, a small set of events (for example finishing the first-run screens or opening the main screen) and the revenue of ads shown in the app. It does not receive your app content. Singular matches this with ad clicks and views from the platforms we advertise on (such as Google Ads, Meta and TikTok) and shares attribution results with them server to server; the app itself contains no Meta or TikTok SDK.
Where consent is required (for example in the EEA, the UK and Switzerland), the SDK starts only after you have answered Google’s consent form, and if you do not consent to measurement we ask Singular to limit data sharing, so your data is not passed on to ad platforms. You can reset or delete your advertising ID in Android settings at any time. Singular’s handling of data is described in the Singular Privacy Policy.
6. Service providers
| Provider | What it does |
|---|---|
| Google LLC / Google Ireland Ltd. | Advertising (AdMob), consent management (UMP), analytics and crash reports (Firebase), app distribution (Google Play) |
| Singular Labs, Inc. (USA) | Install attribution and ad campaign measurement |
| NOAA National Hurricane Center and National Weather Service | public storm data the app downloads; the National Weather Service receives the coordinates of your saved places to return local alerts |
| Android geocoder (Google on most devices) | to turn place searches into coordinates and name points you pick on the map |
| Firebase Cloud Messaging (Google) | to deliver storm alerts. Your device gets a push token and subscribes to alert topics for the basins you follow and the rough areas of your places; we do not link this to your identity |
| Our alert relay (atenely.com, hosted by Hostinger) | a server we operate that reads public NHC advisories every few minutes and sends alerts to Firebase topics; it receives no data from your device |
Some of these providers process data outside your country, including in the United States. Google relies on the EU–US Data Privacy Framework and Standard Contractual Clauses for such transfers.
7. Legal bases
Where data protection law (such as the GDPR or the Law of Ukraine “On Personal Data Protection”) requires a legal basis, we rely on your consent for personalised advertising and for storing or accessing information on your device where required (Art. 6(1)(a) GDPR); on our legitimate interest in providing a free, ad-supported app, keeping it secure and fixing crashes (Art. 6(1)(f)); and on legal obligations (Art. 6(1)(c)). For install attribution we rely on your consent where it is required and otherwise on our legitimate interest in measuring our advertising.
8. How long we keep data
Content on your device stays until you delete it. Firebase Analytics data is kept for 14 months, crash reports for 90 days. Advertising data is kept by Google according to its own retention policies. Singular keeps attribution data according to our agreement with it and its own retention policy. Emails you send us are kept as long as needed to answer you and then up to two years.
9. Children
Cyclari is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, write to privacy@atenely.com and we will delete it.
10. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA or KVKK), you may have the right to access, correct, delete or port your data, to object to or restrict processing, to withdraw consent at any time and to complain to a data protection authority. We do not sell or share personal data for cross-context behavioural advertising as those terms are defined in California law, other than through Google’s ad services and Singular’s attribution service under the consent choices described above. To exercise your rights, write to privacy@atenely.com.
11. Deleting your data
Cyclari has no accounts, so there is no account to delete. To delete everything the app stores on your device, clear the app’s storage or uninstall it. To reset the identifiers used for ads, reset or delete your advertising ID in Android settings. To ask us to delete analytics or crash data associated with your app instance, email privacy@atenely.com with the subject “Cyclari data deletion”; we answer within 30 days. We will also ask Singular to delete attribution data linked to your advertising ID if you include it in your email.
12. Changes
If we change how Cyclari handles data, we will update this page and the Data safety section on Google Play before the new version is released, and change the date at the top.
13. Contact
ATENELY TOV, Ukraine · privacy@atenely.com · support: info@atenely.com