Brizze Privacy Policy

This Privacy Policy explains what information Brizze (the "App"), operated by Nanoologi Ltd. ("Nanoologi", "we", "us", or "our"), collects, how it is processed and secured, how third-party weather data providers are utilized, and the rights and choices available to you.

1. Using Brizze Anonymously (Without an Account)

Creating an account or signing in is completely optional. You can browse global wind spots, inspect interactive maps, review forecast charts, and check live station readings without providing a name, email address, or phone number.

Device Location (Optional): If you allow it, Brizze reads your device's location while you use it to center the map on your area and, when you post a spot report, to check on your device that you are near that spot. Your location is used on your device only: Brizze does not send your coordinates to our servers, store them, or track your location in the background. You can decline or turn off location access at any time in your device or browser settings; the map then opens on a default view.

2. Meteorological Data Sources & Weather Providers

To deliver live weather station observations, high-resolution wind forecasts, wave telemetry, and spot intelligence, Brizze interfaces with reputable third-party meteorological sources and data networks. We are committed to transparency regarding how data is fetched:

• Open-Meteo (Open-Meteo GmbH): Numerical weather and marine forecast models (hourly wind speeds, gusts, wind directions, wave heights, and wave periods) are queried via Open-Meteo APIs. Only the geographic coordinates (latitude and longitude) of the pre-configured spot and desired weather parameters are transmitted in API requests. No user identifiers, names, emails, IP tracking identifiers, or device profiles are shared with or stored by Open-Meteo.
• Holfuy (Holfuy Kft.): Real-time automated physical weather station telemetry and live anemometer readings are retrieved directly via Holfuy station endpoints. Queries strictly request public station IDs. No user personal data or device tokens are shared with Holfuy.
• Windguru (Windguru.cz): Spot forecast references and direct external links are provided to allow users to verify conditions against Windguru's computational models. Brizze does not share your account or personal data with Windguru. When clicking an outbound Windguru link, you navigate to their website or app, subject to Windguru's own privacy policy.
• Windy.app (Windy Weather World Inc.): Spot forecast references and deep links are integrated so riders can consult complementary forecast charts. Brizze does not transmit your personal information to Windy.app. Interacting with outbound links is governed by Windy.app's independent terms and privacy policy.
• Israel Meteorological Service (IMS): Live readings from IMS weather stations are queried by our servers using station identifiers. No personal user information is transmitted.
• NOAA, Deutscher Wetterdienst (via Bright Sky) and GeoSphere Austria: Public station observations are queried by our servers using station identifiers. No personal user information is transmitted.
• Webcam Providers: Outbound streaming video links and embedded feeds (such as SkylineWebcams, WaveHub, and spot hosts) are accessed directly. Nanoologi does not transmit user profiles to webcam hosts.

3. Information We Collect If You Choose to Sign In

If you choose to create an account or sign in (via Google Sign-In, Sign in with Apple, or Email/Password), we store the following minimal profile information:

• Account Credentials: Your name and email address as authenticated by your selected sign-in provider;
• Authentication Provider: The authentication method used (e.g. Google, Apple, or Email);
• In-App Preferences: Your selected display theme (dark/light), interface language, wind-speed measurement unit (knots, bft, m/s, km/h, mph), list of saved favorite spots, good wind range, and alert settings;
• Push Notification Device Token: If you explicitly grant permission to receive wind alerts, a random cryptographic push notification token (FCM/APNs) is registered to deliver alerts when conditions trigger at your saved spots. This token is instantly deleted from active delivery upon signing out.

4. Content You Share With Other Riders

Some features publish what you choose to share so that other riders can see it:

• Spot Reports: The report you post (conditions, optional text and optional photo) is shown to other users at that spot, together with your display name and reporter level, unless you post anonymously where that option is offered;
• Lost & Found: Posts you create (photo, description and spot) are visible to other users for a limited period. If you claim an item or approve a claim, the two of you can exchange messages in a private chat between the two of you, which is not shown to other users;
• Spot Requests & Support Messages: When you ask us to add a spot or contact us, we receive the details you include so we can reply.

Photos you upload are stored in Google Firebase Cloud Storage. Do not include personal details you do not want other riders to see. Deleting your account removes your account data as described in Section 10.

5. Usage Analytics

To understand which features riders use and to improve Brizze, the App and the Brizze website use Google Analytics for Firebase. It records pseudonymous usage events (for example, which screens are opened, which filters are used, and whether a feature succeeded), together with device, app and browser information. We do not send your name, email address, free text you type, search text, or location coordinates to analytics. Analytics data may be exported to Google BigQuery within our Google Cloud project for reporting.

On the Brizze website, analytics runs only if you allow it, in the welcome dialog or later under Cookie settings. If you do not allow it, no analytics data is collected on the website and any analytics cookies are removed. You can change your choice at any time.

6. Push Notifications & Alerts

If you enable push notifications, the App registers your device with Apple Push Notification service (APNs) and/or Google Firebase Cloud Messaging (FCM). Notifications are strictly utilized for functional alerts (such as wind condition shifts at favorited spots or critical service announcements). We do not send unsolicited marketing notifications. If you start a live wind watch on iOS, a Live Activity push token is also registered so the wind on your lock screen can update; it is used only for that watch. You can revoke notification permissions at any time via the App settings or your device's system settings.

7. Diagnostic Logs & Crash Reporting

To maintain high app stability, fix crashes, and ensure backend performance, we use Google Firebase Crashlytics. When an unhandled crash or system error occurs, Crashlytics automatically collects technical diagnostic data, including device hardware model, operating system version, app version, and stack traces. This diagnostic data is pseudonymous, aggregated, and never linked to your personal identity or email address.

8. In-App Purchases & Subscription Data

Brizze integrates RevenueCat, Inc. to administer in-app purchases and subscription entitlements. When the App initializes, an anonymous device identifier may be communicated with RevenueCat to check entitlement status. All financial transactions, credit card handling, and billing are processed exclusively through Apple App Store or Google Play Store. Nanoologi never receives, processes, or stores your payment card details.

9. Third-Party Service Providers Overview

We work exclusively with industry-standard, secure infrastructure providers under strict data processing agreements:

• Google Firebase / Google Cloud Platform: Cloud Firestore (database), Firebase Authentication, Cloud Storage (uploaded photos), Cloud Messaging (FCM), Crashlytics, Remote Config, Google Analytics for Firebase, and BigQuery (analytics reporting);
• Google Maps: Interactive map display and map tiles in the App and on the website. Your location is not sent to us; when you allow location access, the map uses it on your device to center the view;
• RevenueCat, Inc.: In-app purchase verification and entitlement management;
• Apple & Google: Identity authentication (Sign in with Apple / Google Sign-In) and platform app store commerce.

10. Data Retention & Account Deletion

We retain account data for only as long as your account remains active. You possess the permanent right to delete your account and all associated preferences, favorite spots, and tokens. You can initiate an account deletion directly within the App settings or by sending an email request to rnd@nanoologi.com. Upon receipt, all personal account data will be permanently purged within thirty (30) days.

11. Your Legal Rights (GDPR & CCPA / CPRA)

Depending on your jurisdiction, you hold specific statutory rights under data protection laws, including:

• Right of Access: The right to request confirmation of what personal data we hold and receive a portable copy;
• Right to Rectification: The right to correct inaccurate or incomplete personal details;
• Right to Erasure ("Right to be Forgotten"): The right to have your account and personal records permanently deleted;
• Right to Restriction & Objection: The right to object to or restrict processing of your data;
• Non-Discrimination: We will never discriminate against you, deny services, or provide a differing quality of service for exercising your privacy rights.

Under Israel's Privacy Protection Law you have the right to review the personal information held about you and to ask for it to be corrected. You are not required by law to give Brizze personal information; providing it depends on your consent.

News and offers: we send you promotional messages only if you chose to receive them. You can change that choice at any time in the app's notification settings or in Settings on the website.

To exercise any of these rights, contact us at rnd@nanoologi.com.

12. Children's Privacy

Brizze is not directed toward children under the age of 13 (or under 16 where required by European law). We do not knowingly collect or solicit personal data from children. If we discover that personal information from a minor has been collected without parental consent, we will promptly delete it.

13. Security Measures

We implement industry-standard technical, cryptographic, and organizational safeguards to protect all transmitted and stored data, including TLS/HTTPS encryption in transit, strict Firestore security rules, access control, and credential isolation.

14. Updates to This Privacy Policy

We may revise this Privacy Policy periodically to reflect technological advancements, regulatory changes, or updates to our data providers. The "Last updated" date at the top indicates when the latest modifications took effect.

15. Contact Our Data Protection Team

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: