Privacy Policy

Effective date: July 2, 2026 · Applies to the Krona Sunlight watch face and companion apps ("the App") and the Krona weather service at api.kronasunlight.lordskippy.com.

Who we are

Krona watch faces are developed and operated by Simon Barke, an individual developer based in Florida, United States ("we", "us"). For anything in this policy, contact us at simon.barke@gmail.com.

The short version

The App needs your location to show the weather where you are. Your watch sends coordinates to our weather server; the server immediately reduces them to a ~5 km grid cell, fetches the forecast, and remembers only the grid cell — never your precise position. We don't run ads, we don't sell data, we don't want your name, and there is no account to create.

What we collect, and why

Data	Where it goes	Why	Kept for
Device location (coordinates)	Sent from your watch to our weather server over an encrypted connection (TLS). The server forwards the coordinates to the weather data provider (currently Open-Meteo) to obtain the forecast, and stores only a ~5 km geohash grid cell — not the coordinates.	Showing the forecast for your location; caching so nearby users share one upstream request.	Grid cell in request statistics: up to 12 months. Forecast cache: up to 2 hours.
Request statistics (timestamp, grid cell, cache status, response time, HTTP status, and — for premium users — a purchase-linked license key)	Our server (hosted by DreamHost in the United States).	Service reliability, abuse prevention, capacity planning, verifying premium entitlements.	Up to 12 months.
IP addresses in standard web-server logs	Our hosting provider's ordinary access logs.	Security and troubleshooting (an inherent part of operating any web service).	Approximately 30 days.
Purchase information	Handled entirely by Google Play. We receive a purchase token confirming your entitlement — never your payment details, name, or address.	Unlocking premium features you paid for.	For as long as your entitlement is active, plus statutory record-keeping periods.
Settings and cached weather on your device	Stay on your watch/phone. Never uploaded.	The App working the way you configured it, including offline.	Until you clear the App's data or uninstall it.

What we do not do

No advertising, no ad identifiers, no analytics SDKs, no selling or renting of data, no cross-app tracking, no profiling, no accounts, no collection of names, email addresses, contacts, health data, or message content. The App requests exactly one sensitive permission: location.

Third parties we rely on

Open-Meteo (weather data, EU-based) — receives coordinates from our server to produce your forecast. See the Open-Meteo terms. If our server is unreachable, the App may query Open-Meteo directly from your device as a fallback, in which case Open-Meteo receives your device's request (including IP address).
DreamHost (server hosting, USA) — processes all server-side data above on our behalf.
Google Play / Google LLC — app distribution, billing, and (on the watch) the fused location service that supplies your position to the App. Governed by Google's privacy policy.

Legal bases (GDPR / UK GDPR)

Where the GDPR applies, we process location and request data to perform our contract with you (delivering the forecasts the App exists for, verifying purchases) and under our legitimate interest in operating a reliable, abuse-free service (statistics, logs). We do not use consent-based processing, because we collect nothing beyond what the service needs.

International transfers

Our server is located in the United States. If you use the App from the EU/EEA, UK, or elsewhere, the request data described above is processed in the United States. We minimize what is transferred (grid cells, not coordinates; no identity data).

Your rights

Depending on where you live (EU/EEA, UK, California, and other jurisdictions), you may have the right to access, correct, delete, or export data about you, to object to or restrict processing, and to complain to your data-protection authority. Two honest caveats: we usually cannot identify you in our data (grid cells and timestamps are not linked to your identity), which means most stored data is effectively anonymous; and where we can (a premium license key), we will delete or disable it on request. Email simon.barke@gmail.com and we will respond within 30 days. We never discriminate against you for exercising any right.

Data deletion

The App requires no account. To remove on-device data, uninstall the App or clear its storage. To request deletion of server-side data linked to a premium purchase, email us with your Google Play order number; we will delete the associated license key and its request statistics.

Children

The App is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

Security

All traffic between the App and our server uses TLS. Server credentials and upstream API keys are stored outside the web root with restricted access. No system is perfectly secure, but our best protection is structural: we simply don't hold data worth stealing.

Changes to this policy

If we change this policy, the new version will be posted here with an updated effective date. Material changes (for example, a new category of collected data) will additionally be announced in the App's store listing changelog.