Privacy Policy

WeatherWall (package com.kirito.app.weatherwall)
Last updated: 8 October 2026 · Effective upon publication

This Privacy Policy explains what information the WeatherWall mobile application (the “App”) collects, why it is collected, who it is shared with, and the choices you have. It applies only to the App and not to any third-party website or service the App may link to.

1. Who we are

The App is developed and published by Kirito Dev (“we”, “us”), the data controller for the processing described here.

For any privacy question, request, or complaint, contact us at kirito.dev.app@gmail.com. We aim to respond within 30 days.

2. Information the App collects

2.1 Location

If you enable automatic location, the App requests approximate and precise location (ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION) and reads your current latitude and longitude in order to determine which place to show weather for. Location is read only while the App is in use; the App does not request or use background location.

Your coordinates are sent to our weather service at kiritodev.xyz to resolve them into a place (for example, a city). The App then stores that place and your coordinates on your device. Granting location is entirely optional — you may instead search for a location manually, or decline the permission and use the App without weather-by-location.

2.2 Location searches

When you type into the location search box, the text you type is sent to our service at kiritodev.xyz to return matching place suggestions.

2.3 Weather data requests

To fetch current conditions, forecasts and air quality, the App sends the coordinates of your selected place to our service, and for some providers also that place's name or identifier. This happens each time weather is refreshed, including the periodic refresh of the live wallpaper, and uses the saved place rather than reading your location again. Our service forwards these values to the weather provider you selected and to the air quality providers listed in Section 5. Weather responses are cached on your device so the App works briefly without a network connection.

2.4 Photos you select

You may choose a photo from your device to use as a wallpaper. Selection uses the Android system photo picker, so the App receives only the specific image you pick and never gains access to your photo library. The chosen image is copied into the App's private storage on your device. Selected photos are never uploaded, transmitted, or shared.

2.5 App settings

Your preferences — theme, refresh interval, location mode, visual effect presets, onboarding state, and a counter of rewarded-ad unlocks used — are stored locally on your device. Selected preference categories, such as theme, units, weather provider and wallpaper mode, may also be included in usage measurement as described in Section 2.9.

2.6 Advertising identifier

The App declares the com.google.android.gms.permission.AD_ID permission so that the Unity Ads software can access your device's Advertising ID for advertising purposes. See Section 4.

2.7 Purchases

Purchases and subscriptions are processed entirely by Google Play. We never receive or store your payment card details. The App asks Google Play whether you hold a valid entitlement and keeps that answer in memory for the current session. It also stores local purchase-state records and fingerprints derived from purchase tokens to avoid counting the same transaction more than once. These fingerprints remain on your device. Analytics may receive product and plan identifiers and purchase outcomes; our custom Analytics events do not include purchase tokens or order IDs.

2.8 Technical information sent automatically

As with any internet request, the servers the App contacts receive your device's IP address and standard network request information. Our weather service uses this information to deliver the requested content and keep the service secure and reliable. Analytics, diagnostics and advertising providers process technical information for the purposes described in their respective sections.

2.9 Usage analytics

The App uses Google Analytics for Firebase, provided by Google, to measure how features are used and to improve the App. Events may describe screens viewed, onboarding and permission outcomes, wallpaper selections and changes, setting changes, weather request results, premium feature gates, purchase outcomes and rewarded-ad interactions. Event details may include feature or product identifiers, preference categories, entitlement status, result counts, durations and predefined error categories.

The Analytics SDK also processes an app-instance identifier, app sessions, app and device information, and automatic purchase or subscription events where available. Google may derive approximate location from masked IP addresses. We do not assign an account-based user ID. App-instance identifiers distinguish installations, so this data should not be considered completely anonymous.

Our custom Analytics events do not send precise GPS coordinates, saved place identifiers or addresses, location search text, selected photo contents, image paths or URLs, purchase tokens, order IDs, or payment card details. For example, a location search event records a result count and a query-length category rather than the words you searched for. Analytics Advertising ID collection and Analytics ad-personalisation signals are disabled in the App's configuration; Unity Ads is a separate service described in Section 4.

Usage analytics is enabled by default. The App does not currently provide an Analytics switch in Settings. A previously saved choice to disable Analytics is retained on upgrade. A paid upgrade does not disable usage analytics or crash reporting. This policy describes the processing and does not itself constitute consent where consent is required by applicable law.

2.10 Crash reporting and diagnostics

The App uses Firebase Crashlytics, provided by Google, to investigate crashes, application-not-responding errors and non-fatal errors. Reports may include installation identifiers, app and operating system versions, device information, crash stack traces, diagnostic logs and context such as the current screen or last operation. Analytics breadcrumbs may help explain the actions preceding a crash. We use these reports to identify faults and improve reliability; the App does not assign your name or email address to these reports.

More information about these services is available in Google's Privacy Policy, Firebase's privacy and security information and the Analytics SDK data disclosure.

2.11 Device and app verification

To protect the weather service from abuse, the App proves that requests come from a genuine copy of the App on a genuine Android device before our service answers them:

• Google Play Integrity API. The App asks Google Play for an integrity verdict, which our service checks. The verdict tells us whether the App was installed from Google Play and is unmodified, whether the device passes Google's integrity checks, the device's Android SDK version, Google Play Protect status, and a coarse level of recent integrity-request activity on the device. Google processes this request under its own privacy policy.
• Android key attestation. The App creates a signing key inside your device's secure hardware. The private key never leaves the device. The App sends us the public key and the certificate chain Android issues for it. This chain describes the key's security level, the device's verified boot state and the App's package and version.
• Installation key and device grant. After verification, our service issues a device grant tied to that public key. The App sends the grant, together with a short-lived token signed by the key, with each weather request. Because the key is unique to your installation, it works as an installation identifier. It is not linked to your name, account, Advertising ID or Analytics identifiers. Uninstalling the App or clearing its storage deletes the key and grant.

We do not store individual verdicts, public keys or grants on our servers. We keep only aggregate counts of verification outcomes (for example, how many verifications succeeded or failed and why) with the App version, without identifiers or IP addresses.

2.12 What the App does not collect

• No account registration, name, email address, phone number, or password.
• No contacts, calendar, call logs, SMS, microphone, or camera access.
• No background location tracking and no location history beyond your current saved place.
• No selling of personal information to anyone.

3. How the information is used

4. Advertising

The App shows optional rewarded video ads that you may watch to unlock premium visual effects. Ads are provided by Unity Ads, a service of Unity Technologies. When an ad is requested or displayed, Unity Ads may collect and process device and usage information — including your Advertising ID, IP address, device model and operating system version, and ad interaction events — in order to deliver, cap, and measure advertising, and to detect fraud.

This processing is governed by Unity's own privacy policy, which we encourage you to read: unity.com/legal/game-player-and-app-user-privacy-policy.

Watching ads is always voluntary. You can limit ad personalisation at any time through your device settings: Settings → Google → Ads, where Android lets you delete or reset your Advertising ID and opt out of personalised advertising. Purchasing the ad-free premium upgrade also removes ads.

5. Who your information is shared with

We do not sell your personal information. Information is shared only with the following parties, and only as described:

• Our weather backend (kiritodev.xyz, operated by us and hosted on Cloudflare Workers) — receives your coordinates, your location search text, your selected place's name and identifier, and the verification data described in Section 2.11, in order to return location and weather results.
• Weather and air quality providers — our backend forwards the coordinates, name or identifier of your selected place, but never your IP address, device identifiers or verification data, to the provider needed for the request:
  • AccuWeather — location search, place resolution, weather data when selected, and air quality. The App also loads weather icon images directly from AccuWeather's servers, which receive your device's IP address as part of that request. See AccuWeather's privacy policy.
  • The Weather Company, OpenWeather and Open-Meteo — weather data when you select that provider.
  • IQAir — air quality data.
• Unity Technologies (Unity Ads) — as described in Section 4.
• Google Play (Google LLC) — processes purchases and subscriptions, confirms your entitlement, and provides the Play Integrity verdict described in Section 2.11. See Google's privacy policy.
• Google (Google Analytics for Firebase and Firebase Crashlytics) — receives usage events and technical diagnostic information for the measurement and reliability purposes described in Sections 2.9 and 2.10.
• Cloudflare Pages — hosts the wallpaper catalogue and images the App downloads, and hosts this policy page.
• Legal requirements — we may disclose information if required to do so by law or by a valid request from a public authority.

6. Data retention and deletion

Location, settings, cached weather, and wallpaper photos are stored on your device and remain there until you change them, clear the App's storage, or uninstall the App. Uninstalling the App deletes all of this data.

You can also remove data at any time without uninstalling:

• Revoke location permission, or switch to manual location, in the App's settings or in Android Settings → Apps → WeatherWall → Permissions.
• Delete individual wallpaper photos from within the App.
• Clear everything via Android Settings → Apps → WeatherWall → Storage → Clear storage.

Our backend uses your coordinates and search text only to answer the request in progress. Air quality answers are cached for up to 15 minutes per area of about 1 km, so nearby requests can be answered without contacting the provider again; the cache holds no device identifiers. We do not operate user accounts, so we hold no user profile to delete. Server request logs, where kept for security and reliability, record coordinates rounded to about 1 km and never record verification tokens. They are retained for no more than 30 days and are then deleted. Data held by Unity Ads and Google Play is retained under their own policies.

Analytics event and user data are retained according to the retention settings of our Google Analytics property and Google's applicable data handling rules. Google documents a 90-day retention period for Crashlytics crash traces and associated identifiers before removal from live and backup systems begins. Clearing App storage or uninstalling removes local data; it does not automatically delete reports already sent to Google or other service providers.

To ask a question about your data or request deletion of anything we may hold, email kirito.dev.app@gmail.com.

7. Security

All network communication between the App and our servers uses encrypted HTTPS connections. Data stored by the App is kept in the App's private storage area, which on Android is accessible only to the App itself. We limit collection to what the features require, and the App transmits no account credentials or API keys from your device. Requests to our service are authorised with a short-lived token signed by a key held in your device's secure hardware (see Section 2.11); that key and its device grant are excluded from Android backups.

Note that Android's built-in backup feature may include the App's settings and saved location in a backup of your device associated with your Google account; your wallpaper photos are explicitly excluded from such backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's privacy

The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, to withdraw consent, and to data portability. You can manage locally stored data by revoking permissions, clearing App storage, or uninstalling. Usage and diagnostic information already sent to service providers is processed remotely. For requests concerning this information, contact us at kirito.dev.app@gmail.com. We operate no user accounts, so we may need additional information to identify the relevant installation or reports and assess your request. Do not send us passwords, payment credentials or purchase tokens.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, note that we do not sell or share personal information as those terms are defined under the CCPA/CPRA.

10. International transfers

The services described above may process information on servers located outside your country, including in jurisdictions whose data protection laws differ from your own. Where required, such transfers rely on appropriate safeguards under applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with a new “Last updated” date, and material changes will be highlighted in the App or in the Play Store listing. Publishing an updated policy or continuing to use the App does not substitute for affirmative consent where it is required.

12. Contact

Kirito Dev
Email: kirito.dev.app@gmail.com