UV Index shows the current and forecast UV index for where you are. It was built to collect as little data as possible.
The rest of this page sets all of that out in detail, including who receives what, on what legal basis, which countries it goes to, and what rights you have.
Ostapenko Studio, a trading name of I Ostapenko & Y Ostapenko, a partnership registered in Australia, ABN 18 901 484 459. We are the controller of the personal information described below — that is, we decide why it is collected and where it goes — even though none of it reaches us.
Email (including privacy enquiries): support@ostapenko.studio
We process personal information in Australia. We have not appointed a Data Protection Officer: we are a two-person partnership, we are not a public authority, and our core activities do not involve large-scale monitoring of people or large-scale processing of special-category data.
This table is the complete picture. If a flow is not in it, it does not happen.
| What | Why | Legal basis | Who receives it | Where it goes | How long |
|---|---|---|---|---|---|
| Approximate coordinates, rounded to 2 decimal places (~1.1 km) | To fetch the UV forecast for your area | Performance of the service you asked for | WeatherAPI.com, operated by Zoomash Ltd | United Kingdom; Zoomash's own policy discloses possible onward transfer to the United States, Russia, Japan, China and India | We keep nothing. Zoomash states only that data "shall not be kept for longer than is necessary" |
| Approximate coordinates | To turn coordinates into the town or suburb name shown on screen | Performance of the service you asked for | Your device's operating system vendor — Apple on iOS, Google on Android | United States and other countries where Apple and Google operate | We keep nothing. See Apple's and Google's policies |
| Device information, IP address, advertising identifier | To serve and measure the banner ad in the free version | Legitimate interests — keeping the app free for people who do not buy Remove Ads. You can object; Remove Ads ends it outright | Google AdMob | United States and other countries where Google operates | We keep nothing. See Google's policy |
| Your "Remove Ads" purchase | To take payment and to restore the purchase on your other devices | Performance of the contract of sale | Apple (App Store) or Google (Google Play), as merchant of record | United States and other countries where Apple and Google operate | Set by Apple or Google. We never see your name, payment details or billing information |
| Settings, cached forecast, daily reminder, home-screen widget, timezone | So the app opens instantly and works offline | Not transmitted — no disclosure occurs | Nobody. This never leaves your device. | Your device only | Until you change it or delete the app. The cached forecast is overwritten on each refresh |
In CalOPPA terms, the categories above are the categories of personally identifiable information collected through the app, and the categories of third parties they may be shared with are: a weather data provider, an advertising provider, operating-system and platform providers, and payment processors.
The app asks your operating system for your approximate (coarse) position — it never requests a precise fix. Before your coordinates are sent anywhere they are rounded to two decimal places, roughly 1.1 km. That rounding is deliberate data minimisation: a UV forecast grid is far coarser than a kilometre, so the extra digits would tell a third party where you are without telling the app anything it needs.
Location is off until you turn it on. The app cannot read your position until you grant location permission at the operating-system prompt, and you can withdraw that permission at any time in your device settings. Providing your location is not required by law and we do not require it — but if you decline, the app cannot show the UV index where you are.
The app does not track your movements, does not run in the background, and does not build any history of where you have been.
An earlier version of this policy said the town or suburb name was resolved "on your device". That was wrong, and we have fixed it. The app asks the operating system to turn coordinates into a place name, and on both iOS and Android that lookup is served over the network: your coordinates are sent to Apple or to Google and a place name comes back. We would rather say so plainly than leave a reassuring sentence standing that the code does not support.
We — Ostapenko Studio — never receive, store or log your location, your device identifiers or your IP address. That is a statement about us, not about the third parties named in the table, who receive what the table says they receive, directly from your device.
The free version shows a single banner ad served by Google AdMob. Ads are requested non-personalised: we do not request ads based on your interests or on a profile of you, and we do not use your location to target advertising.
The app additionally puts Google into limited ads mode, natively, before any ad can load. No advertising identifier is used to build a profile of you, and no consent form is shown anywhere in the world, because there is no personalisation to consent to.
Serving an ad still means Google's advertising SDK stores or reads information on your device and receives device information and your IP address. Google stores a limited amount on the device to detect invalid and fraudulent ad traffic, and uses the IP address to deliver the ad. Our legal basis for this is legitimate interests: keeping the app free for people who do not buy Remove Ads. You can object to it, and Remove Ads ends it outright.
Google also states that it may estimate your general location from your IP address for advertising purposes. That estimation is Google's, is separate from the coordinates described above, and happens whether or not you have granted the app location permission.
You are in control of this:
When you use this app, the advertising provider may collect information about your activity over time and across different apps and services. We do not do this ourselves and we receive nothing from it except aggregate revenue.
Stated as fact rather than as a legal conclusion: we receive no personal information about you, so there is nothing for us to sell. Ads are requested non-personalised. The advertising provider receives device information, your IP address and an advertising identifier directly from your device, on the basis described above. We receive only aggregate revenue. We do not receive money in exchange for handing over information about you — we receive advertising revenue.
The app is not a web browser and receives no "Do Not Track" browser signal, so there is no such signal for it to respond to. We do not track you across other apps or websites. The controls that actually work here are the ones listed above: your device's advertising settings, and Remove Ads.
The one-time Remove Ads purchase is processed entirely by Apple's App Store or Google Play, who are the merchant of record. We never see your name, payment details or billing information. We receive from the store only a confirmation that the purchase exists, which is what lets the app hide the banner and restore your purchase on your other devices.
The optional daily UV reminder is scheduled locally on your device by the operating system. No notification data leaves your device, and we have no ability to send you push messages. The home-screen widget is drawn from the forecast already cached on your device.
This is a separate statement, and deliberately so: using this app necessarily involves sending information out of your country.
We are in Australia. The recipients and destinations are:
If you would like a copy of, or more detail about, the safeguards relied on for any of these transfers, write to us and we will provide what we hold.
Our security measures are modest because our exposure is modest, and we would rather describe them than imply more. Every request the app makes travels over HTTPS. We operate no server and hold no personal information, so there is no store of user data to breach on our side. There are no accounts and no passwords. Data on your device is protected by your device's own operating-system protections.
There is no automated decision-making producing legal effects or similarly significant effects on you, and no profiling. The app calculates a UV band from a forecast number and, if you have set a skin type, shifts that band — that is arithmetic shown to you on screen, not a decision made about you.
Depending on where you live, you have some or all of the following rights over personal information about you:
Where the LGPD applies, this includes expressly the rights in Art. 18: confirmation of processing; access; correction; anonymisation, blocking or deletion of unnecessary or excessive data or data processed unlawfully; portability; deletion of data processed with consent; information about the public and private entities with which we have shared your data — which is the table above; information about the possibility of refusing consent and the consequences of refusal; and revocation of consent.
This is the honest part. Because there are no accounts and no records on our side, we cannot identify you and we hold nothing to give you, correct or erase. We are not permitted to collect additional information from you purely to try to find you in data we do not have. So for most requests, the most useful thing we can do is point you at the party that does hold something:
For everything on your own device — settings, cached forecast, reminders, widget — you have direct control: change it in the app, or delete the app to destroy it. The means of access is the app itself.
We make no personal information available to any related organisation, because we have none: Ostapenko Studio has no parent, subsidiary or affiliated entity.
Write to support@ostapenko.studio, or to the postal address above. Tell us what you would like and how to reply to you. We will acknowledge within 7 days, and answer within 30 days — or tell you why we need longer and how much longer. There is no charge.
If you are not satisfied with our answer, you can escalate:
UV Index is a general-audience app. It is not directed to children, it is not designed to appeal to children, and we do not knowingly collect personal information from a child. Our minimum age position is that the app is intended for people aged 13 and over, and in jurisdictions that set a higher threshold for consent — including Brazil, which covers adolescents as well as children, and India — anyone below that threshold should use the app only with the involvement of a parent or guardian.
Because the app is used by young people in the sun, we hold ourselves to this regardless of who is using it:
The app has no age gate. If you are a parent or guardian and believe a child has provided personal information through the app, contact us and we will help — although, as set out above, we hold nothing to delete, and deleting the app removes everything it has stored.
The whole of this policy applies to everyone. These notes add what particular laws require.
We are an Australian partnership. On our reading we are a small business operator under s 6D of the Privacy Act 1988 (Cth) and so are not an APP entity — but that carve-out has exceptions, and we do not rely on it as a reason to tell you less. This policy is provided voluntarily to the standard the Australian Privacy Principles require, including the overseas-disclosure statement above, access and correction, and the complaints process. Where we say "we comply", read it as a commitment we have chosen to make.
Where the GDPR applies, we are the controller, the legal bases are those in the table above, and your rights are those in Arts. 15–22 listed above, including the right to lodge a complaint with the supervisory authority in the country where you live, where you work, or where you think the problem happened.
Where the UK GDPR applies, everything in the EU note applies, the supervisory authority is the Information Commissioner's Office, and you additionally have the right to complain to us first — the process is set out under "How to make a request or a complaint" above — before or instead of complaining to the ICO.
The CalOPPA disclosures are in this document: the categories of information and the categories of third parties are in the table above; the cross-app collection statement, the Do Not Track statement and the sell/share statement are under "Advertising"; the change process is under "Changes to this policy"; and the effective date is at the top.
Reviewing and changing your information. We hold no personally identifiable information about you, so there is nothing for us to review or change. Your settings and cached data live only on your device and are removed when you delete the app.
State privacy rights. Our position is that we are not a covered business or controller under any US state privacy law — but we would rather give you the mechanism than argue about thresholds. Precise geolocation is treated as sensitive data under several state laws. In this app, location is used only to fetch the UV forecast and the place name; it is coarsened to about 1.1 km before it is sent; it is not sold, not used for targeted advertising, not used for profiling, and not retained by us. If you live in a US state with a privacy law and want to exercise a right under it, write to support@ostapenko.studio and we will handle it the same way as any other request.
The person accountable for our compliance, with a postal address, is named in the Canadian versions of this policy — English and français. The type of personal information we hold is none; the general account of its use is that coordinates pass through your device to the parties in the table for the purposes stated there; and we make no personal information available to related organisations, because we have none. The means of gaining access to information held about you is to write to the postal address in those versions, or to email us — and the honest answer will be that we hold nothing.
Quebec. This app uses technology that includes a function allowing you to be located. That function is deactivated by default: it is activated only when you grant location permission at your device's own permission prompt, and you deactivate it by withdrawing that permission in your device settings — at which point the app stops requesting your position. Personal information handled through this app may be communicated outside Quebec, to the recipients and countries named under "Sending information overseas".
Duration of processing. Processing by us lasts only as long as a request is in flight — we retain nothing afterwards. On-device data lasts until you change it or delete the app. Third-party retention is governed by their policies, linked above.
Who is responsible for which leg. Ostapenko Studio is responsible for the app and for the decision to make each of these requests. Zoomash Ltd is responsible for the forecast lookup. Google is responsible for advertising, and for the place-name lookup on Android. Apple is responsible for the place-name lookup on iOS. Apple and Google are each responsible for billing on their own store.
The rights in Art. 18 are listed in full under "Your rights". The international character of the transfers is set out separately under "Sending information overseas", as it must be.
The name and address of the business handling personal information are set out in the Japanese-language version of this policy. The purpose of use is: to obtain a UV forecast for your location and display it to you. We hold no retained personal data. The procedure for making a request about personal data is under "How to make a request or a complaint". The provision of coordinates to a third party in a foreign country — Zoomash Ltd in the United Kingdom, and Apple or Google for the place-name lookup — is described under "Sending information overseas", together with the countries involved; the protection measures those recipients take are those set out in their own published privacy policies, linked in the table.
This list is not exhaustive and is not meant to be. If you are somewhere not named above, you may still have rights under your local data protection law. Contact us and we will help you exercise them — which, given we hold nothing, is usually a matter of pointing you at the right party and the right authority, and we are happy to do it.
The only third parties who receive data through this app are the ones named in the table above: Zoomash Ltd (WeatherAPI.com), Google and Apple. Each of them is required to provide the same or equal protection of that data as is stated in this policy, and each publishes its own privacy policy setting out how it handles it. None of them is permitted to use data received through this app for any purpose other than the purpose stated in the table. There are no analytics SDKs, no crash reporting, no attribution SDKs and no other third-party code in the app that receives your data.
4 September 2026. The in-app consent prompt was removed, and ads now run in Google's limited ads mode. The legal basis for advertising changed from consent to legitimate interests, which you can object to. Nothing new is collected — if anything, less is: no advertising identifier is used to build a profile of you. The Settings → Privacy options row went with the prompt, because there is no longer any consent to revisit.
If this policy changes, the updated version is published at this address — the same way this version was published — with a new effective date and a short note of what changed. Material changes will also be noted in the app's release notes.
If a change would materially reduce the protection this policy gives you, or would use information in a way this policy does not currently allow, we will ask for your agreement first rather than making the change silently. Continuing to use the app after a change that does not reduce your protection means the updated policy applies.
This English text is the canonical version of this policy. Translations are provided for convenience. Where a translation differs from this English text, the English text governs, to the extent local law allows. If you find a discrepancy between versions, please tell us and we will fix it.
Available versions: English (this page) · Afrikaans · العربية · Български · বাংলা · Català · Čeština · Dansk · Deutsch · Ελληνικά · English (Canada) · Español · Español (Latinoamérica) · Español (México) · Eesti · فارسی · Suomi · Filipino · Français · Français (Canada) · ગુજરાતી · עברית · हिन्दी · Hrvatski · Magyar · Bahasa Indonesia · Italiano · 日本語 · 한국어 · Lietuvių · Latviešu · मराठी · Bahasa Melayu · Norsk bokmål · Nederlands · Polski · Português (Brasil) · Português (Portugal) · Română · Русский · Slovenčina · Slovenščina · Српски · Srpski (latinica) · Svenska · Kiswahili · தமிழ் · ไทย · Türkçe · Українська · اردو · Tiếng Việt · 简体中文 · 繁體中文（台灣） · 繁體中文（香港）.
Ostapenko Studio
support@ostapenko.studio