This policy covers the iPhone apps Kaiserwetter and Kaiserwetter Ski. The website has its own privacy policy. Diese Erklärung gibt es auch auf Deutsch; im Zweifel gilt die deutsche Fassung.
AS2871 Network Consulting e.U., owner Tobias Dostal, Guglgasse 12/3/394, 1110 Vienna, Austria, e-mail: tobias@dostal.co.at
Weather, maps, places and widgets work without an account and without an AI pass. The optional, time-limited AI fair-use pass requires Sign in with Apple. The pass does not renew automatically. There is no advertising, there are no analytics services and there is no tracking. Favourites, settings and the weather cache stay on your device. For weather, maps, place photos and the voluntary AI features, the data described below is transmitted.
The free core features of Kaiserwetter Ski work without an account. The optional season pass is a non-renewing in-app purchase and remains valid until the 30 September shown in the app before purchase. Apple processes the price, payment, purchase record and refunds. The trial, purchase and restoration require Sign in with Apple as described below.
For a request we transmit the coordinate of the selected place to:
Our server receives the coordinate and technically necessary connection data, in particular the IP address. The data providers generally see our server as the party making the request. The server keeps no advertising profiles and makes no permanent association between weather coordinates and AI accounts. The forecast archive serves solely to compare, after the fact, the measurement with the model forecast known at the time; later model runs must not overwrite older forecasts. An iOS background fetch may update weather and widgets based on the position last stored locally; iOS decides when and how often. Legal basis: Art. 6(1)(b) GDPR.
Map display, place search, geocoding and Look Around content come from Apple Maps (Apple Distribution International Ltd., Ireland). Search text, coordinate and map section may be transmitted to Apple; Apple's privacy policy applies. The app additionally obtains freely licensed place photos from Wikimedia Commons and Wikipedia (Wikimedia Foundation, USA); the search term or place name and, for the nearby search, a position rounded to about 100 m are transmitted to Wikimedia in the process. Place photos may be cached locally for faster display. Author, source, licence and a modification notice are shown with the image.
The AI features are voluntary: chat, the Kaiserwetter scout, place descriptions, choosing the place photo, activity suggestions and the weather report. Depending on what you choose in the settings:
What is transmitted: your chat messages including the conversation so far; the weather context of the selected place (forecast, measurements, air quality); the approximate position of selected and saved places, rounded to about 1 km; place names your iPhone determines for these positions. Not transmitted are the names you give your favourites, street and house number, and your name, e-mail address and Apple identifier. After you agree, features that run without you asking (place description, choosing the place photo, suggestions) use this information as well. You can withdraw your consent at any time in the settings; after that everything stays on the device.
Weather report with a notable destination: a moderation tailored to a public destination is separate and switched off by default. Only after you opt in does the iPhone search locally for a notable public destination; only its public name, an approximate locality and verified weather values are transmitted for this.
Trial and fair use: the trial starts with your first sign-in and lasts 14 days. So that it cannot be repeated by deleting and re-creating the account, our server stores an irreversible hash of the Apple user identifier and the app together with the start of the trial; this entry remains after an account is deleted. Generous server-side daily, monthly and rate limits protect the service against unusual use; there is no per-question billing in the app and no visible token credits.
Usage measurement: for every answered request our server stores a pseudonymous account identifier, the app, the feature (e.g. chat or place description), the model used, the number of tokens processed, time, duration and outcome — no content. This serves cost control, abuse detection and setting prices and limits.
Protection against abuse (App Attest): so that only the genuine Kaiserwetter app can use the AI, the app creates a device key per installation with Apple's App Attest service. Apple confirms to our server that requests come from an unmodified app; the server stores the public key with your account. The private key never leaves your iPhone's security chip.
Legal basis: Art. 6(1)(b) GDPR for the AI features you request, and Art. 6(1)(f) GDPR (protection against abuse, cost control) for the trial record, usage measurement and App Attest. Transfers to AI providers in the USA are based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We do not retain questions and answers; the conversation history is on your device and can be deleted there.
Reporting an answer: if you consider an AI answer wrong or inappropriate, you can report it in the chat. The app prepares an e-mail to us for this (question, answer, app and iOS version, answering model); it is only sent if you send it yourself, through your own e-mail service. We use the report to improve the quality and safety of the AI answers and delete it once it has been dealt with. Legal basis: Art. 6(1)(f) GDPR (quality and safety of the service) or Art. 6(1)(b) GDPR where the report concerns a feature you use.
For the optional AI fair-use pass you sign in with Sign in with Apple. We receive the user identifier issued by Apple and, if you release it, an e-mail address (possibly Apple's relay address). For this our server stores the pass or trial duration, the fair-use status, a random StoreKit account ID and the App Attest keys of your devices. Apple handles the purchase and the payment; a transaction signed by Apple and subsequent server notifications are verified by our server in order to attribute purchase, duration, restoration, refund or revocation to the correct account. The pass does not renew automatically. We do not receive payment data. You can delete your server account together with its fair-use data at any time in the app. So that a deleted account can later restore a paid pass and the same Apple transaction is not credited more than once, a minimal pseudonymised purchase ledger remains. It contains an irreversible hash of the Apple user identifier, the transaction ID, the product, the purchase and expiry time and any refund status, but no e-mail or payment data. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (protection against fraud and abuse).
Refund requests: if you ask Apple for a refund, Apple asks us for information about usage. Only if you have explicitly allowed this in the settings do we tell Apple whether a trial was offered, whether the pass was delivered and what share of its term has elapsed — no content. Without your permission we send nothing. Legal basis: Art. 6(1)(a) GDPR; you can withdraw your permission at any time.
Saved places, settings, the last location used for optional background updates and caches are stored locally. Credentials (AI session, StoreKit account ID, identifier of the App Attest key) are kept in the iOS keychain. Weather hints and warnings you were notified about remain findable inside the app for seven days, so you can still look them up after dismissing the notification; they are not transmitted. Deleting the app removes local data; a server account is removed with “Delete account” in the app.
Our server runs in a data centre of Nessus GmbH (Vienna, Austria). Connections to api.as2871.net and kaiserwetter.ai pass through Cloudflare (Cloudflare, Inc., USA), which fends off attacks and terminates the encrypted connection; in doing so Cloudflare processes connection data such as the IP address and the transmitted content without using them for its own purposes. Transfers to the USA are based on the EU-US Data Privacy Framework or the standard contractual clauses. Our server logs technical access data (IP address, time, requested address, status code) for troubleshooting and defending against attacks.
Local weather caches are cleared after seven days at the latest; place photos may be kept locally for up to 30 days. In the server-side forecast archive, every model point is deleted 48 hours after the time it is valid for. Since a newly stored forecast can reach up to seven days into the future, the associated coordinate entry, rounded to 0.01°, may exist for a total of up to about nine days. The AI account, fair-use data and App Attest keys exist until the account is deleted. Usage measurement entries are deleted after 13 months. Technical access logs are rotated and limited in size, and deleted after 14 days at the latest. The trial record is deleted once Kaiserwetter no longer offers a trial, after three years at the latest. The pseudonymised purchase ledger is retained only for as long as this is necessary for restoration, refunds, protection against abuse and statutory record-keeping obligations, and is deleted or anonymised afterwards. Proof of purchase additionally remains with Apple according to Apple's periods. Other temporary server caches are overwritten when they technically expire. The published retention periods of Apple, the AI providers, Cloudflare, Wikimedia and the data providers apply in addition.
The app is not directed at children and does not knowingly collect data from them.
Under the GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Please use the e-mail address given above. You also have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
If anything material about the processing changes, we will update this policy and point it out in the app.
Last updated: 2 October 2026