Sterk Vekst AS Privacy Policy

4. Data processed outside your device

Subscriptions and purchases (all apps)

Purchases are made through Apple’s App Store. Apple processes your payment and Apple ID details as an independent controller. We never receive your card details.

We use RevenueCat to check subscription status, restore purchases and unlock paid features. RevenueCat processes an app-specific anonymous user identifier, product and transaction identifiers, purchase and renewal status, app version, and basic device and country information.

WILD social features (optional)

If you create a username or use social features in WILD, we process on our Supabase backend: an anonymous account identifier, username, display name, profile details, XP and level, achievements, archetypes, leaderboard positions, groups, hosted-session activity and related game events.

Some of this is visible to other WILD users by design, for example usernames, profiles, levels, archetypes, achievements, group membership and leaderboard positions. Do not use your real name or other personal information in a username, display name, group name or profile unless you are comfortable with others seeing it.

WILD product analytics

WILD sends anonymous usage events to PostHog, hosted in the EU, so we can understand which features are used and fix problems. These events include app installs, opens and updates, which games are started and completed, and similar in-app actions, together with app version, device model, operating system and approximate country.

We do not link analytics to your name, username or Apple ID, we do not use session recording, and we do not use analytics for advertising. NIX and Aligned do not currently use product analytics.

Aurora forecasts and alerts

To give you a local forecast, Aurora uses your device location with your permission, only while the app is open and only as approximate location. Before it leaves your iPhone, your position is rounded to a grid cell of 0.05° (about 5 km). Instead of sharing your location, you can search for a destination, which uses Apple MapKit.

To send alerts, we store on our Supabase backend in the EU (Stockholm, Sweden): a random installation ID, shown in the app’s Settings as your Support ID, that is not linked to your name, email address or Apple ID; the Apple push token for your device; the rounded location cell and the name of the place you chose, which we use in the alert text; your alert preferences (alert mode, live alerts on or off, quiet hours); your app language and time zone; whether alerts are included in your subscription and until when; and when the app was last used and which alerts were last sent.

Subscription status is handled by RevenueCat, using the same random installation ID as the app user ID, so that our backend can check whether alerts are included in your subscription.

Forecasts are calculated on our backend from public data: weather and cloud forecasts from MET Norway (the Norwegian Meteorological Institute), space-weather data from the NOAA Space Weather Prediction Center, and the Kp index from GFZ Helmholtz Centre for Geosciences (GFZ Potsdam). We send these sources no personal data. Requests to MET Norway contain only a rounded location cell, and the space-weather sources receive no location at all.

Aurora does not use your location in the background, does not keep a history of your locations, and does not use location for advertising. Deleting the app stops forecasts and alerts.

Aurora product analytics

Aurora sends anonymous usage events to PostHog, hosted in the EU, so we can understand how the app is used and improve it. These include onboarding steps, your onboarding answer about whether you are on a trip, planning one or live up north (sent only as trip, planning or local), whether location and notification permissions were granted, paywall views and purchases, and which screens are opened, together with app version, device model, operating system, app language and approximate country.

Aurora analytics never include place names, coordinates, location cells or your installation (Support) ID. They are not linked to your identity, we do not use session recording or an advertising identifier, and we do not use analytics for advertising or to track you across other companies’ apps or websites.

Shoulder Season product analytics

Shoulder Season sends anonymous usage events to PostHog, hosted in the EU, so we can understand how the app is used and improve it: for example which onboarding steps people complete, whether they start a subscription, and the region (such as Europe) of destinations they open.

Shoulder Season analytics never include which destination you open or save, your travel preferences or any text you enter. They are not linked to your name or Apple ID, use no advertising identifier, include no session recording, and are not used for advertising or to track you across other companies’ apps or websites. If you installed Shoulder Season from an Apple Search Ads advertisement, RevenueCat receives Apple’s attribution token so we can see which campaign led to the install and whether it led to a subscription; no advertising identifier is involved.

Maps (Shoulder Season)

Shoulder Season uses Apple MapKit to display destination maps. Apple may process technical information needed to deliver map tiles under Apple’s privacy policy. Shoulder Season does not access your location.

Notifications and widgets

Reminders in NIX, Aligned and Shoulder Season, and any notifications in WILD, are scheduled on your device through iOS. Aurora alerts are different: they are sent from our backend through Apple’s push notification service, as described under “Aurora forecasts and alerts” above. Widgets read data from the app on your device. You can turn notifications off at any time in iOS Settings.

Diagnostics

If you have enabled sharing with app developers in iOS, Apple may provide us with crash reports and diagnostics. These do not identify you to us.

Support requests

If you email us, we process your email address and the contents of your message in order to answer you.

5. Health and other sensitive information

Information you enter in NIX (nicotine use) and in Aligned (for example reflections or a pregnancy-related Path) can reveal information about your health or private life. This information stays on your device. We do not receive it, and it is not sent to our analytics or backend providers.

WILD content can include playful labels and prompts about people. These are game outputs, not facts, and are not used by us to profile anyone.

6. Why we process data and our legal basis

• To provide the apps and paid features you ask for, including subscriptions, restoring purchases, optional WILD social features, and Aurora forecasts and alerts for your approximate location: performance of our contract with you (GDPR Art. 6(1)(b)).
• To keep our services secure, prevent fraud and abuse, fix errors, and understand feature use through anonymous analytics: our legitimate interests (Art. 6(1)(f)). We keep this data minimal and anonymous where possible.
• To send notifications: your consent, given through the iOS permission prompt (Art. 6(1)(a)). You can withdraw it at any time in iOS Settings.
• To keep records we are required to keep and to answer legal requests: legal obligation (Art. 6(1)(c)).

7. Service providers and international transfers

We use these service providers, which process data on our behalf or as independent controllers:

• Apple: App Store distribution, payments, notifications (including push delivery of Aurora alerts), widgets, MapKit (including place search in Aurora) and diagnostics.
• RevenueCat, Inc. (United States): subscription management in all apps.
• Supabase: backend for WILD social features, and for Aurora forecasts and alerts. Aurora’s backend is hosted in the EU (Stockholm, Sweden).
• PostHog (EU hosting): anonymous product analytics in WILD, Aurora and Shoulder Season.

Some providers are based in, or may access data from, countries outside the EU/EEA, including the United States. Where this happens, we rely on appropriate safeguards such as an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or the European Commission’s Standard Contractual Clauses.

We do not sell personal data, we do not share it for advertising, and our apps do not track you across other companies’ apps or websites.

8. How long we keep data

• Local app data remains on your device until you delete it or remove the app.
• WILD social data is kept for as long as your profile is used to provide social features, and is deleted or anonymised when you ask us to delete it or when we retire the feature.
• Aurora device records are kept for as long as they are needed to provide forecasts and alerts to that installation, and are deleted when you ask us to delete them.
• Analytics events are kept only for as long as they are useful for understanding and improving the app, within the retention limits of our analytics provider, and are then deleted.
• Subscription records are kept by Apple and RevenueCat as needed for the subscription and for their accounting, tax and fraud-prevention obligations.
• Support emails are kept for as long as needed to resolve the request, and for no more than 3 years.

9. Your rights

Under the GDPR and the Norwegian Personal Data Act you have the right to access, correct and delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time.

To use these rights, email magnus@sterkvekst.no. For WILD, include your username so we can find your data. For Aurora, which has no accounts, include the Support ID shown in the app’s Settings so we can find your device record. We will respond within one month. Because most data exists only on your device, the quickest way to delete it is to delete the app or use the reset options inside it.

You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or the data protection authority where you live.

10. Age limits and children

• WILD contains mature and suggestive content and is intended only for users aged 18 or over.
• NIX relates to nicotine products and is intended only for users aged 18 or over, and of legal age to buy nicotine products where they live.
• Shoulder Season, Aligned and Aurora are not directed to children under 13. Users under 18 should use them with the permission of a parent or guardian.

We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, contact us and we will delete it.

11. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and data minimisation. No system is completely secure. Protect your device with a passcode, because anyone with access to your unlocked device may be able to see your local app data.

12. AI-assisted tools

We use AI-assisted tools to help write code, research and structure app content, translate text and test our apps. Our apps do not send your personal data to AI services, and none of our apps currently includes user-facing AI features. We do not submit personal data from users to AI tools, except where strictly necessary to answer a support request you send us.

Content that was researched or drafted with AI assistance is reviewed by us, but it may still contain errors. It is not professional advice.

13. App Store privacy labels

Each app’s App Store page shows privacy information for that specific app. If that information and this policy ever differ, contact us and we will correct the error.

14. Changes to this policy

We will update this policy before adding features that change how we process personal data, such as accounts, cloud sync, new analytics, advertising or location features. The effective date at the top of this page shows when the policy was last changed. Where a change is significant, we will take reasonable steps to let you know, for example in the app or on our website.

15. Contact

Sterk Vekst AS
Org. nr. 931 436 678
9601 Hammerfest, Norway
Privacy: magnus@sterkvekst.no
Support: support@sterkvekst.no