Who operates the service
Mark Kewley, trading as UK Web Host, operates World of Warning as part of Tooltilities and is responsible for the personal information described here (the data controller). For privacy requests, use our contact form and select Privacy request.
Saved-place weather
For Pro subscribers, the app can prepare weather for the first saved place when the app becomes active and for a place selected in its briefing, before Weather is opened. The saved coordinates are sent to Apple WeatherKit to obtain a forecast. Apple’s location services resolve the place’s timezone. This uses the point you saved and does not require continuous device-location tracking. Forecasts use a bounded temporary on-device cache. Copies older than 30 minutes are removed on the next cache access. Forecasts retain their source times and are checked again when expired. Free users do not request forecasts. See Apple’s Weather privacy information.
Information on your iPhone
Saved places, preferences and bookmarks are stored on your device. Saved report copies also retain loaded source map shapes, river readings, iceberg measurements, explanatory text, storm bulletins and supplied dated NASA observations. You choose places through search; continuous device location tracking is not required.
Hazard notifications
If you enable alerts on either plan, the service stores an installation identifier, Apple push token, chosen place coordinates and radius, and alert preferences. Pro also uses verified purchase information. This enables matching and delivery. It does not require a name or user account. Apple delivers notifications through its push service.
Purchases and providers
Apple processes payments. We do not receive payment-card details. The app uses Apple Maps and retrieves event data from our service or the named scientific source. Those connections expose technical information such as IP addresses to the receiving provider. Opening detailed reports can connect directly to USGS, NOAA, the U.S. National Ice Center, GDACS, the Environment Agency, MeteoAlarm, Avalanche.org or the Flood Forecasting Centre document host for source maps, iceberg measurements, nearby river/tide gauges, impact estimates and official wording. Gauge queries use the report point, not your device location. Direct-source connections can also occur when our cache service fails. Briefing comparison records stay on your device. When enabled, satellite browsing sends the selected ten-degree map area to our service and NASA FIRMS. 20i provides our hosting and email infrastructure. Apple provides Maps, WeatherKit, purchase processing and push delivery. We do not sell personal information or use it for advertising profiles.
Providers, security and international processing
20i processes hosted information under its Data Processing Agreement, which includes confidentiality, security, assistance with deletion requests and equivalent obligations for its subprocessors. Its agreement provides for UK and EEA processing and other locations needed to provide services, using applicable transfer safeguards such as the UK International Data Transfer Agreement or UK Addendum to Standard Contractual Clauses. This does not mean every connection stays in the UK.
Apple and scientific data providers may process connections internationally. Apple explains its processing and transfer safeguards in its privacy policy. The sources page identifies the scientific services. Opening an external website connects to that publisher, including inside the app browser, and its own privacy and cookie choices apply. We use encrypted HTTPS connections for the app service and website. Please use the contact form to ask about the safeguards relevant to your information.
Ratings and reviews
The app stores the first-use date, up to three recent visit days, recent automatic review-request dates and the last voluntary review-link date locally on your device. These help avoid repeated requests and are not sent to our server. Apple handles ratings and written reviews. The app does not learn whether its native prompt appeared or whether you submitted a review. Reviews published through Apple may be public on the App Store.
Website and contact
Selected marketing pages offer optional Google Analytics, loaded only after you choose Allow analytics. No Google requests are made before consent or after No thanks. Advertising features are disabled. Google receives visit and device information; URLs sent to Analytics exclude query strings and fragments. Analytics cookies and your saved choice last up to six months. Use Analytics choices on a marketing page to change or withdraw consent. App-linked help, privacy, terms, accessibility and news pages do not load Analytics or its consent popup. Entering these pages also keeps subsequent website navigation free of Analytics for that browser session, using a functional preference cookie, a page marker and session storage. This protective setting takes priority over an earlier analytics choice. Ordinary source websites have their own practices. See Google’s privacy policy and how Google uses information from sites that use its services. The homepage globe is a locally rendered illustration. Its example earthquake rings do not use a live event feed or connect to a map provider. The contact form uses an essential session cookie for security. It sends your name, email and message to our support mailbox. Server logs support security and service operation.
Retention and removal
Saved places, preferences and saved reports stay on your device until you remove them or the app’s stored data. Device backups are managed separately through your Apple settings. Turning off an alert rule stops it after the service confirms the change, but does not by itself delete the installation record.
The server keeps your alert registration, token, rules and any linked purchase identifier until that registration is removed. There is currently no automatic deletion solely because you stop opening the app. Use Turn off all notifications in Settings > Hazard alerts (called Remove server alerts in earlier versions) while connected to delete the registration and its associated delivery records, or choose Privacy request in our contact form. Uninstalling the app does not send this deletion request and does not cancel an Apple subscription. Routine server cleanup removes expired delivery records after seven days. The service keeps private delivery timing records for seven days with opaque delivery references and no device tokens or purchase identifiers. Scientific earthquake notification versions are kept for 30 days for report opening. A copy embedded in a notification, or saved on your iPhone, can remain after the server copy expires.
We retain support correspondence while dealing with your request and any related complaint or dispute. Our retention policy is to remove it within 12 months of the last substantive response unless it is still needed for an unresolved matter or a legal obligation. This is a mailbox management policy, not an automatic app timer. Hosting logs and backup copies follow 20i’s retention arrangements: its published policy describes log rotation every 12 weeks and separate backup retention periods. Deleting a live record does not immediately erase every provider backup. Apple retains its own purchase records under its policy.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability and object to certain processing. We use the information needed to provide requested app features and subscription verification to perform our contract with you. We use support correspondence and security logs for our legitimate interests in answering requests, maintaining the service and preventing abuse. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing. Optional alerts can be disabled in the app; server deletion is a separate action described above. You may complain to the UK Information Commissioner. Choose Privacy request in our contact form to exercise your rights or ask for more information. We may need enough information to identify the relevant installation or correspondence, but will not ask for your Apple password or payment-card details.