🔒 Privacy Policy

Observe PRO
Last updated: 10 March 2026

1. Who We Are

Data controller: Protos Digital LTD
Address: 28 Tyrrell Street, Leicester, LE3 5SA, United Kingdom
Company contact: info@protosdigital.pro
App privacy contact: info@observepro.space

2. Scope of This Policy

This Privacy Policy applies to personal data we collect through Observe PRO when you:

• create an account;
• sign in using email/password or a third-party sign-in provider;
• complete your profile;
• save events in the app;
• enable notifications;
• choose to share device location; or
• contact us about the app or your account.

3. Personal Data We Collect

3.1 Account and Profile Data

• email address;
• password hash for email/password accounts (we do not store plain-text passwords);
• authentication method, such as local sign-in or social sign-in;
• account identifier / user ID;
• account creation date and time;
• city and country;
• time zone;
• terms acceptance date and policy version records;
• profile completion status;
• email verification status;
• email verification token and expiry time, where applicable;
• social sign-in identifier, such as a Google account ID, where applicable.

3.2 Location Data

Observe PRO uses location to make astronomical information more relevant to your area.

• Registration/profile location: when you select your city and country during registration or profile completion, we store that chosen location and may also store the related latitude and longitude for that location.
• Device location: if you enable device location permissions, we may collect your device’s current latitude and longitude, which may be precise location, depending on your device settings and permission choices.
• Derived location data: we may derive or store your time zone from your device settings or chosen/profile location.

We use this data to localise event timing, improve event relevance, calculate visibility conditions, and support location-based features such as aurora and weather-related event context.

We do not track your continuous movements and we do not store a location history trail.

3.3 Saved Events and Reminder Data

• saved event ID;
• event type;
• event title;
• event date/time;
• save timestamp;
• reminder settings;
• notification timestamps used to prevent duplicate reminders;
• event snapshot data stored to support saved-event display and related app features.

3.4 Notifications and Device Token Data

• push notification token or equivalent device/app notification identifier;
• notification preference and reminder settings;
• timestamps showing when certain reminders were sent.

This data is used only to deliver notifications you have chosen to receive and to prevent duplicate or excessive alerts.

3.5 Technical and Service Data

• basic app and device compatibility information needed for app functionality or notification delivery;
• API request and service-operation data required to run the service securely and reliably;
• server-side operational logs where generated by our hosting and infrastructure providers.

Observe PRO does not currently use in-app advertising SDKs and does not sell personal data.

3.6 Data from Third-Party Sign-In Providers

If you sign in using a third-party provider such as Google Sign-In, we may receive data such as your email address, provider account ID and basic account information needed to authenticate you and create or link your account.

If Sign in with Apple is enabled in a future iOS version, we may receive the information that Apple makes available for your chosen sign-in method, such as an Apple account identifier and, where shared, your email address.

4. How We Use Your Personal Data

We use personal data to:

• create and manage your account;
• authenticate sign-in and maintain account security;
• verify email addresses for local accounts;
• complete your profile;
• display astronomical events in your local area and local time;
• show aurora, weather-related and visibility-related context where relevant;
• store and display your saved events in the “My Sky” feature;
• send optional reminders and push notifications you enable;
• prevent duplicate notifications and improve service reliability;
• respond to support or privacy enquiries;
• maintain, secure and improve the service;
• comply with legal obligations and protect our legal rights.

5. Our Lawful Bases for Processing

Depending on the activity, we rely on one or more of the following lawful bases under applicable data protection law:

• Contract: where processing is necessary to provide Observe PRO to you, such as creating your account, showing your saved events, localising event times and running core app features.
• Legitimate interests: where necessary to operate, secure and improve the app, prevent abuse, troubleshoot service issues and maintain reliable notification systems, provided those interests are not overridden by your rights.
• Consent: where you choose to enable optional permissions or features, such as device location access or push notifications. You can withdraw these through your device or app settings.
• Legal obligation: where we must retain or disclose certain information to comply with applicable law, regulation or lawful requests.

6. When Location and Notifications Are Optional

Some app functions work better with location and notifications enabled. Observe PRO stores the location connected to the city and country you choose during registration or profile completion, and device GPS access is an additional optional feature you control through your device settings.

If you do not enable location access, some event-personalisation features may be less accurate. If you disable notifications, you will not receive reminder alerts.

7. Sharing Your Personal Data

We do not sell or rent your personal data. We share it only where needed to operate Observe PRO, provide features you request, or comply with law.

7.1 Service Providers and Processors

• Supabase – database and related backend data storage;
• Render – backend hosting and service infrastructure;
• Google Sign-In – social authentication, where you choose that sign-in method;
• Firebase Cloud Messaging (FCM) – push notification delivery;
• Resend – email verification delivery;
• OpenStreetMap / Nominatim – city/location search and lookup;
• NOAA SWPC – aurora / space-weather source data;
• Open-Meteo or equivalent weather data providers – weather and visibility context.

7.2 Legal and Safety Disclosures

We may disclose personal data where required by law, regulation, court order, lawful request, or where necessary to establish, exercise or defend legal claims, protect users, or prevent fraud, abuse or security incidents.

8. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom. Where personal data is transferred internationally, we take steps designed to ensure appropriate safeguards are in place where required by law.

9. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including to provide the service, maintain security, resolve disputes and comply with legal obligations.

• Account data: retained while your account remains active.
• Saved events and reminder data: retained while your account remains active, unless you remove them earlier.
• Push notification tokens: retained while needed to deliver notifications, and removed when invalid, no longer needed, or when your account is deleted.
• Email verification tokens: retained only until verification is completed or the token expires, unless a short retention period is needed for security or troubleshooting.
• Support or operational records: retained only as long as reasonably necessary for support, security, auditing or legal compliance.
• Deleted account data: when you delete your account, we delete or de-identify associated personal data from live systems, subject to limited retention in backups, logs or where required for legal, security or fraud-prevention purposes.

We may update these retention periods as the service matures and operational requirements become more defined.

10. Account Deletion

Observe PRO provides an in-app account deletion option. You may request deletion of your account and associated app data at any time using the app’s delete-account function or any published account-deletion page or contact route we provide.

When your account is deleted, we aim to remove your account data from active systems, including associated saved events and push-token records linked to your account, subject to limited retention as described in this policy.

11. Your Data Protection Rights

Depending on your location and applicable law, you may have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing in certain circumstances;
• object to certain processing based on legitimate interests;
• withdraw consent where processing relies on consent;
• request portability of certain data where applicable.

You can exercise these rights by contacting us at info@observepro.space.

If you are in the United Kingdom and are unhappy with how we handle your personal data, you also have the right to complain to the Information Commissioner’s Office (ICO).

12. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures include access controls, hosted infrastructure protections and secure password hashing for local account passwords.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children’s Privacy

Observe PRO is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data to us, please contact us and we will review the request and take appropriate action.

14. Third-Party Sites and Services

Observe PRO may link to or rely on third-party services. We are not responsible for the privacy practices of third-party sites, platforms or services, and you should review their privacy notices where relevant.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on the relevant page and update the “Last updated” date above. Where required, we may also notify users within the app or by other appropriate means.

16. Contact Us

If you have questions, requests or complaints about this Privacy Policy or your personal data, contact:

Protos Digital LTD
28 Tyrrell Street, Leicester, LE3 5SA, United Kingdom
Email: info@observepro.space
Company email: info@protosdigital.pro