Last updated: July 30, 2026
We collect information you provide during registration: username, email address, and password (stored as a salted hash). We also collect API usage logs including endpoint accessed, timestamp, and response status code. City search queries are logged temporarily for service improvement. We do NOT collect precise location data, browsing history, or personal identification documents.
Your email is used for account verification (OTP), password resets, and critical service notifications. Usage logs are used to enforce rate limits, diagnose errors, and improve our API. We do not sell, rent, or share your personal data with third parties. Aggregated, anonymized statistics may be used for public transparency reports.
Passwords are hashed using Django's PBKDF2 algorithm. API keys are stored as SHA-256 hashes — we cannot recover your key if lost. Data is stored on PostgreSQL databases hosted in secure data centers. We use HTTPS for all API communications. Free usage logs (IP-based) are retained for 30 days and then anonymized.
We use essential cookies for authentication (JWT tokens stored in localStorage on the client side). No tracking cookies, analytics cookies, or third-party cookies are used. You can clear your local storage at any time — this will log you out but won't affect core functionality. We do not use fingerprinting or any user-tracking technologies.
Weather data is sourced from Open-Meteo, a free open-data weather API. Open-Meteo uses ECMWF, DWD, and other public meteorological models. We do not control the accuracy of third-party data sources. Geocoding is performed via Open-Meteo's geocoding API — no address data is stored permanently.
You may request deletion of your account and associated data at any time by emailing privacy@weatherapex.com. Account deletion removes your user profile, API keys, and usage logs within 30 days. You may request a copy of your stored data. OTP records are automatically deleted after 10 minutes (expiry) or upon use.
WeatherApex is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.
We may update this privacy policy periodically. Material changes will be announced via email to registered users. Continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy-related inquiries, contact our Data Protection Officer at privacy@weatherapex.com. Physical address: WeatherApex HQ, Lahore, Pakistan.