Privacy Policy

Who operates Balmy

Balmy (https://balmi.io) is operated by the operator of Balmy, an individual (not a company). This policy explains what information the service collects, how it is used, and the choices you have.

This policy is written in plain language. It is not legal advice. If you have questions about your rights under local law, consider speaking with a qualified professional.

Information we collect

Account information

If you create an account, we collect:

• Email address
• Password (stored as a one-way hash, never in plain text)
• Optional display name and profile preferences you choose to save
• Saved locations you add to your account (name, city, country, and coordinates)

Location information

Balmy needs a location to show weather. You can search for a city or choose “Use my location.” If you use device location, your browser shares coordinates with Balmy only to fetch weather for that area. Coordinates are sent to our server and to OpenWeatherMap (see Third parties below). We do not continuously track your location in the background.

If you are not signed in, your last selected location may be stored in your browser’s local storage so the app can reopen where you left off. Saved bookmarks for mindful moments and quotes are also stored locally in your browser and are not uploaded to our servers.

Technical and usage information

Like most web services, our hosting provider and server may process:

• IP address
• Browser type and device information
• Request timestamps and basic server logs
• Session cookies needed to keep you signed in

How we use information

We use the information above to:

• Provide weather, forecasts, and app features you request
• Create and maintain your account, saved locations, and profile
• Keep the service secure, prevent abuse, and troubleshoot problems
• Respond to support or privacy requests

We do not sell your personal information.

Legal bases (EEA/UK users)

If you are in the European Economic Area or United Kingdom, we rely on:

• Contract — to provide the service and account features you ask for
• Legitimate interests — to secure and improve the service
• Consent — when you choose to share device location through your browser

Third parties

• OpenWeatherMap — weather and city search data. Location queries are sent to their API to retrieve forecasts.
• Fly.io — application hosting
• Neon — PostgreSQL database hosting for accounts and saved locations

These providers process data on our behalf to run Balmy. Their own privacy policies govern their services.

Retention

We keep account information while your account is active. Server logs are kept for a limited period for security and troubleshooting. You can delete your account at any time from the Profile menu; this removes your account, profile, and saved locations from our database. Information stored only in your browser (such as bookmarks or a guest’s last location) remains on your device until you clear site data.

Your choices and rights

• Location — you can search manually instead of sharing device location, and you can revoke location permission in your browser settings at any time.
• Account deletion — signed-in users can delete their account from Profile → Delete account.
• Access or correction — contact us to request a copy of account information we hold or to correct it.
• California residents — you may have additional rights to know, delete, and opt out of sale (we do not sell personal information). Contact us to exercise these rights.

Children

Balmy is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Security

We use reasonable technical measures such as HTTPS, hashed passwords, and access controls. No method of transmission or storage is completely secure.

International users

Balmy is operated from the United States. If you use the service from another country, your information may be processed in the U.S. and in the countries where our service providers operate.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Balmy after an update means you accept the revised policy.

Contact

For privacy questions or requests, contact the operator of Balmy at privacy@balmy.io.