Privacy Policy

Last updated: 31 May 2026

Vantage is built around respect for your data. We collect the minimum necessary to provide accurate forecasts and improve the service. This page explains exactly what we collect, why, and what control you have.

Who we are

Vantage is operated as a sole-trader business based in the United Kingdom. For the purposes of UK GDPR, the data controller is the operator of vantageplanner.app. You can contact us at support@vantageplanner.app.

What we collect

Account information

When you create an account, we store your email address and an encrypted password. We never see your password in plain text — it is hashed before storage. Optionally, you may set a display name.

Date of birth

At signup we ask for your date of birth solely to verify you are at least 16 years old. We retain this information in two distinct ways:

If you delete your account, both the public month/day field and the internal audit row are removed within 30 days.

Saved locations and preferences

If you save a location to your account, we store its name, latitude, longitude, the preset you associate with it, and any folder you organise it into. We also store custom presets you create. This data is tied to your account and synced across your devices.

Push notification subscriptions

If you enable push notifications, we store a unique device identifier so we can alert you when conditions match your saved presets. The exact identifier depends on your platform:

These tokens are stored against your account and per saved location. We use them only to dispatch notifications you have configured. They contain no personal information beyond identifying your device for push delivery, and you can remove them at any time by disabling notifications in the app or by deleting your account.

Notification history

We keep a 24-hour record of notifications dispatched to your device for the purposes of preventing duplicate alerts. After 24 hours, this record is deleted automatically.

Accuracy ratings

If you rate the accuracy of a forecast, we store your rating along with the weather data the forecast was based on. This helps us improve scoring accuracy over time. Ratings are tied to your account.

Location data when checking conditions

When you check conditions for a location, the latitude and longitude are sent to our weather service to fetch a forecast. We do not store this lookup unless you save the location to your account.

What we do NOT collect

Third-party services we use

Open-Meteo

We send latitude/longitude coordinates to Open-Meteo to fetch weather forecasts. Open-Meteo aggregates forecasts from official meteorological services including the UK Met Office, ECMWF, Météo-France, Deutscher Wetterdienst, and NOAA. They do not require an account or store user-identifying information.

Open-Elevation

For locations where it improves forecast quality (inversion and fog scoring benefit from knowing the elevation around a point), we send latitude/longitude coordinates to Open-Elevation to look up terrain heights. Open-Elevation does not require an account, stores no user-identifying information, and only receives raw coordinates with no other context.

Firebase Cloud Messaging (Google)

For push notification delivery on Android and iOS native apps, we use Firebase Cloud Messaging. Your device's push token is routed through Firebase, and notification payloads pass through Firebase to reach your device. Firebase does not see the content of notifications beyond the token mapping and is governed by Google's privacy policy.

Apple Push Notification service

For push notifications on iOS, your device token is issued by Apple's Push Notification service (APNs) and used solely to deliver notifications to your device. Apple's handling of this data is governed by Apple's privacy policy.

Supabase

We use Supabase for account authentication, database storage, and edge function hosting. Your data is stored on Supabase's infrastructure within the European Union.

Google Maps Platform

If you use the route-planning feature, we use Google Maps to show your map and calculate routes. Your location may be processed by Google according to their privacy policy.

Cloudflare and Netlify

Our website is delivered via Cloudflare (CDN, DDoS protection) and hosted on Netlify. Both may briefly process IP addresses for security and delivery, but neither has access to your account data.

Stripe (payments)

If you subscribe to Vantage, payment processing is handled by Stripe (Stripe Payments Europe Limited and Stripe, Inc.). When you start a subscription, your email address is shared with Stripe so they can create a customer record and process billing. Your card details are entered directly into Stripe's hosted checkout page — we never see, store, or process your card or banking information. Stripe is governed by its own privacy policy. We retain a Stripe customer ID and subscription identifiers in our database to track your subscription state.

Sentry (crash reporting)

For diagnosing technical issues, we use Sentry to collect anonymised error reports. When the app encounters an error, Sentry receives the error details, a stack trace, and your user ID (so we can correlate multiple errors from the same person if support is needed). Sentry does not receive your email, password, location, or any other personal data. Sentry is governed by its own privacy policy.

How we use your data

Data retention

We retain your account data for as long as your account exists. Notification history is deleted automatically after 24 hours. If you delete your account, all associated data is removed within 30 days.

Deleting your account

You can delete your Vantage account at any time. Two routes are available:

When you delete your account, we remove your email, profile data, saved locations, custom presets, accuracy ratings, push subscriptions, subscription records, and your encrypted password from our database. If you have an active subscription, it is automatically canceled with Stripe at the point of deletion so you are not billed further. Our internal age-verification audit row is retained for 30 days for fraud-prevention purposes, then permanently deleted. Notification history (24-hour rolling) is unaffected as it is auto-deleted in any case. Stripe retains some payment records under its own legal obligations (typically 7 years for tax/accounting) — this is independent of our service.

Cookies and local storage

Vantage uses your browser's localStorage to remember your preferences (theme, language, saved checklist items) on your device. This is not a tracking cookie and is not transmitted to our servers. We do not use third-party tracking cookies. Cloudflare may set technical cookies for DDoS protection only.

Your rights under UK GDPR

You have the following rights regarding your data:

To exercise any of these rights, email support@vantageplanner.app. We will respond within 30 days.

Children

Vantage is not directed at children under 16. We do not knowingly collect data from children under 16. We verify age at signup by asking for date of birth (see "Date of birth" below). If you believe an account has been created in violation of this, please contact us and we will delete it promptly.

International users

Vantage is operated from the United Kingdom and our data is stored within the European Union. By using the service from outside these regions, you consent to the transfer of your data to the UK and EU for processing. We rely on standard contractual clauses where applicable.

Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top reflects the most recent change. Significant changes will be communicated via email if you have an account. Continued use of Vantage after changes constitutes acceptance of the updated policy.

Complaints

If you have a concern about how we handle your data, please contact us first at support@vantageplanner.app. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Contact

Questions about this policy or your data? Email support@vantageplanner.app.