Privacy Policy

1. Introduction and Scope

Storm Chasing for Science LLC, a Kentucky limited liability company doing business as Weather Brother ("we," "us," "our," or "Weather Brother"), operates the Weather Brother mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the App.

We are committed to being good neighbors and good Samaritans. That commitment extends to how we treat your personal information. We do not sell your data. We do not serve ads. We collect only what we need to keep you and your family safe from severe weather.

This Privacy Policy applies to all users of the App, regardless of geographic location. Certain provisions apply only to residents of states with comprehensive privacy laws, as described in Section 12 ("State-Specific Rights").

By downloading, installing, or using the App, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

2. Data Controller Information

The entity responsible for processing your personal data is:

Storm Chasing for Science LLC d/b/a Weather Brother

33 W. Tucker Road, Mayfield, KY 42066

Email: dallas@weatherbrother.com

Note: The App may be published on the Apple App Store under the individual developer account of Dallas J. McKinney while a corporate developer account application is pending. Regardless of which developer account is used to distribute the App, the data controller remains Storm Chasing for Science LLC, and all data protection obligations described in this Privacy Policy are undertaken by and enforceable against the LLC.

3. Information We Collect

3.1 Information You Provide Directly

3.1.1 Account Information. When you create an account, we collect your name, email address, and password.

3.1.2 Profile and Preferences. You may provide your shelter type (e.g., interior room, basement, storm shelter, mobile home), risk tolerance level, and alert preferences. These allow us to personalize weather alerts and guidance.

3.1.3 Communications. If you contact us for support or feedback, we collect the content of your messages and any information you choose to provide.

3.1.4 Payment Information. If you subscribe, payment processing is handled by Apple's in-app purchase system or our designated third-party payment processor. We do not directly collect or store your credit card number, bank account number, or other financial account information.

3.2 Information Collected Automatically

3.2.1 Precise Geolocation Data. With your express, opt-in consent, we collect your device's precise GPS coordinates in real time. This is the core functionality of the App — we use your exact location to determine whether you are in the path of severe weather and to generate personalized alerts. Precise geolocation is classified as sensitive personal data under the Kentucky Consumer Data Protection Act (KRS 367.3574) and the Tennessee Information Protection Act (§ 47-18-3303), and we treat it accordingly.

3.2.2 Device Information. We collect device type, operating system version, unique device identifiers, and mobile network information to ensure compatibility and deliver push notifications.

3.2.3 Usage Data. We collect information about how you interact with the App, including features used, alert response times, and session duration. This helps us improve the App's effectiveness.

3.2.4 Crash and Performance Data. We collect diagnostic data, including crash logs and performance metrics, to maintain and improve the App.

3.3 Information from Third-Party Sources

3.3.1 Weather Data. We receive weather data from the National Weather Service (NWS), commercial radar providers, and other meteorological data sources. This data does not contain personal information.

3.3.2 AI/Machine Learning Inputs. Our AI-powered severe weather tracking algorithms process publicly available meteorological data. These algorithms generate predictions matched to your location but do not profile you for any purpose unrelated to weather safety.

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Personalized Weather Alerts and Guidance. Matching your precise location and shelter type against real-time severe weather data to deliver alerts tailored to your actual risk.

4.2 Travel Forecasting. If you use the travel forecast feature, we process your route information to provide weather conditions along your planned path.

4.3 AI Chatbot. Our AI-powered chatbot answers your weather-related questions using meteorological data and your profile preferences.

4.4 App Improvement. Analyzing aggregated, de-identified usage patterns to improve severe weather tracking algorithms, alert timing, and overall App performance.

4.5 Safety Communications. Sending you critical weather safety information, service announcements, and updates related to your account.

4.6 Compliance and Legal Obligations. Complying with applicable laws, regulations, and legal processes.

We do not use your personal information for:

  • Targeted advertising

  • Selling or renting your data to third parties

  • Building advertising profiles or consumer scores

  • Any purpose unrelated to weather safety, App functionality, or legal compliance

5. Sensitive Data and Consent

Under the KCDPA and similar state privacy laws, precise geolocation data is classified as sensitive personal data. We process this data only with your affirmative, opt-in consent, obtained through the App's onboarding flow and your device's operating system location permission prompt.

You may revoke your consent to geolocation collection at any time by:

  • Changing your location permissions in your device's Settings

  • Toggling location sharing off within the App

  • Contacting us at dallas@weatherbrother.com

If you revoke geolocation consent, the App's personalized severe weather alert features will be unavailable, but you will retain access to general weather information, radar maps, and the AI chatbot.

6. How We Share Your Information

We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

6.1 Service Providers. We share data with service providers who perform functions on our behalf, such as cloud hosting (Google Cloud Platform), push notification delivery, payment processing, and analytics. These providers are contractually required to use your data only for the services they provide to us and to maintain reasonable security measures.

6.2 Legal Requirements. We may disclose your information if required to do so by law, court order, or governmental regulation, or if we believe in good faith that such disclosure is necessary to protect the safety of any person, to address fraud or security issues, or to protect our legal rights.

6.3 Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent. We may share your information for any other purpose with your express consent.

7. Data Retention

We retain your personal data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Account Data. Retained for the duration of your active account, plus 30 days following account deletion to process the deletion request.

7.2 Geolocation Data. Real-time geolocation data used for alert generation is processed in transit and is not stored in a personally identifiable form after the alert cycle completes. Aggregated, de-identified location data may be retained for algorithm improvement.

7.3 Usage and Diagnostic Data. Retained in de-identified form for up to 24 months for App improvement purposes.

7.4 Payment Records. Retained as required by applicable tax and financial record-keeping laws.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal data from unauthorized access, use, alteration, and destruction. These measures include:

  • Encryption of data in transit (TLS/SSL) and at rest

  • Access controls limiting data access to authorized personnel

  • Regular security assessments of our infrastructure on Google Cloud Platform

  • Incident response procedures for suspected data breaches

No method of electronic transmission or storage is 100% secure. While we strive to use commercially reasonable means to protect your personal data, we cannot guarantee its absolute security.

9. Children's Privacy

9.1 The App is intended for users aged 13 and older. We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will promptly delete that information.

9.2 For users aged 13 through 17, we recommend that a parent or guardian review this Privacy Policy and assist with account setup. Because severe weather safety information may be critical to a minor's physical safety, we believe it is appropriate for teenagers to access the App with parental awareness. A parent or guardian may exercise privacy rights on behalf of a minor user by contacting us at dallas@weatherbrother.com.

9.3 We comply with the Children's Online Privacy Protection Act ("COPPA"), 15 U.S.C. §§ 6501–6506, and the FTC's implementing regulations at 16 C.F.R. Part 312.

10. Your Rights

Regardless of where you reside, all App users may:

10.1 Access the personal information we hold about you by submitting a request to dallas@weatherbrother.com.

10.2 Correct inaccurate personal information in your account settings or by contacting us.

10.3 Delete your account and associated personal data through the App's settings or by contacting us.

10.4 Revoke Consent for geolocation processing at any time, as described in Section 5.

10.5 Obtain a Copy of your personal data in a commonly used, machine-readable format.

We will respond to verifiable requests within 45 days. We will not discriminate against you for exercising any of these rights.

11. "Do Not Sell" and Opt-Out Signals

11.1 We do not sell personal data. Because we do not sell personal data, there is no need to opt out of a sale. However, we respect and will honor browser-based and device-based Universal Opt-Out Mechanism ("UOOM") signals, such as the Global Privacy Control, as an opt-out of any future sale or sharing of personal data should our practices ever change.

11.2 We do not currently respond to Do Not Track ("DNT") browser signals because there is no uniform industry standard for DNT compliance. If a uniform standard is adopted, we will update this policy accordingly.

12. State-Specific Privacy Rights

The following supplemental disclosures apply to residents of states with comprehensive consumer data privacy laws. These rights apply in addition to the general rights described in Section 10. If you are a resident of a listed state and the applicable law's jurisdictional thresholds are met, you may exercise the rights described below.

12.1 Kentucky (KCDPA, KRS 367.3571 et seq., effective January 1, 2026). Kentucky residents have the right to: confirm whether we are processing their personal data; access their personal data; correct inaccuracies; delete personal data; obtain a portable copy of personal data; and opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

12.1.1 Precise geolocation data is sensitive data under the KCDPA and requires opt-in consent before processing.

12.1.2 The KCDPA provides a permanent 30-day cure period for alleged violations. Enforcement is through the Kentucky Attorney General. There is no private right of action under the KCDPA.

12.1.3 To exercise your rights: email dallas@weatherbrother.com. We will verify your identity and respond within 45 days. If we decline a request, you have the right to appeal, and we will provide instructions for doing so.

12.2 Tennessee (TIPA, Tenn. Code Ann. § 47-18-3301 et seq., effective July 1, 2025). Tennessee residents have substantially similar rights to those described for Kentucky residents above, including the right to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling.

12.2.1 Precise geolocation is sensitive data under TIPA and requires opt-in consent. Tennessee provides a 60-day cure period. Enforcement is through the Tennessee Attorney General. There is no private right of action.

12.3 Indiana (INCDPA, IC 24-15, effective January 1, 2026). Indiana residents have the right to confirm, access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, sale, and certain profiling. Indiana provides a 30-day cure period. Enforcement is through the Indiana Attorney General.

12.4 Other States. If you reside in a state with a comprehensive consumer data privacy law not listed above (including but not limited to Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Minnesota, Maryland, Utah, or Rhode Island), you may have similar rights under your state's law. Contact us at dallas@weatherbrother.com, identify your state of residence, and we will process your request in accordance with applicable law.

12.4.1 Alabama: As of this Privacy Policy's effective date, Alabama does not have an enacted comprehensive consumer data privacy law. HB 351 (the Alabama Personal Data Protection Act) is advancing through the Alabama Legislature with a proposed effective date of May 1, 2027. We will update this Privacy Policy if and when Alabama's law is enacted.

12.4.2 Missouri, Mississippi, and Georgia: These states do not currently have comprehensive consumer data privacy laws. Residents of these states retain the general rights described in Section 10 and are protected by applicable federal law including COPPA. We will update this Privacy Policy as new laws are enacted in these states.

13. Artificial Intelligence Disclosure

The App uses artificial intelligence and machine learning in the following ways:

13.1 Severe Weather Prediction Algorithms. AI/ML pattern recognition algorithms process publicly available meteorological data (radar, satellite, surface observations, model data) to predict the path, intensity, and timing of severe weather events at neighborhood-level granularity.

13.2 Personalized Alert Generation. The predictions generated by our algorithms are matched against your precise location and shelter type to determine your specific risk level and generate tailored alerts and guidance.

13.3 AI Chatbot. An AI-powered conversational interface answers weather-related questions using meteorological data and your profile preferences.

Our AI systems do not make decisions that produce legal or similarly significant effects concerning you. Our AI systems do not profile you for purposes unrelated to weather safety. We do not use your personal data to train general-purpose AI models. Any AI training performed on user interaction data uses aggregated, de-identified datasets.

14. Third-Party Services and Links

The App may contain links to third-party websites or services, including the National Weather Service, local emergency management agencies, and storm shelter directories. This Privacy Policy does not apply to third-party services, and we encourage you to review their privacy policies before providing them with your information.

15. Data Storage and Transfers

15.1 Your personal data is stored and processed on Google Cloud Platform infrastructure located in the United States. If you access the App from outside the United States, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your jurisdiction.

15.2 If we expand the App's availability to jurisdictions outside the United States that require specific data transfer mechanisms (such as the European Union's Standard Contractual Clauses), we will implement the required safeguards and update this Privacy Policy accordingly.

16. Data Breach Notification

In the event of a data breach involving your personal information, we will notify you and applicable regulatory authorities in accordance with the breach notification laws of your state of residence. Kentucky's breach notification statute (KRS 365.732) requires notification without unreasonable delay. We will provide the notifications required by law, including a description of the breach, the types of information involved, and steps you can take to protect yourself.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Post the updated Privacy Policy within the App and at weatherbrother.com/privacy

  • Update the "Last Updated" date at the top of this document

  • Notify you via push notification or email for material changes that affect how we use your sensitive personal data

Your continued use of the App after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with a material change, you may delete your account as described in Section 10.

18. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have a complaint about our data practices, please contact us:

Storm Chasing for Science LLC d/b/a Weather Brother

Attn: Privacy Inquiries

33 W. Tucker Road

Mayfield, KY 42066

Email: dallas@weatherbrother.com

We will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within 45 days.

19. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Kentucky, without regard to conflict-of-laws principles, except to the extent preempted by applicable federal law. Nothing in this Privacy Policy limits your rights under the consumer data privacy law of your state of residence.

20. Apple App Store Supplement

This section provides additional disclosures required by Apple's App Store Review Guidelines (Section 5.1.1):

20.1 Data Collected. Precise Location, Name, Email Address, Device ID, Usage Data, Crash Data, and Payment Information (processed by Apple).

20.2 Data Linked to You. Precise Location, Name, Email Address, and shelter/risk profile preferences.

20.3 Data Used to Track You. None. We do not track you across apps or websites owned by other companies for advertising or advertising measurement purposes.

20.4 Data Not Collected. We do not collect browsing history, search history, contacts, photos, health data, financial information (beyond what Apple processes for in-app purchases), or any data from other apps on your device.

Storm Chasing for Science LLC d/b/a Weather Brother