Privacy Policy

Lohera (“we”, “us”) is a kitesurfing-forecast application operated by OÜ Datadaa, registered in Estonia. Questions about this policy: privacy@lohera.com.

We collect only what is necessary to provide the service:

We do not collect precise location in the background.

• Personalising kite-spot recommendations to your skill, weight, and kite sizes
• Calculating the right kite size for current and forecast conditions
• Sending push notifications you explicitly opt in to
• Diagnosing crashes and improving the app
• Complying with legal obligations

We do not sell your data to third parties. We do not use your data for advertising.

Lohera is a helper tool and not an ultimate source of truth for safety decisions. You must independently assess your own level, verify real-world conditions, and follow basic safety practices before entering the water.

For full risk-allocation and liability terms, see the Terms of Service.

We share minimal data with the following trusted sub-processors:

• Authentication provider — account sign-in and identity management. Processes account details such as email and authentication metadata.
• Forecast data providers — ocean and weather forecast data. Receives anonymised coordinates to fetch forecast conditions.
• Cloud infrastructure providers — backend hosting, database, networking, and storage. Data is stored in the EU.
• Platform providers — push-notification delivery and optional platform sign-in methods. Receives anonymous device tokens and any profile data you explicitly choose to share during sign-in.

We require service providers that process personal data on our behalf to protect it to a standard equivalent to this policy.

Account data is retained as long as your account is active. You may request deletion at any time (see Section 8). Anonymised forecast cache data is automatically purged after 24 hours.

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (this does not affect prior lawful processing)

To exercise these rights, email privacy@lohera.com. You can also disable location or notification permissions at any time in iOS Settings. We respond within 30 days.

Lohera is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

You can delete your account and all associated data from the Profile screen in the app. Deletion is permanent and irreversible.

All data is transmitted over HTTPS. Passwords are never stored — authentication is handled by our authentication provider using industry-standard protocols. We apply the principle of least privilege to all internal data access.

If we make material changes, we will notify you via the app or email at least 14 days before they take effect. Continued use of Lohera after that date constitutes acceptance.