Data controller
Controller: KickIT As
Postal address: Øivind Skaldaspillers veg 14, 5518 Haugesund, Norway
Privacy contact: post@kickit.no
Your choice
Weather is optional. We use an approximate weather area to provide forecasts with your consent. You can decline or turn it off and clear local weather data in Privacy and weather. Other launcher features remain available. Android location permission is separate. The app requests approximate foreground location only.
What we process
The app reduces location to a 0.01-degree weather grid before a request. The service receives an area identifier, not precise device coordinates. Area IDs are reversible approximate locations, not anonymised information. The service does not store installation-to-area histories. It stores installation public keys, short-lived sessions, replay checks and security counters to prevent abuse. The security basis is our legitimate interest in protecting service availability and authorised access. Shared forecasts have no installation identifier.
Providers
MET Norway supplies forecasts and receives the representative area coordinates and our service IP, without your installation key, user IP or purchase token. Cloudflare hosts this service and receives your IP and request/network metadata. Google verifies Play app integrity and, if paid weather is enabled, purchase status. We store purchase tokens encrypted to recheck access; we receive no payment card details. Purchase checks are necessary to deliver purchased access. Token-only development testing does not use Google Integrity, installation sessions or purchase verification. Production app builds use the weather service and Google Play verification. Buying access does not automatically enable location or forecasts. Turning weather off does not cancel a subscription; manage it in Google Play.
Retention
Challenges expire after two minutes; sessions after one hour; replay records after 125 seconds; installation security counters after at most one day. Purchase verification caches expire within 30 days of their last verification. Expired active database records are purged in scheduled batches, normally within five minutes, subject to outages. Shared forecasts are cached according to MET headers and retained for revalidation for at least 24 hours, without installation links. An expired local app forecast is discarded on its next read after 24 hours. Turning weather off clears saved weather and consent and cancels pending requests. Cloudflare recovery copies may retain deleted records for up to 30 days. Restores must reapply deletion before serving traffic. Network/security records held by providers are subject to their own disclosed retention and terms.
Access and deletion
Authenticated installations can request a machine-readable copy of their service records or delete them using signed installation requests. Deletion revokes matching sessions and removes associated challenges, replay records, installation counters and the linked purchase-verification cache. It does not cancel a Google Play purchase or delete shared weather forecasts. Contact us for assistance and for access, correction, restriction, portability or objection where applicable. We respond within GDPR deadlines, normally one month; lawful exceptions and extensions may apply. Withdrawal does not affect the lawfulness of earlier processing. You may complain to Datatilsynet at datatilsynet.no or your local supervisory authority.
Other launcher data
App lists, focus tasks, settings and calendar access are used locally and are not sent to this weather service. Your calendar provider may sync events. App data is excluded from Android backup and device transfer. Explicit web/store searches and launching other apps use those providers. There are no advertising or analytics SDKs in the app, and weather is not used for advertising, profiling or automated decisions with legal or similarly significant effects.
International processing
The production weather database is configured for the EU. This does not restrict global edge processing, cache locations or provider metadata. Cloudflare, Google and MET may involve processing outside the EEA. The operator must document applicable processor contracts, international transfer safeguards and provider retention before public launch.
This website
This website?s own code does not use advertising, analytics, cookies or browser storage. Its theme preview runs in your browser and does not request your location. Our hosting infrastructure receives information needed to deliver and secure the page, including your IP address and request metadata. Provider-operated network and security records are subject to the hosting provider’s retention and terms. Emailing support uses your chosen email provider and shares the information you include with KickIT As. Please include only the information needed to answer your question.
Remove local launcher data
You can clear Malino’s local data through Android Settings → Apps → Malino → Storage → Clear storage, or uninstall the app. Turning weather off clears the locally saved weather choice and forecast. Calendar events already saved to a calendar account must be removed through that calendar or its provider. Neither clearing data nor uninstalling cancels a weather subscription; manage subscriptions in Google Play.