This Privacy Policy describes how the Developer collects, uses, and protects information from users of the applications: Windly, Floralia and Sonder.

1. General Provisions

The Developer respects your privacy and strives to protect your personal data. Applications are designed with data minimization in mind. Windly and Floralia primarily store information on your device; Sonder requires server processing to deliver messaging, as described in Section 2.3.

Data controller (operator): Vladislav Sidelnikov, Russia. For Sonder account and messaging services, the Developer acts as the data controller / operator of personal data under applicable law (including Federal Law No. 152-FZ, GDPR where applicable, and CCPA/CPRA for California residents).

2. Information Collection by Applications

2.1 Windly

• Platforms: The application is available for iOS, iPadOS, tvOS, macOS, and visionOS
• Location: The application requests access to your location to obtain weather forecasts. Location is used with Apple WeatherKit. How Apple processes data is described in Apple's privacy documentation. On tvOS and macOS, approximate location or defaults may be used when precise location is unavailable or access is denied.
• Weather Data: Forecasts are provided by Apple WeatherKit. The developer does not operate a separate weather backend for Windly. Weather data shown in the app is cached locally on your device.
• Favorite Locations: You can add cities to favorites. They are stored on your device with SwiftData. To sync favorites between devices signed into the same Apple ID, the app uses Apple’s iCloud Key-Value Store (small payloads handled by Apple). This data is not sent to servers operated by the Developer.
• Local Storage: Weather cache and favorites are stored on your device using SwiftData (including temperature, humidity, pressure, wind, conditions, and related forecast fields) for fast access and offline use where data has already been cached.
• Synchronization: Weather forecast cache is not synced to the cloud. Only the favorites list may be mirrored via Apple’s iCloud Key-Value Store when iCloud is available; forecast tiles remain on-device. Current-location favorites are not synced as such.
• Analytics and Tracking: The Developer does not collect analytical information, does not use trackers, and does not track application usage.
• Accounts: The application does not require registration, account creation, or login.

2.2 Floralia

• Personal Data: The application collects information about menstrual cycle, 12 mood options, 33 symptoms, intimate life, libido, contraception, which you enter voluntarily.
• Local Storage: All data is stored locally on your device using SwiftData and iOS file system encryption. The Developer does NOT have access to the data.
• iCloud Sync: Optionally, you can enable synchronization through iCloud Drive. In this case, data is stored in your personal iCloud storage and protected by Apple's end-to-end encryption. Data is NOT accessible to the developer.
• Authentication: The application does not require registration or account creation. When using iCloud sync, your existing Apple ID is used. Support for PIN code and Face ID/Touch ID.
• PDF Export: Ability to export data in PDF format for providing to a doctor. Files are created locally on the device.
• Planning Module: Additional functionality for pregnancy planning with optimal days calendar and conception attempt tracker.

2.3 Sonder

• Platform: iOS 18 and later. Closed-community messenger built on the Matrix protocol.
• Account and Authentication: Registration requires a phone number verified by one-time code (OTP), plus email, username, display name, and device identifier. Login uses phone OTP. This data is processed to create, authenticate, and secure your account.
• Messages and Media: Text, files, voice messages, photos, and videos are transmitted over TLS to the Developer's Matrix homeserver at sonder.zerikc.ru. In the current release, end-to-end encryption (E2EE) is not enabled: message content is stored on the server to deliver the service and sync your chat history across devices after login. The server also processes metadata needed to operate the service (participants, timestamps, room identifiers, delivery status, file sizes). A future release may introduce E2EE; material changes will be reflected in this Policy.
• Local Storage: Session credentials, chat cache, and media are stored on your device using iOS file encryption and Keychain. Deleting the app removes local data; server-side account and message data remain until account deletion is requested.
• Contacts: With your permission, the app may access iOS Contacts to help you find people on Sonder. Normalized phone numbers are sent to sonder.zerikc.ru/api/v1/contacts/match-phones in batches to match registered users. Numbers with no match are not retained on the server beyond the matching request. You may deny or revoke access in iOS Settings.
• Push Notifications: To alert you about messages and calls, the app uses Apple Push Notification service (APNs). A device push token and limited notification metadata are processed by Sonder infrastructure. Notification content shown on the lock screen depends on your iOS notification settings.
• Voice and Video Calls: Calls use Element Call technology and require camera and microphone access when you start or join a call. Call signalling and media may traverse infrastructure linked to the Matrix homeserver.
• Location: Location access is requested only when you explicitly share live location in a chat.
• App Lock: Optional Face ID, Touch ID, or PIN protects access to the app. Biometric data is processed only on your device by iOS.
• Analytics and Advertising: Product analytics (PostHog) is disabled. The Developer does not show ads and does not use third-party advertising trackers. Crash diagnostics (Sentry) are not active in the current release configuration.
• Federation: The homeserver does not participate in public Matrix federation; communication is limited to the sonder.zerikc.ru service.
• Legal Bases (where GDPR applies): Account and messaging — performance of a contract (Art. 6(1)(b)); security and abuse prevention — legitimate interests (Art. 6(1)(f)); contacts matching and optional features — consent (Art. 6(1)(a)), withdrawable via iOS Settings or by not using the feature.

3. Use of Information

Collected information is used exclusively for:

• Providing core application functionality
• Synchronizing data between your devices (when enabled)
• Sending notifications at your request
• Improving application quality and security
• Creating PDF reports for medical consultations (Floralia)
• Calculating fertile window and optimal days for conception (Floralia)
• Delivering messages, media, calls, and push notifications (Sonder)
• Matching your contacts with Sonder users when you use contact discovery (Sonder)
• Maintaining service security, preventing abuse, and troubleshooting technical issues (Sonder)

Data is retained only as long as necessary for these purposes. Sonder account and message data on the server are kept while your account is active and for a limited period thereafter where required by law or for legitimate security purposes, unless you request earlier deletion.

The Developer never:

• Sell your personal data
• Use your data for targeted advertising
• Share data with third parties for their independent marketing without a legal basis
• Use health or messaging content for profiling or marketing

4. Data Storage and Protection

4.1 Local Storage

Data stored locally on your device is protected by built-in iOS security mechanisms, including file system encryption and Keychain for confidential data.

4.2 Cloud Storage

Floralia: When iCloud sync is enabled, data is stored in your personal iCloud Drive and protected by Apple's end-to-end encryption. Data is not accessible to the developer. Includes profile, diary entries, settings, and all medical data. When sync is disabled, data remains only on the device.

Windly: Forecast data is kept in local SwiftData stores on your device. Your favorites list may sync between devices through Apple’s iCloud Key-Value Store when you use the same Apple ID; the Developer does not host that data on its own servers.

Sonder: Account data, chat history, uploaded media, and related metadata are stored on servers operated by the Developer at sonder.zerikc.ru (Russian Federation). In the current release, message content is not end-to-end encrypted and is stored so the service can deliver and sync chats. Technical and organisational measures (access control, encryption in transit, infrastructure hardening) are applied; authorised administrators may access account data, metadata, and message content as necessary to operate the service and comply with law.

4.3 Biometric Protection

Applications support protection through Face ID/Touch ID and PIN code. Biometric data does not leave your device and is processed by iOS system APIs.

4.4 Security

The Developer applies reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure; you use the applications at your own risk and should protect your device and account credentials.

5. Data Transfer to Third Parties

The following third-party services are used:

5.1 Apple iCloud

Floralia: When sync is enabled, uses iCloud Drive to store data in your personal iCloud storage. Data is protected by end-to-end encryption and is not accessible to the developer.

Windly: When iCloud is enabled on your devices, your favorites list may sync via Apple’s iCloud Key-Value Store under your Apple ID. The Developer does not operate a backend database for your favorites.

Apple Privacy Policy: https://www.apple.com/legal/privacy/

5.2 Apple WeatherKit

Windly: Uses Apple WeatherKit for forecasts. Processing of requests is subject to Apple's terms and privacy policy. Forecast cache stays on your device; favorites may sync through Apple’s iCloud Key-Value Store as described above.

5.3 Apple Push Notification Service

Sonder: Uses APNs to deliver push notifications. Apple processes device tokens as described in Apple's privacy policy. The Developer receives the push token to route notifications through Sonder infrastructure.

Windly: Registers with APNs for silent background updates (e.g. widgets). The APNs device token is not sent to the Developer's servers.

5.4 Sonder Infrastructure

Sonder: Authentication API, Matrix homeserver, media storage, contact matching, and push gateway are operated by the Developer at sonder.zerikc.ru. Data is not sold to third parties. Infrastructure providers (hosting, networking) may process data strictly as subprocessors necessary to operate the service, under confidentiality and security obligations.

6. Your Rights

You have the right to:

• Access: Obtain a copy of all your data
• Correction: Change inaccurate information
• Deletion: Delete your data from the app and iCloud (if enabled)
• Export: Export data in PDF format for medical consultations (Floralia)
• Withdrawal of Consent: Disable sync, revoke permissions, or delete the application
• Portability: Receive a copy of your data in a structured, commonly used format where technically feasible (Sonder; GDPR Art. 20)
• Restriction / Objection: Request restriction of processing or object to processing based on legitimate interests, where applicable law provides these rights
• Complaint: Lodge a complaint with a supervisory authority in your country of residence (EU/EEA/UK users)

6.1 Data Deletion

Windly: Deleting the app removes local SwiftData databases on the device. Any favorites metadata synced through Apple’s iCloud Key-Value Store is controlled by your Apple ID / iCloud settings. The Developer does not operate a central database of your weather data.

Floralia (iCloud): Data in iCloud Drive is managed by you through iCloud settings on your device. You can delete it at any time yourself. The application also provides a "Delete All Data" function in settings for complete deletion of local and cloud data.

Sonder: Signing out and deleting the app removes local session data from your device. To delete your server account and associated personal data (profile, messages, media on the homeserver), contact zerikc@icloud.com from the email linked to your account or with sufficient identity verification. Requests are handled within 30 days where required by law (GDPR) or as soon as reasonably practicable.

6.2 California Residents (CCPA/CPRA)

California residents have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. The Developer does not sell personal information and does not share it for cross-context behavioural advertising. Exercising these rights will not result in discriminatory treatment. Submit requests to zerikc@icloud.com.

6.3 Russia (152-FZ)

Users in the Russian Federation may exercise rights provided by Federal Law No. 152-FZ, including access to personal data, clarification, blocking, and destruction where grounds exist. Sonder data is primarily processed on servers located in the Russian Federation.

7. Children's Data

These applications are not directed at children under 13 years of age (or under 16 in the EU/EEA where member-state law requires consent at 16). Sonder is a messaging service intended for users 13 and older (16+ in the EU/EEA where applicable). Floralia is intended for users 12+ and contains health information not suitable for children. The Developer does not knowingly collect personal data from children below the applicable age threshold. If you are a parent or guardian and believe your child has provided data, contact the Developer to request deletion.

8. International Data Transfer

Windly: Forecast requests go to Apple WeatherKit; processing is governed by Apple. Cached forecasts remain on the device. Favorites may sync between your devices via Apple’s iCloud Key-Value Store under your Apple ID.

Floralia: When using iCloud sync, data is stored in your personal iCloud storage according to your Apple ID settings and Apple's policy.

Sonder: Personal data is processed on servers in the Russian Federation. If you access Sonder from outside Russia, your data may be transferred to and stored in Russia to provide the service. For EU/EEA users, such transfer relies on appropriate safeguards where required (including your explicit use of the service and contractual necessity). Apple services (APNs) may process data under Apple's global infrastructure as described in Apple's policies.

9. Cookies and Tracking

These mobile applications do not use cookies. The Developer does not track your activity through advertising networks or third-party analytics services.

Windly: Uses the network for Apple WeatherKit and, optionally, to download static hero/background image assets from the developer’s site (image requests do not include personal data). On iOS, the app registers with Apple Push Notification service for silent background updates (e.g. widgets); the APNs device token is not sent to the Developer’s servers. The Developer does not use in-app analytics. Offline use relies on locally cached forecasts and images where available.

Floralia: Works completely offline and does not send any data to external servers (except optional sync through iCloud, which is managed by Apple).

Sonder: Requires network access to sonder.zerikc.ru for authentication, messaging, media, contact matching, and push registration. Product analytics and advertising trackers are not used. This website (zerikc.ru) does not set tracking cookies for the mobile apps; standard server logs may record technical access to this policy page.

10. Policy Changes

This Privacy Policy may be updated from time to time. Material changes will be brought to your attention through an in-app notification or email. By continuing to use the applications after changes take effect, you agree to the updated policy.

11. Applicable Law

This Policy is governed by the laws of the Russian Federation, including Federal Law No. 152-FZ "On Personal Data" where applicable to processing by the Developer as operator.

If you are in the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR) / UK GDPR also applies. The Developer processes data on lawful bases described in this Policy, implements appropriate security measures, and responds to data-subject requests within statutory timeframes.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA applies as described in Section 6.2. The Developer does not "sell" or "share" personal information as those terms are defined under California law.