Privacy Policy

Effective date: February 21, 2026

Inverza is a landscape photography weather app developed by Marcel Strelow. This privacy policy explains how the app handles your information in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

The data controller responsible for processing within the meaning of the GDPR is:

Marcel Strelow
Email: contact@inverza.app

Information the App Uses

Inverza processes the following data to provide its core functionality:

• Location data: Your device coordinates are used to fetch weather forecasts and find nearby photography spots. Location data is sent directly to Open-Meteo (weather) and the Overpass API (map data). It is never stored on any server I operate.
• Compass heading: When you use the "Use Device Compass" feature, the app reads your device heading locally to set a viewing direction. This data never leaves your device.
• Built-in AI model: The app includes a built-in AI model (Google Gemini 3.1 Flash Lite) that works without any setup. When using this default model, your questions and weather context are sent directly from your device to the Google Gemini API using an application-level API key. I do not operate a proxy server and have no access to your conversations.
• Built-in Flickr key: The app includes a built-in Flickr API key for spot photos and hotspot discovery. Your coordinates are sent to the Flickr API using this application-level key. If you add a Flickr Pro API key, it replaces the built-in key.
• API keys you provide: If you switch to "Bring Your Own Key" for AI providers (Anthropic Claude, Google Gemini, or OpenAI ChatGPT) or add a Flickr Pro key, these keys are stored locally on your device using iOS UserDefaults. They are sent only to the respective provider. I never receive or store your API keys.
• AI chat messages: Whether using the built-in model or your own API key, your questions, weather context, and location-derived information (such as the location name and coordinates) are processed by third-party AI systems and sent directly from your device to the selected AI provider. I do not operate a proxy server and have no access to your conversations.

Legal Basis for Processing

Under Article 6 of the GDPR, the legal bases for processing your data are:

• Consent (Art. 6(1)(a)): When you grant the app access to your location or compass heading through the iOS permission dialog, you consent to this data being used for the app's features. You can withdraw consent at any time by revoking location permissions in your device settings.
• Contractual necessity (Art. 6(1)(b)): Processing of data you actively provide (such as saved spots, viewing directions, and API keys) is necessary to deliver the app's core functionality that you have chosen to use.

Data Storage and Retention

All user data — saved spots, viewing directions, API keys, and preferences — is stored locally on your device. Inverza does not have a backend server, user accounts, or cloud sync. If you delete the app, all local data is permanently removed.

Data transmitted to third-party services (weather queries, map requests, AI chat messages) is not stored by me. Retention by those third parties is governed by their own privacy policies.

Third-Party Services and International Data Transfers

The app communicates directly with the following third-party services. Each has its own privacy policy. Some of these services are operated outside the European Economic Area (EEA), which means your data may be transferred to countries that do not offer the same level of data protection as the EU.

• Open-Meteo (open-meteo.com) — Weather forecasts. Receives your coordinates. Based in Switzerland (EU adequacy decision).
• Overpass API (overpass-api.de) — OpenStreetMap data. Receives the map region you are viewing. Based in the EU.
• Flickr API (flickr.com) — Geotagged photos and hotspot discovery. Receives your coordinates. Uses a built-in key by default, or your Pro key if configured. Operated by SmugMug (USA).
• Wikimedia Commons (commons.wikimedia.org) — Spot photos. Receives your coordinates. Operated by the Wikimedia Foundation (USA).
• Google Gemini (generativelanguage.googleapis.com) — Built-in AI chat (Gemini 3.1 Flash Lite). Used by default without any setup. Receives your question, weather context, and location-derived information (location name and coordinates). Based in the USA.
• AI providers (Anthropic, Google, OpenAI) — If you choose "Bring Your Own Key", AI chat responses are handled by the provider you selected. Receives your question, weather context, location-derived information, and your API key. Only one provider is contacted at a time. These providers are based in the USA.

For services based in the USA, transfers are made on the basis of your explicit consent when you choose to use these features and, where applicable, under the EU-U.S. Data Privacy Framework or standard contractual clauses maintained by those providers. The built-in Gemini 3.1 Flash Lite model communicates with Google's servers in the USA. Note that Flickr is used by default with a built-in key. You can disable Flickr in Settings if you prefer to avoid this data transfer. You can avoid additional US data transfers by not switching to "Bring Your Own Key" for AI.

Subscription and Payments

Inverza is available as an annual subscription ($4.99/year). All payment processing is handled entirely by Apple through the App Store. The developer does not receive, process, or store any payment information, credit card numbers, or billing details. Apple's privacy policy governs how your payment data is handled.

Analytics and Tracking

Inverza does not include any analytics SDKs, crash reporting tools, advertising frameworks, or tracking pixels. I do not collect any usage data, device identifiers, or behavioural information. No profiling or automated decision-making takes place.

Your Rights Under the GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access (Art. 15): You may request confirmation of whether your personal data is being processed and, if so, access to that data. Since all data is stored locally on your device, you already have full access.
• Right to rectification (Art. 16): You may correct inaccurate data. You can edit your saved spots, viewing directions, and API keys directly within the app.
• Right to erasure (Art. 17): You may request deletion of your personal data. You can delete individual entries in the app or remove all data by deleting the app.
• Right to restriction of processing (Art. 18): You may request that processing be restricted. You can revoke location permissions or stop using specific features at any time.
• Right to data portability (Art. 20): You may request your data in a structured, machine-readable format. You can use the Export / Import feature in Settings to export all your curated spots as a portable text string.
• Right to object (Art. 21): You may object to the processing of your data. You can stop using any feature or revoke permissions at any time.
• Right to withdraw consent (Art. 7(3)): You may withdraw consent at any time by revoking location permissions in your iOS settings or by ceasing to use features that require API keys. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact me at contact@inverza.app.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

Children's Privacy

Inverza is not directed at children under 16 (the age threshold under the GDPR). The app does not knowingly collect personal information from children.

Changes to This Policy

If I update this privacy policy, the revised version will be posted at this URL with an updated effective date. If a change materially affects the way your data is processed, I will make reasonable efforts to notify users through the app or this website.

Contact

If you have questions about this privacy policy or wish to exercise your data protection rights, you can reach me at contact@inverza.app.