Last updated: September 27, 2026
Cirrus Weather is built on a simple promise: no ads, no articles, no agenda — just the weather. We collect the minimum data necessary to make the app work, and we never sell your personal information or share it with advertisers.
Your location is used to fetch weather for where you are. Our servers do not keep a history of where you have been, with four exceptions: the short-lived request logs described under Data Security; the record of notifications we sent you, kept for 60 days, where a travel welcome names the city you were visiting; the record of severe weather alerts sent to you, described below, where an alert's title can name the area it covered; and the short record of each Live Activity banner, also described below, which can include your city and is deleted 7 days after the banner ends.
If severe weather alerts are on, our server stores your device's push token, your location rounded to about 100 meters, your city and time zone, whether you subscribe, whether Cirrus keeps that location up to date in the background (described next), whether earthquake and hurricane alerts are on, and the wind unit you use, so we can warn you. The same location is used to send you earthquake and hurricane alerts when those are on. It is kept that precise because a warning's edge is a line on a map, and rounding your location more could put you on the wrong side of that line. Turning alerts off deletes these. We also keep a record of which alerts were sent to your push token, so no one gets the same warning twice. For a weather warning it holds the alert's title, which can name the area the warning covered, and its time; for an earthquake or a hurricane it holds that event's ID and time, and is deleted after 30 days. It never holds your location, and it is not deleted when alerts are turned off.
If severe weather alerts are on and you set Cirrus's location access to Always, iOS lets Cirrus know when your phone has moved a good distance, even while Cirrus is closed. When that happens and your phone is at least 1 km from the location our server has, Cirrus replaces that one stored location with the new one, at most once every 10 minutes, so your severe weather alerts follow you when you travel. To name the place on your alerts, your phone asks Apple's map service for the nearest city. Cirrus does nothing else with the move: no weather is downloaded for it and nothing is written by AI. Our server never keeps a list of the locations your phone sends for these alerts. To stop, set Cirrus's location access to While Using the App in iOS Settings, or turn severe weather alerts off.
If severe weather alerts are on and you use Live Activities (the Lock Screen and Dynamic Island banners for warnings, lightning, rain and snow), our server also stores the tokens iOS gives Cirrus to start, update and end those banners, and a short record of each one: what kind it is, when it started and should end, and what it last showed, which can include your city and, for lightning, how far away the strikes were. This lets a banner end on time even when Cirrus is closed. Each record is deleted 7 days after its banner ends, and turning alerts off deletes all of it.
The home-screen widgets ask our server for fresh weather using your approximate location (about 1 km) and nothing that identifies you. It is used to look up the forecast and is not saved, apart from the short-lived request logs described under Data Security, which can pair it with your IP address.
If you add a Cirrus weather or Steps widget, your phone shares its own approximate location (about 1 km), its time zone and an anonymous device token with our server, so it can tell your widgets when the weather changes. Nothing else about you is attached.
Severe weather, earthquake and hurricane alerts are free for everyone and use the push token and location described above.
If you subscribe and turn on the notifications Cirrus writes for you — the morning and evening notes, your week ahead, change of plans, sky moments and the travel welcome — our server stores what it needs to write them: your device's push token, your approximate location (about 1 km), city, region, country and time zone, your units and notification settings, and:
If you subscribe, your phone also sends the App Store's signed record of your subscription with these registrations and with your severe weather alert registration: which plan it is, when it started and renews, and its transaction numbers. Our server checks it, so that only real subscriptions have notifications written by AI, and keeps only whether it checked out and when the subscription ends.
Turn all of these off in Settings, or turn off Cirrus notifications in iOS Settings, and all of it is deleted from our server the next time Cirrus checks in from your phone. You can turn any notification off at any time from Settings inside the app.
Weather summaries, "What to Wear," the Daily Cirrus briefing, the wording of severe weather alerts, the notifications Cirrus writes for you, the Sleep Coach, Ask Cirrus, and Cosmic Calendar readings are powered by Anthropic's Claude AI (voice narration of the Daily Cirrus by Cartesia). Weather conditions and your approximate location are sent to generate these.
To write your notifications, Anthropic receives the forecast for your area, your city, any routine the weather affects that day, and the text of recent notifications (including ones you voted on) so it doesn't repeat itself or miss your taste. It never receives your push token or anything else that identifies your device.
The Daily Cirrus briefing, and the script sent to Cartesia to be spoken, contain no Health data. The only feature that sends Health-derived information is the Sleep Coach, described below. Direct identifiers like your name and email are never included. Anthropic's data handling is governed by their privacy policy.
Only with your explicit HealthKit permission, Cirrus reads activity and wellness metrics — steps, active minutes, sleep, resting heart rate, heart rate variability, and VO₂ max — to power the Move card, your sleep score, and your daily readiness. This data is processed on your device, is never used for advertising, and is never sold. One exception: when you use the Sleep Coach, your recent sleep figures (hours, the times you fell asleep and woke, efficiency, deep and REM percentages, time to fall asleep, sleep score, and about a month of your usual bedtimes, wake times, streaks and averages) and today's recovery read are sent to Anthropic to write the coach's replies, with no name, email or account identifier attached. The other: if you tap Report on a Sleep Coach answer, the email you choose to send us includes that answer, which may quote those figures. Nothing from Health is ever sent to Cartesia. You can revoke access at any time in the Health app, and Cirrus never writes any data back to Health.
Separately, and only with your permission, Cirrus reads your iPhone's own step counter. iOS seals your Health data while your phone is locked, so this is what lets your Steps widget keep counting in your pocket, and Cirrus shows whichever count is higher. It is read on your device, is never sent anywhere, and you can turn it off at any time in iOS Settings under Privacy & Security, Motion & Fitness.
Share Your Shot opens an email to social@cirrusweather.app with the photo or video you pick, the name or handle you enter, the platform to credit you on, the place you type and the date it was taken. When you send it, we also get your email address. Photos are attached without their location data, but a video is attached as it was recorded and can include where it was filmed. The best shots may be featured in the app and on Cirrus social channels, credited to your name or handle, and we keep your email so we can reach you about it. Email privacy@cirrusweather.app to have your submission deleted or a featured shot taken down.
Cirrus uses third-party services for weather data, air quality, radar imagery, and location lookup. Each receives only the location coordinates needed to fulfill your request and nothing more. Two others receive text rather than coordinates: Anthropic (Claude AI — receives weather context, the questions you type into Ask Cirrus and the Sleep Coach, the details used to write your notifications described above, and, for the Sleep Coach only, your recent sleep figures and recovery read) and Cartesia (voice narration — receives the spoken Daily Cirrus script, which contains weather only). Resend sends the confirmation email when you sign up for product updates, so it receives your email address; Mixpanel and Sentry are covered under Analytics.
Cirrus uses Mixpanel to understand how the app is used — which screens people open, which features get used, where things go wrong — and Sentry to find and fix problems: crash reports, reports of the app freezing, reports when one of our data sources fails, and sampled measurements of how quickly the app starts and screens load. Both are third-party services, and the data reaches them. It includes your device model, iOS version and identifiers for your device, so activity can be grouped into one device's sessions rather than being truly anonymous, and it records whether you have a subscription. Sentry's reports also carry a short trail of what the app did just before the problem, including the web addresses it contacted; coordinates and query strings are removed from those, though an address can still show the approximate area a forecast or map was loaded for. None of it includes your name, your precise location, or any advertising identifier, it is never used to advertise to you, and it is never sold.
We do not use advertising identifiers, tracking pixels, or any form of cross-app tracking. We do not sell your data. Ever.
We use industry-standard encryption in transit (HTTPS/TLS) and keep the small amount of data we store in secured databases with access controls. Our servers run on Supabase and Cloudflare, whose standard request logs can include your IP address and the web address requested. For a home-screen widget's request, that address includes your approximate location (about 1 km); when you tap Remove to stop product-update emails, it includes your email address. Those logs, and our servers' error logs, which can include your device's push token, are kept for a limited time, typically a few days, to keep the service running and secure. No security system is perfect, but we take reasonable steps to protect your information.
Cirrus has no accounts and no sign-in, so there is no account record to keep. Location coordinates used to fetch weather are not stored after the request completes, except in the short-lived request logs described under Data Security and as described here:
Because Cirrus has no accounts, almost everything the app knows about you stays on your device and is removed when you delete the app. You can turn off notifications, location and Health access at any time from the app or from iOS Settings, which stops the corresponding data being collected; turning off severe alerts, or all of the notifications Cirrus writes for you, also deletes what our server stored for them, apart from the record of which alerts were already sent. California residents may have additional rights under the CCPA, including the right to know what personal information we collect and to request its deletion. To exercise any of these rights, email privacy@cirrusweather.app.
Cirrus Weather is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at privacy@cirrusweather.app and we will delete it promptly.
Questions about this policy? Email us at privacy@cirrusweather.app
Last updated: September 27, 2026