Privacy policy

Effective date: October 17, 2026

This policy covers the ohheymow app, on Android and in a web browser, and this website, ohheymow.com. ohheymow is made and run by Rowan Tree Solutions LLC; “we” and “us” mean that company. ohheymow is a United States service for locations in the United States.

The short version

• The app collects what it needs to work: your account, your business, your locations and visits, and the weather for those places.
• We do not sell your information. We do not show ads or use outside analytics or tracking tools, in the app or on this website.
• My location is off until you turn it on. With your permission, the Android app reads your location only while the app is open, to warn about rain near your phone. We use only the latest position, with a 24-hour expiry. Replaced or deleted positions can remain in the database’s short version history for up to about an hour. You can stop it at any time; the details below explain deletion and what weather services receive.
• Your customers’ contact details stay in your account and are never sent to weather services.
• If you buy a plan, Paddle, our reseller, takes your payment details. We never see your card number.
• You can export your records or delete your account in the app, or ask us by email.

The ohheymow app

What the app collects

• Your account. Your email address and password. Google’s Firebase sign-in service holds them for us: your password goes only to that service, and our own service never receives it. We also keep your sign-in ID and a record of the devices and sessions you are signed in on, so you can sign out other devices. When you create an account, Firebase sends one email to confirm your address and records whether it is confirmed; until it is, the app shows only that step and our service does nothing with the account except delete it if you ask.
• Your business. Its name and the kinds of work you tell us you do. If you claim an invitation code, the optional answers you give with it, such as how many locations you service.
• Your locations. The name you give each one, the address you type, the pin’s position on the map (latitude and longitude), its time zone, whether the pin came from an address search or was placed by hand, and the hours you want its weather watched. If you choose, a customer contact for the location: a name, phone number and email address.
• My location, if you turn it on. Your phone’s latest latitude and longitude, accuracy and capture time, linked to your account and registered phone. Android also tells us whether the position is simulated; our service refuses simulated positions.
• Your work. Service plans, visits, reminders, history and notes (up to 1,000 characters each).
• Weather for your locations. Forecasts, how much rain has fallen, the app’s weather decisions and alerts, which of its notices your devices showed and which you opened, official government warnings, and your answers when the app asks whether rain came as expected.
• Your devices. For each phone or browser you use: its type, a device name, whether notifications are allowed, a push token (a code that lets notices reach that device), its time zone, your notice settings, and when it was registered and last used.
• The home-screen rain widget. If you place ohheymow’s rain widget on an Android home screen, and only while you are signed in with a confirmed email, our service gives the widget its own key, linked to your account and to that installation of the app, so it can read one place’s rain without opening the app. The phone keeps the key, your account’s internal ID, the widget’s last answer and any old key still waiting to be removed in one encrypted file that is left out of backups and of transfers to a new phone. About every 30 minutes, after a rain notice and when you open the app, at most once every five minutes, the widget sends its key to read that place’s name, time zone and rain, with a credit line; the answer holds no map pin, records or notices. A failed read may be tried again sooner, and our service answers at most 12 reads an hour from each installation’s widget. Our service does not keep the key itself: it keeps a one-way scramble of it that cannot be turned back into the key, with your account’s internal ID, the installation’s ID, when you signed in, how many reads it answered this hour and when the widget last read, for at most ten installations per account. To stop abuse, the service briefly keeps refused widget reads in memory only, for about a minute: a count for each internet address and a one-way scramble of each refused key.
• Minute-forecast accounting. Each time our service asks Rainbow.ai for a location’s minute-by-minute rain, it records the request: your account’s internal ID, the location’s internal ID, the supplier and product, when the request was made, sent and finished, its units and cost, and how it turned out, with an audit line for each step. A pacing record for each account lists its requests of the last hour by location ID, with its spending totals for the last few days. None of these records holds a name, address, map pin or customer details.
• Your plan. If you buy a plan: which plan your account has, whether it renews and until when, and the reference numbers (IDs) Paddle gives your subscription, your customer record, your payments and the price. We never receive your card number or other payment details.
• Give a week, get a week. If you share your link: a private share code for your account; how many extra weeks it has earned you; and scrambled codes made from the devices you shared from, so a friend’s week cannot be earned on your own phone. If you join through someone’s link: which link you used, the device you claimed it on, and when your extra week was earned. Each day we count shares, link openings and friends who joined, without saying who. To stop abuse, the service briefly counts link openings per internet address, in memory only, for about a minute.
• Requests you save. When you save a request in the app: its type, your message and answers, the location it is about, and whether we may contact you about it.
• Error and crash reports. The app sends filtered reports to our own service to diagnose problems. Reports can include the error type, filtered code locations, the time of the error, the app version and build number, and whether the app was running on Android or in a web browser. They can also include the screen category and a short trail of up to eight recent screen categories and events: going online or offline, going into the background and returning to the foreground. This trail contains no screen contents, typed text or place names. Reporting can begin before sign-in. Reports are kept for 30 days.
• Service logs. Our hosting provider keeps technical records of requests to our service, such as your device’s internet address, the time and whether the request worked.

How we use it

We use this information only to run ohheymow for you:

• to show forecasts, weather decisions and official warnings for your locations;
• to send the notices and visit reminders you choose to the devices you register;
• to let a home-screen rain widget show one place’s rain without opening the app;
• to keep minute-forecast spending inside its limits and to check Rainbow.ai’s bill;
• to keep your records the same on every device you sign in on;
• to give your account what its plan includes, and to sort out a problem with a purchase;
• to keep your account and our service secure, for example by asking for your password again before your account is deleted and by checking that requests come from the genuine app;
• to read what our invited testers tell us by business type, using the optional answers given with an invitation code;
• to answer you when you contact us, and to find and fix problems.

We do not use your information for advertising, and we do not sell it or share it for anyone else’s marketing. The app contains no advertising, outside analytics or outside crash-reporting service. You place each location by searching for its address or placing a pin.

To learn which parts of the app help people choose a plan, our service counts daily upgrade taps, plans page openings and checkouts started and finished, by part of the app and by web or Android. We also count accounts that buy on the website after their free days, using the Android phones already registered for notifications. These are totals. Marks that stop one account being counted twice are deleted after the day ends. A checkout record also notes which part of the app it began from and whether the account had a registered Android phone and had finished its free days, until the account is deleted. Nothing is sent to an outside analytics service.

If you join our testers list, we count how often you open the app and which screens you visit, to improve it. We keep these counts for 90 days. We don’t record what you type, what’s on the screen, or where you are. Customers are never counted, and deleting your account deletes these counts.

My location is off until you turn it on. After you allow location and notifications, the Android app reads your phone’s precise location, or approximate location if that is what you allow, to warn about approaching rain. It reads your location only while the app is open and you have turned My location on, never while the app is closed or in the background. While the app is open, Android is asked for a position about every minute, or every two minutes while you are still. The app sends our service a first position, then a fresh position about every 500 metres you move or every 10 minutes, never more than once a minute. Each report includes latitude and longitude, accuracy, capture time and whether Android marked it as simulated, linked to your account and phone. Our service uses only the latest position, replacing the previous active record. It expires 24 hours after our service receives it and is deleted automatically; deletion may finish later if cleanup is delayed. Replaced or deleted positions can remain in the database’s short version history for up to about an hour after replacement or deletion. These positions are kept out of backups and our logs. For rain timing, Rainbow receives only the precise point and our service key, never your name, account, phone number or device identity; we do not round the point Android supplies. Turning My location off stops location reads and reports on your phone immediately and asks our service to stop using and delete the stored position. Once our service receives the stop request, it revokes that tracking session, refuses later reports from it and retries any failed deletion until it succeeds. If the phone cannot reach us, it retries the stop request when connected; the 24-hour expiry still applies. Rain warnings for an old position stop after 15 minutes without a fresh position, so once you close or leave the app, warnings for where your phone was stop within about 15 minutes.

The map and Forecast’s place picker can also use a position once when you ask, without turning on My location. In a web browser, the pin-placing screen may start at your position if you have already allowed location. That position stays on your device unless you choose to save it as a location.

Customer details you save are your business’s records; we store them so you can see and use them. The Call, Message and Email buttons open your phone’s own apps with those details filled in, and Directions opens Google Maps at the pin. ohheymow does not place the call or send the message. If you are a customer of a business that uses ohheymow and want your details removed, ask that business, or email us.

Who else handles it

• Google (Firebase and Google Cloud). Runs our service, database and sign-in, and delivers notifications to your devices through Firebase Cloud Messaging. For security, fraud and abuse prevention, Firebase App Check confirms that requests to our service come from the genuine ohheymow app: on Android through Google Play’s integrity check of the app and the device, and in a web browser through reCAPTCHA, which uses information about the browser and how the page is used. Google handles this information on our behalf and under our instructions.
• U.S. Census Bureau. When you press Search address, our service sends the address you typed to the Census Bureau’s address search to find where it is on the map. Nothing else goes with it: no location name, notes or account details.
• National Weather Service. Our service sends the pin positions of your locations, and your latest phone position when My location is on, to the National Weather Service to get weather for those places. No names, addresses or customer details are sent.
• NOAA rain estimate (MRMS). Once an hour, to find how much rain has fallen at each location, our service reads the radar rain estimate of the National Oceanic and Atmospheric Administration (NOAA) from NOAA’s public files, which it downloads whole, so no location is sent. Only when an hour’s file cannot be read does it send the pin positions of your locations to the same estimate on the National Weather Service’s map service instead. No names, addresses or customer details are sent.
• Rainbow.ai. When minute-by-minute rain timing is switched on, our service sends Rainbow.ai the positions of your saved locations (latitude and longitude, rounded to about 11 metres), about every 10 minutes while rain is possible. For My location, we send the precise point Android supplies, without rounding. Rainbow supplies rain timing on our behalf and receives only the point and our service key, never your name, account, phone number, device identity or customer details.
• Paddle. Paddle.com, our online reseller, sells our paid plans as the merchant of record: it runs the checkout, takes the payment, handles sales tax, sends receipts and handles refunds. At checkout you give your name, email address, billing address and payment details to Paddle; Paddle collects them, not us, and handles them under Paddle’s privacy policy. To open a checkout, our service sends Paddle only the plan’s price and your account’s internal ID, so the purchase is linked to your account. Paddle tells our service your subscription’s status, its dates and its reference numbers (IDs), never your card number.
• Brevo. When you save a request in the app, our service emails it to us at hello@ohheymow.com through Brevo, an email delivery service: the request’s type, your message and answers, your business name and the location it is about, with your email address only if you said we may contact you. Brevo also delivers our service’s own alarm emails to us. Brevo sends these emails on our behalf.
• Map pictures. When the app shows a map, your device loads its pictures straight from the services that make them: the street map from OpenFreeMap, a free map service built from OpenStreetMap data; the National Weather Service radar picture, which the Map tab shows from the start, and the outlines of official warnings; the model estimate of rain to come, from Iowa State University’s copy of NOAA’s HRRR forecast model, when you play the radar loop past the latest radar picture; and U.S. Geological Survey aerial photos, which the pin screen shows from the start and the Map tab shows when you switch them on. Like any website, these services receive your device’s internet address and the area of the map being shown.

Rain total map. The map centre is sent to our own service to read a total. Our service reads NOAA’s public radar files and forecast file ranges on Amazon Web Services (noaa-mrms-pds.s3.amazonaws.com and noaa-hrrr-bdp-pds.s3.amazonaws.com). It sends only file names and byte ranges to these hosts, never your map centre, account or saved places.

Our data sources page lists the weather, map and address services the app uses, with each one’s owner and terms. Apart from the services above, we share your information only when the law requires it.

How long we keep it

• While your account is open, we keep your records so the app can show your history. Older forecast and warning details are trimmed automatically once nothing current depends on them.
• My location uses only the latest phone position, with a 24-hour expiry from receipt and automatic deletion afterward. Once our service receives a turn-off, phone-removal or account-deletion request, it stops using the position and retries any failed deletion. Cleanup can be delayed, but stopped or expired positions are no longer used. Replaced or deleted positions can remain in the database’s short version history for up to about an hour after replacement or deletion. These positions are excluded from backups. We retain a small record that the tracking session ended, without coordinates, so delayed reports or a restored backup cannot turn it back on.
• Signing out, or removing the last rain widget, stops the widget’s reads at once. The phone keeps that key, still encrypted, only until it can ask our service to remove the key’s scramble, usually within half an hour of being online, and then deletes it. When a phone is removed from your account’s device list, in Settings → Notifications or by Sign out other devices, its scramble is removed at once. A new key for the same installation replaces the old record, an eleventh installation removes the oldest, and deleting your account removes them all.
• When you delete your account in the app, your records are removed from our service straight away and your sign-in is removed shortly after. If you ask us by email instead, we finish deleting your account within 30 days of your request.
• Service logs are kept for 30 days.
• Emailed copies of help requests in hello@ohheymow.com are kept as support records, including after your account is deleted. We keep them as long as needed to handle your request and for our records. Andrew deletes them when done.
• Error and crash reports sent to our own service are kept for 30 days.
• Paddle’s messages about a subscription, with its status, dates and reference numbers but no name, address or card details, are kept for 90 days, to recognize a repeated message and to sort out a problem with a purchase.
• If you opened a checkout or bought a plan, the records that link it to your account stay after your account is deleted: Paddle’s reference number for each checkout, with the plan and the date, and a one-way code made from the purchase’s reference number, with your account’s internal ID and the date they were linked. They hold no name, email address or card details, and they stop a purchase being linked to another account. We keep them for as long as we run ohheymow. Paddle keeps its own record of the sale under its own policy.
• Minute-forecast accounting records stay after your account is deleted, because Rainbow.ai’s bill and our spending limits are checked against them. Each request’s record, and the audit lines written with it, are deleted automatically about 190 days after the request; a request whose cost is still being settled is kept until it is settled. The pacing record keeps only the last hour’s requests and a few days of totals, and the record itself is kept for as long as we run ohheymow. Older day-by-day copies of finished requests and their totals, from before these records were kept separately in October 2026, are also kept for as long as we run ohheymow.
• Share-link records, including the record that a friend’s week was earned, are deleted with the account they belong to. The daily counts of shares, openings and friends who joined hold no account details and are kept.
• Backup copies of our database are kept for 30 days, so deleted information can remain in a backup until that backup expires.
• After an account is deleted, we keep a minimal deletion record: the account’s internal IDs, the dates it was created and deleted, and which version of the deletion wording was shown. It holds no email address, business name, location or customer details, and it stops a restored backup from bringing the account back. We keep it for as long as we run ohheymow.
• If you claimed an invitation code, we keep the record that your account used it, and when, so the same code cannot be claimed twice. We keep it for as long as our tester program runs. When your account is deleted, the optional answers you gave with the code are removed too.

How we protect it

• The app talks to our service over encrypted connections.
• Your business’s records can be read only through your signed-in account. Devices cannot read our database directly; every request goes through our service, which checks who is asking.
• The app asks for your password again before it deletes your account or signs out your other devices.
• The app keeps a copy of your records on your device so it keeps working on a weak signal. Signing out clears it. After you delete your account, or use Sign out other devices under Account, each other device is refused when it next connects and clears its copy then. A lost phone’s copy cannot be erased while it stays offline.

No system is perfectly secure. If you think someone else has used your account, email us straight away.

Your choices

• See and change your records in the app.
• Export them: Settings → Account → Export my records downloads your business records and saved history as a structured text file.
• Delete your account: Settings → Account → Delete account, or Delete this account on the Confirm your email screen if you never confirmed your address. Our account deletion page explains what is removed and how to ask by email if you no longer have the app.
• Choose your notifications: under Settings → Notifications, choose which notices reach each device, set quiet hours and keep place names out of notification text. Official weather warnings can be switched off on the same page. Your phone’s settings can turn off ohheymow notifications entirely.

This website

Visiting this website

We do not run advertising analytics, visitor tracking or headline experiments on this website. Our hosting service processes connection information, such as your internet address and the pages requested, to deliver and protect the website. The charts on the home page use sample weather and sample addresses.

Emailing us

If you email Andrew, your email address and the information you send are used to respond to your message. Asking a question does not automatically subscribe you to marketing emails.

To ask about information you have shared through this website, request its deletion or stop personal email updates, email Andrew at hello@ohheymow.com. Records needed to honor your request or meet an applicable obligation may need to be retained.

Children

ohheymow is a business tool for adults. It is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

When we change this policy, we will post the new version here and update the effective date. We will update it before the app collects a new kind of information or uses a new outside service. If a change affects how we use information you have already given us, we will tell you in the app or by email before it takes effect.

Contact us

For questions about privacy or a request about your information, email hello@ohheymow.com. Andrew, who builds ohheymow, reads this inbox. For help using the app, see Support.