Last updated: 24 October 2026
LookUpNow Aurora sends you a message when the northern lights are actually visible. This policy explains exactly what we store to do that, why, and how you get it deleted. It is short on purpose — we hold very little about you.
Send /delete to the bot. You confirm with one button, and your
record is permanently removed — no soft delete, no hidden copy. Details in
Your rights.
Data controller: Look Up Now (the operator of this service).
Contact: [email protected] — the same address used for support and refunds.
When you send /start, we create a record containing:
| Data | Why |
|---|---|
| Your Telegram chat ID (a number) | So we know where to send an alert |
| Your first name, as Telegram gives it to us | To address you in messages |
| Your chosen region (Svalbard or Tromsø) | So you only get alerts for your area |
| First seen / last seen timestamps | To see whether the service is being used |
| A count of your interactions | Same — aggregate usage insight |
| Premium status, start and expiry date | To know whether you get instant alerts |
| Alerts received, and first/last alert time | To honour the "no alerts = refund" guarantee |
| Your display-style preference | To render your images the way you picked |
If you redeem a promotional code, we store which code was used, when, and by which chat ID. We also keep a rolling log of the last 1000 alerts we sent, each recording which chat IDs received it — this exists so a refund claim can be checked against what we actually sent.
We do not ask for and do not store your name beyond the Telegram first name, your email address, your phone number, your postal address, or your GPS location. "Region" is a two-option preference you pick yourself — it is not measured from your device.
The app registers a push token (the address Apple or Google uses to wake your phone) together with the platform (iOS/Android) and the region you want alerts for.
Push tokens are stored without any link to a Telegram account or to you — we cannot tell which token belongs to which person, and we do not try to.
The server gives the app a random device ID. The app uses it only to look up its own alert settings and whether it has an active pass. It is not your phone's hardware ID and is not linked to you.
Passes are sold only inside the app. Payments are processed by Apple (App Store In-App Purchase) and, once the Android app is out, by Google (Google Play). Card numbers never reach us — we never see them. Apple or Google sends us a purchase receipt (transaction ID, product and expiry date), which we use only to unlock alerts for your device. Apple and Google keep their own records under their own privacy policies.
Earlier purchases made on the website were processed by Stripe. We keep those payment records for as long as the law requires, and no longer.
lookupnow.io uses Plausible Analytics, self-hosted on our own server. It sets no cookies, stores no IP addresses, and does not track individuals across sites.
| Who | What they get | Where |
|---|---|---|
| Telegram | Everything you send the bot — they operate the chat itself | Outside the EU/EEA |
| Apple (App Store) / Google (Google Play) | Your payment details — they process in-app purchases and send us a receipt | EU/US |
| Stripe | Records of earlier website purchases only, kept as required by law | EU/US, GDPR-compliant |
| Google (Firebase) | Your push token, to deliver notifications | EU/US |
| Cloudflare | Website traffic, as CDN and DNS provider | Global |
| Hetzner | Hosts our server; the data physically sits there | Finland (EU) |
We do not sell your data, and we do not share it with advertisers. There are no advertising trackers in the app or the bot.
Honest answer: until you ask us to delete it. There is currently
no automatic expiry on account records — if you stop using the service, your record
stays until you use /delete.
One exception:
Under GDPR you can:
Send /delete to the bot. You will be asked to confirm with a
button, and on confirmation we permanently remove your user record, strip your
ID from any redemption records, and remove you from the alert log. There is no
soft-delete and no hidden copy — the row is gone, and the alerts stop
immediately.
For access, correction, or a portable copy, email [email protected] and you will get an answer.
You also have the right to complain to the Danish Data Protection Agency (Datatilsynet) if you think we have handled your data wrongly.
The service is not aimed at children under 13 and we do not knowingly collect their data.
Data sits on a single server in Finland with encrypted transport (HTTPS/TLS) for everything in and out. Access is restricted to the operator. We store no passwords, because the service has no login of its own — Telegram handles identity.
If this policy changes materially, the change will be announced through the bot. The "last updated" date at the top always reflects the current version.