Keli is an Android app of weather tools for Finland, published by Pasi Paavola under the developer name pasimus. This policy says what the app sends over the network, who receives it and what stays on your phone.
| When | What is sent | Who receives it |
|---|---|---|
| You type in a place field | The text you typed | Keli's server at Cloudflare, which passes the text on to Digitransit's geocoding service (HSL, Helsinki Region Transport). Digitransit does not receive your IP address. |
| You tap the map, or a route is shown | Coordinates of the tapped point and of points along the route, to find their place names | The same as above. Answers are stored at Cloudflare for a week by map cell of about 200 m, not by who asked. |
| You search for a route | Coordinates of the start, the destination and any stops | Keli's server at Cloudflare, which passes them to Keli's own routing server, hosted by UpCloud (a Finnish hosting company). If that server is down, they go to the public OSRM demo server (FOSSGIS e.V., Germany) instead. Neither receives your IP address. |
| A map is shown | Which map tiles the view needs | Keli's map server at Cloudflare. |
| Weather is fetched | Coordinates of points along your route and the times asked about, or a whole region for the 3D weather and snow maps | The Finnish Meteorological Institute's open data service, directly from your phone. |
| Road weather and road cameras are fetched | The area your route covers, and which camera's photos you open | Fintraffic's Digitraffic service, directly from your phone. |
Every service your phone contacts directly sees its IP address: Cloudflare, the Finnish Meteorological Institute and Fintraffic. Each handles it under its own privacy policy.
Keli's servers run on Cloudflare (Cloudflare, Inc.), which processes the IP address to deliver the answer and to protect the service. Keli uses it for one thing: counting requests per address over one minute, to stop abuse. Keli does not log requests on Cloudflare and keeps no list of IP addresses.
Keli's own routing server keeps no record of the route requests it answers.
This data never leaves the phone. Clearing the app's storage in Android settings, or uninstalling the app, deletes all of it.
pasimus does not sell data and does not share it with anyone except the services listed above, which need it to answer the request.
Where this information counts as personal data under the EU General Data Protection Regulation, it is processed on the basis of legitimate interest: providing the service you asked for and protecting it from abuse. Some of the services above may process data outside the EU under their own safeguards.
You have the right to ask what data about you is held, and to have it corrected or deleted. pasimus holds no data it can connect to you, so there is normally nothing to hand over or delete beyond what is on your phone. You may also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Keli is not directed at children and collects nothing that would identify one.
If the app starts handling data differently, this page is updated and its date changes.
Pasi Paavola (pasimus) · privacy@pasimus.com