Last updated: 6 September 2026
LookUpNow Aurora sends you a message when the northern lights are actually visible. This policy explains exactly what we store to do that, why, and how you get it deleted. It is short on purpose — we hold very little about you.
Send /delete to the bot. You confirm with one button, and your
record is permanently removed — no soft delete, no hidden copy. Details in
Your rights.
Data controller: Look Up Now (the operator of this service).
Contact: Telegram @blendo1234 — the same channel used for support and refunds, and the fastest way to reach a human.
When you send /start, we create a record containing:
| Data | Why |
|---|---|
| Your Telegram chat ID (a number) | So we know where to send an alert |
| Your first name, as Telegram gives it to us | To address you in messages |
| Your chosen region (Svalbard or Tromsø) | So you only get alerts for your area |
| First seen / last seen timestamps | To see whether the service is being used |
| A count of your interactions | Same — aggregate usage insight |
| Premium status, start and expiry date | To know whether you get instant alerts |
| Alerts received, and first/last alert time | To honour the "no alerts = refund" guarantee |
| Your display-style preference | To render your images the way you picked |
If you redeem a promotional code, we store which code was used, when, and by which chat ID. We also keep a rolling log of the last 1000 alerts we sent, each recording which chat IDs received it — this exists so a refund claim can be checked against what we actually sent.
We do not ask for and do not store your name beyond the Telegram first name, your email address, your phone number, your postal address, or your GPS location. "Region" is a two-option preference you pick yourself — it is not measured from your device.
The app registers a push token (the address Apple or Google uses to wake your phone) together with the platform (iOS/Android) and the region you want alerts for.
Push tokens are stored without any link to a Telegram account or to you — we cannot tell which token belongs to which person, and we do not try to.
Payments run through Stripe. Card numbers never reach our servers — we never see them. We send Stripe your Telegram chat ID so the payment can be matched to your account, and Stripe sends us back a confirmation. From a purchase we store only: that you are Premium, when it started, and when it expires. Stripe keeps its own records under its own privacy policy.
The images we send are of the sky. They come from two public scientific all-sky cameras that we do not own or operate — one run by UNIS in Svalbard and one run by UiT in Tromsø. They point straight up. They contain no information about you, they are not taken by your device, and they are not connected to your account.
lookupnow.io uses Plausible Analytics, self-hosted on our own server. It sets no cookies, stores no IP addresses, and does not track individuals across sites.
| Who | What they get | Where |
|---|---|---|
| Telegram | Everything you send the bot — they operate the chat itself | Outside the EU/EEA |
| Stripe | Your payment details and your chat ID as a reference | EU/US, GDPR-compliant |
| Google (Firebase) | Your push token, to deliver notifications | EU/US |
| Cloudflare | Website traffic, as CDN and DNS provider | Global |
| Hetzner | Hosts our server; the data physically sits there | Finland (EU) |
We do not sell your data, and we do not share it with advertisers. There are no advertising trackers in the app or the bot.
Honest answer: until you ask us to delete it. There is currently
no automatic expiry on account records — if you stop using the service, your record
stays until you use /delete.
Two exceptions:
Under GDPR you can:
Send /delete to the bot. You will be asked to confirm with a
button, and on confirmation we permanently remove your user record, strip your
ID from any redemption records, and remove you from the alert log. There is no
soft-delete and no hidden copy — the row is gone, and the alerts stop
immediately.
For access, correction, or a portable copy, message @blendo1234 and you will get an answer.
You also have the right to complain to the Danish Data Protection Agency (Datatilsynet) if you think we have handled your data wrongly.
The service is not aimed at children under 13 and we do not knowingly collect their data.
Data sits on a single server in Finland with encrypted transport (HTTPS/TLS) for everything in and out. Access is restricted to the operator. We store no passwords, because the service has no login of its own — Telegram handles identity.
If this policy changes materially, the change will be announced through the bot. The "last updated" date at the top always reflects the current version.