It could be true, but the more I look into it, the more I feel like it's not very genuine. For example, https://xonaly.com/privacy-policy/ has a very strong no third party claim, yet the actual xonaly.com homepage calls the Open-Meteo API for weather data from the user browser.