Privacy policy
1. Controller
WindSurv is operated by Marco Richlitzki, Hobelgasse 11, 47178 Duisburg, Germany. Privacy enquiries: marco.richlitzki@gmail.com.
2. Accountless use
WindSurv does not require a conventional user account. The service creates random installation and customer identifiers and an installation token. These identifiers connect your watchlist, profiles, alerts, submissions and subscription status without requiring your name.
3. Data processed
Depending on the features you use, WindSurv processes platform and installation identifiers; watchlist entries; personal wind profiles and alert periods; push language, environment, device token and delivery state; purchase product, entitlement, environment and expiry information; and spot submissions including coordinates, visibility, comments, source URL and an optional contact email.
4. Location
Your current position is used on-device only after permission to sort nearby spots and position maps. It is not continuously tracked. A coordinate is transmitted when you deliberately select or submit a spot. Map requests may include the visible geographic bounds.
5. Purposes and legal bases
Data is processed to provide requested app functions and purchases (Art. 6(1)(b) GDPR), deliver optional notifications with your permission (Art. 6(1)(a)), protect and operate the service (Art. 6(1)(f)), and meet legal obligations (Art. 6(1)(c)).
6. Recipients
Infrastructure is provided by Railway. Apple processes App Store purchases and APNs notifications. RevenueCat processes purchase history and entitlement information. These providers may process data outside the EU under their applicable contractual safeguards and privacy terms.
7. Retention
Operational data is retained while required to provide the installation’s functions or until a justified deletion request is completed. Invalid push tokens are deactivated. Purchase and transaction records may be retained where required for contractual, tax, security or legal purposes. Canonical public spot information may remain after its submission provenance has been separated where legally permissible.
8. Logs and security
The hosting infrastructure may temporarily process IP address, request time, endpoint and technical error information to deliver and secure the service. WindSurv does not use advertising identifiers, advertising profiles or cross-app tracking.
9. Your rights
Subject to legal requirements, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent for future processing and complain to a competent supervisory authority. In North Rhine-Westphalia this is the State Commissioner for Data Protection and Freedom of Information NRW.
10. Requests
Contact us by email and include the installation ID shown in WindSurv Settings if you want us to identify installation-related data. Never send your installation token.
11. Changes
This policy may be updated when functionality, providers or legal requirements change. The current version is published here.
Purchases and analytics
RevenueCat uses purchase history and customer identifiers to validate and restore Pro access and provide internal purchase and subscription statistics. This supports service operations, not advertising or cross-app tracking. WindSurv does not receive bank details or card numbers.
Location, maps and sharing
With your permission, the app uses your position to centre the map and find nearby spots. The visible map bounds are sent to our server and may reveal your approximate region. If you select your current location when submitting a spot, its precise coordinates are stored with the submission. Apple provides maps through MapKit and processes map requests under its privacy policy. Shared card images are generated on your device. Only when you choose a destination app and recipients in the iOS share sheet are the image and invitation passed to that destination. Images may contain profile names and session details; the destination processes them under its own terms.
10. Delete installation data
Settings → Delete my data deletes the current installation’s watchlist, profiles, alerts, push registration, private submissions and associated delivery records. Approved public spots remain without the private submission history. Other installations are unaffected. A shared customer/purchase link remains only while needed by another installation. Otherwise the customer projection and RevenueCat customer data are removed. Apple subscriptions are not cancelled; manage them with Apple. Provider failures require a retry; the app retains credentials for that retry until deletion is confirmed.
11. Feedback diagnostics
Tapping Feedback opens your chosen email app with a draft containing app/iOS version, device model, language and a shortened installation identifier. You decide whether to send it. The email is processed to respond to your request and diagnose the issue; it is not sent automatically by WindSurv. Support and feedback emails are deleted when the request has been resolved.
12. Retention limits
Live installation data remains until deletion or another applicable retention reason ends. Deletion does not promise immediate erasure of independent Apple records, already-sent support email or infrastructure/security logs. Any legally necessary retention must have a specific purpose. Hosting log access windows do not establish a guaranteed physical deletion period.