Privacy Policy

About this policy

Vendaval is an app that brings wind forecasts and live weather station readings to water wind sports such as kitesurfing, windsurfing, kitefoiling and wing foiling. This policy explains what personal data Vendaval collects when you use the app on iOS, Android or the web, how we use it, who we share it with, and the choices you have.

Data we collect

We only collect what the app needs to work:

• Email address. It identifies your account, is used to sign you in, and is used to send you account emails (such as verification and password reset codes) and the notification emails you turn on.
• Password. Only if you create an account with email and password. We never store it in plain text; our backend keeps only a hashed version.
• Sign in with Apple: your Apple account identifier, the email address Apple shares with us (which may be a private relay address), and your name, if you choose to share it the first time you sign in.
• Google Sign-In: your Google account identifier and email address, as included in the sign-in token Google issues to the app.
• Push notification token. On iOS only, and only if you turn on push notifications. It lets us deliver notifications to your device.
• Content you create in the app: the spots and stations you follow, and the events and notifications generated for them.
• App preferences: language, forecast hour range, whether to show station readings next to the forecast, and your email and push notification settings.

Vendaval does not access your device location, contacts, photos or camera, and the app contains no advertising, analytics or crash-reporting SDKs.

How we use your data

We use your data only to provide the app to you:

• To create and secure your account and to sign you in.
• To show forecasts for the spots you follow and to detect upcoming windy days for them.
• To send you the push and email notifications you have turned on.
• To remember your preferences across your devices.

What we do not do

We do not show ads, we do not track you across other apps or websites, and we do not sell or rent your data.

Third-party services

We rely on a few providers to run Vendaval. Each receives only the data it needs to perform its service:

• Apple: Sign in with Apple, and the Apple Push Notification service (APNs) to deliver push notifications to iOS devices.
• Google: Google Sign-In.
• Expo: the Expo push notification service, which relays push notifications to your device using your push token.
• Email delivery provider: sends account and notification emails to your email address.
• Hosting provider: stores your account data and runs the Vendaval backend.
• Weather data providers: the sources of the numerical weather model forecasts and live weather station readings shown in the app. We fetch this data from them; none of your personal data is shared with them.

Data retention and deletion

We keep your data for as long as your account exists.

You can delete your account at any time from the Profile tab in the app by tapping "Remove account". This permanently deletes your account and the data associated with it, including followed spots, events and push tokens.

You can also request the deletion of your account and data by emailing us at [email protected] from the address associated with your account.

Children's privacy

Vendaval is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

This website

This website does not use cookies, analytics or third-party trackers. Fonts are served from our own server. Our web server may keep standard access logs (such as IP address and requested page) for security and operations.

Changes to this policy

We may update this policy from time to time. When we do, we will publish the new version on this page and update the effective date above.

Contact

If you have any questions about this policy or your data, email us at [email protected].