Privacy

Who is responsible

Tobias Meier, WingFoil Daily (WFD), Berg 41, 6840 Götzis, Austria. Email: hello@wingfoildaily.com. We are the controller under the EU General Data Protection Regulation (GDPR) and Austrian data protection law.

Without an account

You can look around, search, scan and see your % Match without an account.

• My riding (sports, level, style, water, weight, usual wind) stays on your phone. We use it only to work out your % Match.
• Camera and photos: we only ask for the camera or your photo library when you choose to scan gear.
• Scans: when you scan gear, the photo is sent to our server to read which gear it is. Our server asks Anthropic's Claude service to read it. The photo is not kept after that, unless you turn on "Help improve the scanner". For each scan we keep the time, the result and a random number for your phone (not linked to you), to limit scans to 50 a day and to count which gear is scanned most. When you tap the gear you scanned, we keep that answer with the scan, to find where the scanner mixes gear up. It is not linked to you or your account. With no connection, the photo waits on your phone, in the app only, until it can be sent, and is deleted right after its scan. You can delete a waiting scan in My Gear → Recent scans.
• AI: scan photos are sent to Anthropic to read the gear. Anthropic's commercial terms say it may not train its models on what we send it.

With an account

You need an account to save gear, follow brands, like gear and write reviews. Then we keep:

• Your sign-in: your email address and how you signed in (Google, Apple or an email link). We never see your Google or Apple password. With Apple you can hide your email address.
• Your name, only if you add one. It shows with a review only if you choose that.
• My riding, saved gear (Setup, Gear I had and Wishlist), the brands and riders you follow, your likes and your recent scans(the gear you picked, never the photo), so they are the same on all your devices.
• Help improve the scanner (off unless you turn it on, in Profile): we keep your scan photos with the gear you confirmed, to test and improve the scanner. Only the WFD team sees them. They are never shown to other riders or partners and never used for advertising. They are stored on our database provider's servers (Supabase, EU). Turn it off at any time: from then on no photo is kept. Your photos are deleted when you delete your account, or earlier if you ask us at hello@wingfoildaily.com. Please don't scan photos that show other people.
• Your reviews. Reviews are anonymous to other riders. We know which account wrote a review, so we can stop misuse and keep one review per version of a product per account.
• When you accepted the terms, and which version.

Why: to give you the account you asked for (GDPR Art. 6(1)(b)).

Public profile

Your profile is private. It becomes public only if you turn on "Public profile" in Profile. This is off until you turn it on, and it needs a name.

When it is on, other WFD users can find you by your name and see your name, your sports and level, the gear in your Setup, the brands you follow and the reviews you post with your name. They can follow you. They never see your weight, your wind, your Wishlist, your scans or your email address.

To stop, turn the same switch off. Your profile is then hidden straight away, from search and from the lists of riders who follow you. Deleting your account also deletes your public profile and every follow by you and of you.

Why: because you chose to show it (GDPR Art. 6(1)(a)). You can change your mind at any time with the switch.

Reports and blocks

If you report a review or a profile, we keep your report: the reason, your note, your account and when. We email it to info@wingfoildaily.com without your email address. The rider you reported never sees who reported them. After 2 reports from different riders, the review or profile is hidden until we check it.

If you block a rider, we keep who you blocked, so their reviews and profile stay hidden for you. They aren't told. When we act on a report, we keep a short note of what we did and when, without names.

Why: to keep the community safe (legitimate interest, GDPR Art. 6(1)(f)). Your reports and blocks are deleted with your account; our notes then no longer name you.

Early access

When you sign up for early access on our website, we keep your email address, your phone type (iPhone or Android) and, if you give them, your sport and level. We use them only to give you early access to WFD and to send you what you need for it.

We send one email to confirm your address. It counts only after you tap the link in it. If you don't, we delete it after 30 days. We keep the list until 3 months after the app is in the stores, then delete it. To leave earlier, write to hello@wingfoildaily.com.

Why: because you asked to join (your consent, GDPR Art. 6(1)(a)). You can withdraw it at any time. The list is stored with Supabase in the EU (Ireland), and only the WFD team sees it.

Contact forms

When a brand or a shop writes to us through our website, we keep the name, the brand or shop, the email address and the message, and email them to info@wingfoildaily.com. We use them only to answer and to work together. We delete them 2 years after our last contact, unless they become part of a contract.

Why: to answer your request (GDPR Art. 6(1)(b), steps before a contract, and Art. 6(1)(f), our interest in answering you).

Our website

Our website sets no cookies and stores nothing on your device. It counts page views, early access sign-ups and contact messages with PostHog, stored in the EU (Germany): the page address and the time, with a random number that is forgotten when you close the page. Never your name, your email or your IP address.

To stop spam, when you send a form we keep a scrambled code made from your IP address (never the address itself) for 24 hours, so one sender can send only a few times an hour. Why: to keep the forms free of spam (our legitimate interest, GDPR Art. 6(1)(f)).

Our host, Vercel, keeps short technical logs (such as IP addresses) to deliver the pages and keep them safe. Why: to see which pages help riders and partners, and to run the website (our legitimate interest, GDPR Art. 6(1)(f)).

Emails

We send sign-in links by email, from hello@wingfoildaily.com. If we remove your review or your public name after reports, we send you one short email saying why. If you sign up for early access, we email you about early access. They are sent through our mail provider, ALL-INKL.COM (Germany). We don't send newsletters.

Crash reports

When the app or the website crashes, a report goes to Sentry (Functional Software, Inc.), stored in the EU (Germany). Reports hold technical details only: what went wrong, the app version and the phone model. We remove names, email addresses and IP addresses before they are stored, and reports are not linked to your account.

Why: to fix errors and keep WFD safe (our legitimate interest, GDPR Art. 6(1)(f)).

Anonymous usage

The app counts a few steps, such as "app opened", "scan started" or "gear saved", so we know what helps riders. This goes to PostHog, stored in the EU (Germany). It uses a random number for your phone, never your account, name or email, and PostHog doesn't store your IP address. There are no screen recordings.

You can turn it off at any time: Profile → "Share anonymous usage". From then on nothing is sent. Why: to improve WFD (our legitimate interest, GDPR Art. 6(1)(f)).

Shops and links

When you tap a link to a shop, the shop may see that you came from WFD. Some links are affiliate links: WFD may earn a fee if you buy. This never changes ratings, % Match or the order of reviews. What you do on a shop's website is covered by that shop's own privacy policy.

Where your data is kept

• Accounts, saved gear and reviews: Supabase, in the EU (Ireland).
• The website: Vercel. Early access sign-ups, messages from the contact forms and the spam codes: Supabase, in the EU (Ireland).
• Visit counts on the website: PostHog, in the EU (Germany).
• Sign-in: Google or Apple, if you choose them.
• Reading scans: Anthropic (USA).

Where a service is outside the EU, it is covered by the EU's standard contract clauses or the EU–US Data Privacy Framework. All of them work for us under contract and may not use your data for anything else.

How long we keep it

Your account and everything in it are kept until you delete your account. Crash reports are deleted after 30 days, anonymous usage counts and the website's visit counts after 12 months, the website's spam codes after 24 hours. Scan photos you chose to share: until you delete your account or ask us to delete them. Backups are overwritten in turn, so deleted data leaves them within a few weeks.

Delete your account

In the app: Profile → Delete account. This deletes your profile, saved gear, likes, follows and reviews at once, and the scan photos you chose to share. Or email hello@wingfoildaily.com from the address you signed in with. See also Delete your account.

Your rights

You can ask us what we keep about you, have it corrected or deleted, get a copy, limit how we use it, or object to it. Write to hello@wingfoildaily.com; we answer within one month.

You can also complain to the Austrian data protection authority, the Datenschutzbehörde (dsb.gv.at).

Children

WFD is for riders aged 16 and older. We don't knowingly keep data of younger children.

Changes

If this policy changes in a way that matters, we tell you in the app before it applies.