🪂
Skydiving Winds
Last updated: April 2026
Privacy Policy
This Privacy Policy explains what personal data Skydiving Winds may process, why it is processed, which providers are involved, how long data is kept, and how users can exercise their rights.
Short version
- You can use parts of the app without creating an account.
- If you create an account, account, profile, jump log, favourites, settings and optional avatar data may be stored in Supabase-linked infrastructure so that your information is available across sessions and devices.
- If you allow location access, the app uses your coordinates to request weather and nearby dropzone information.
- If you allow notifications, a push token may be stored so alerts can be delivered.
- If you contact support or use the in-app feedback form, your message and limited technical context may be processed to answer you and improve the service.
- The app also uses crash/error reporting and technical logs to keep the service stable and secure.
What data may be processed
- Account and identity data: email address, name or alias, authentication identifiers, password reset metadata, and account status.
- Profile data: units, altitudes, wind limits, disciplines, level, license number, total jumps, phone, age, weight, nationality, notification preference, equipment information, avatar URL, favourite and home dropzones.
- Jump log data: jump date, dropzone, exit/opening altitude, jump type, equipment, canopy size, freefall time, conditions, notes, incidents, aircraft, instructor and optional wind snapshot.
- Location data: coordinates used to request weather/forecast and nearby dropzones when you give device permission.
- Photo/avatar data: if you choose a profile picture, the selected image may be uploaded and linked to your profile.
- Notification data: push token, platform and related preferences if notifications are enabled.
- Support and feedback data: subject, message, app version, platform and any information you voluntarily include.
- Diagnostics and security data: crash reports, error logs, app version/build, platform and limited technical telemetry needed to maintain the service.
Why the data is processed and legal bases
- To create and operate your account, sync your profile, favourites and jump log: performance of the service requested by you.
- To send password reset, sign-in and security-related emails: performance of the service and service security.
- To load weather, forecast and nearby dropzones: your request for that functionality; when location permission is used, the legal basis is your consent/permission at device level.
- To provide optional notifications: your consent/permission and your in-app preference.
- To host an optional avatar/profile image: your request and the permission you grant on your device.
- To answer support or feedback messages: performance of the service and legitimate interest in providing support and improving the app.
- To detect bugs, maintain security and prevent abuse: legitimate interest in operating a reliable and secure service.
Permissions, local storage and what stays on your device
The app may request access to location, photo library and notifications, depending on the features you use. You can control these permissions in your device settings.
The app also stores limited local data such as session-related information, anonymous preferences, cache and settings needed to keep the app working properly. Some authentication data may be stored using platform-provided secure storage and local storage mechanisms.
The app does not use third-party advertising SDKs or targeted advertising based on your behaviour inside the app.
Service providers and recipients
The app relies on external processors/service providers to operate. These may include:
- Supabase for authentication, database and related backend services.
- Open-Meteo for weather and forecast requests.
- Sentry for crash/error monitoring and diagnostics.
- Expo / Apple / Google notification infrastructure if push notifications are enabled.
- Email/support infrastructure used to send and receive account or support communications.
These providers process data on behalf of the service where applicable. They may also apply their own limited processing necessary to operate their infrastructure.
International transfers
Some providers may process or store data outside your country of residence or outside the European Economic Area. Where applicable, data transfers should rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or equivalent legal mechanisms offered by the provider.
Retention
- Account, profile, favourites and jump log: normally kept while your account remains active.
- Password reset and account security events: kept for the time reasonably necessary to operate and secure the account.
- Push tokens: kept while notifications remain enabled or until they stop working, are replaced, or the account is deleted.
- Support and feedback records: kept for the time needed to answer your request, follow up on issues and address possible legal or security liabilities.
- Crash/error diagnostics and technical logs: kept for a limited period according to the provider configuration and operational/security needs.
- Deleted account data: removed or anonymised as soon as reasonably possible, except where some data must be kept temporarily for security, fraud prevention, backup integrity or legal compliance.
If you need precise retention details for a specific category, contact legal@skydivewinds.com.
Your rights
Depending on the applicable law, you may have the right to access, rectify, erase, restrict, object to, or port your personal data, and to withdraw consent where processing is based on consent. You may also request help regarding account deletion and data export.
You can contact legal@skydivewinds.com. If you believe your data protection rights have been infringed, you may also lodge a complaint with the competent supervisory authority, including the Spanish Data Protection Agency (AEPD) if applicable.
Account deletion
The app includes an in-app path to delete your account. A web resource is also provided at Delete account for users who no longer have access to the app. Deleting an account is intended to remove the account and associated data that is no longer required to be kept.
Changes to this policy
This policy may be updated if the service changes, new providers are added, or legal requirements evolve. The latest version will be published on these legal pages with the updated date shown at the top.