Privacy Policy

Last updated: 1 August 2026

Introduction

Wind Tracker is committed to protecting your privacy. This policy explains what data we collect, why, on what legal basis, how long we keep it and what your rights are. It complies with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

The data controller is Let's Kite, Switzerland, publisher of the Wind Tracker application (see our legal notice). The application and its data are hosted on our own servers in Switzerland.

Data we collect

Account and profile

  • Email, username, full name, profile picture, favourite sport
  • Your privacy settings and preferences (units, language, notifications)

Location

  • GPS positions recorded during your sessions, including while the app is in the background or the screen is off — this is required so your track isn't lost while you're on the water
  • Real-time position, only if you enable live sharing
  • Approximate position, only if you enable it, to show you nearby spots and weather stations
  • Tracking never starts on its own: it begins when you start a session and stops when you stop it

Session and performance data

  • Duration, distance, average and maximum speed, elevation, track, spot, sport, gear used
  • Detected jumps: height, airtime, distance, approach speed

Health data — special category (GDPR art. 9)

  • Average and maximum heart rate for a session, and calories, read from Apple Health (HealthKit) when you record with an Apple Watch
  • This data is collected only with your explicit authorisation, granted at system level (iOS) and revocable at any time in your phone's settings
  • It is used solely to display your effort statistics. It is never sold, used for advertising, or shared with third parties
  • If you decline this access, session recording works normally, without heart rate

Motion sensors (raw data)

  • To detect and measure your jumps, the app records your device's sensors at high frequency (about 100 samples per second): accelerometer, gyroscope, magnetometer, barometer, along with GPS position at 1 Hz
  • These readings are written to a compressed file, kept on your device and uploaded to our servers to improve the detection algorithm
  • This is technical motion data: it contains no audio, no images and no communication content
  • Only the 10 most recent captures are kept: beyond that, the oldest is deleted automatically, both on your device and on our servers

Content you publish

  • Session and weather photos and videos, weather reports, comments, posts, private and group messages, marketplace listings
  • Spots you create and enrich

Safety and emergency contacts

  • The details of the people you designate as emergency contacts (name, phone, email). These people are not necessarily users of the app: by saving them, you undertake to have informed them
  • If an SOS alert is triggered, your position and session information are sent to them, and to rescue services where applicable
  • The history of alerts and interventions is retained

Voluntary public sharing

  • If you create a live tracking link, your position, speed and track become visible to anyone holding the link, for as long as you choose. You can protect it with a password, restrict it or disable it at any time
  • A session preview image may be generated so the link displays properly on social networks

Technical data

  • Device type, operating system version, app version
  • Crash reports and diagnostics (Firebase Crashlytics)
  • Anonymised usage statistics (Firebase Analytics)
  • A notification token, to send you the alerts you subscribed to
  • A technical device identifier, used solely to prevent abusive resetting of the trial period

Purchases and linked accounts

  • Your subscription status and transaction identifier. We never receive or store your card details: payments are processed by Apple, Google or Stripe
  • If you connect Strava or Garmin, the corresponding access tokens and the activities imported or exported, according to what you authorise. You can disconnect these services at any time

Legal basis for each processing activity

  • Performance of the contract: account, recording and display of your sessions, subscriptions, the social features you use
  • Consent: health data, raw sensors, live and approximate location sharing, notifications, analytics. Each is revocable without losing the rest of the app
  • Legitimate interest: service security, fraud prevention, crash diagnostics, improvement of our algorithms
  • Vital interest: handling SOS alerts and notifying emergency contacts and rescue services
  • Legal obligation: retention of payment records

How we use your data

  • Provide the features: recording, statistics, history, maps and forecasts
  • Enable the social interactions you choose (profile, messages, groups, marketplace)
  • Send you the alerts and notifications you subscribed to
  • Provide the safety features (SOS, live tracking)
  • Improve our measurement algorithms — in particular jump detection, using sensor data
  • Understand app usage in order to improve it

We make no automated decisions producing legal effects concerning you, and we do not carry out advertising profiling.

Data sharing

We never sell your personal data. It may be shared with:

  • Other users: according to your privacy settings (public or private profile, public or private sessions) and to what you publish
  • Anyone holding a tracking link that you created yourself
  • Your emergency contacts and rescue services: in the event of an SOS alert
  • letskite.ch: if you enable real-time position sharing, to display your position on their map
  • Google (Firebase): push notifications, crash reports and usage statistics — processing that may involve a transfer outside Switzerland and the European Union, covered by Google's standard contractual clauses
  • Apple, Google and Stripe: payment and subscription processing
  • Strava and Garmin: only if you connect those accounts, and only within what you authorise
  • Authorities: only where required by law

Our weather and mapping providers (Open-Meteo, Météo-France, NOAA, OpenStreetMap, Mapbox) receive technical requests that may include a geographic area, never your identity.

Data security

We encrypt data in transit (HTTPS), store passwords as non-reversible hashes, and isolate data access with database-level security rules: each account can only reach its own data. Administrative access is restricted and logged. Raw capture files and session images are stored in private, non-publicly-listable areas.

Data retention

  • Account, sessions, content: for as long as your account exists
  • Raw sensor captures: only the 10 most recent, on your device and on our servers
  • Technical logs and crash reports: for a limited period, for diagnostic purposes
  • SOS alert and intervention history: retained even after account deletion, detached from your identity — these records have evidentiary value in rescue situations
  • Payment records: for the applicable statutory period

Your rights

Under the GDPR and the FADP, you may at any time:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data (right to erasure)
  • Request an export of your data (portability)
  • Object to processing based on our legitimate interest
  • Withdraw consent, without affecting processing carried out beforehand
  • Lodge a complaint with the competent data protection authority

To exercise these rights, contact us through the contact form in the app or at letskite.ch.

Deleting your account. This erases your account and your data: sessions and tracks, photos, messages, favourites, gear, alerts, emergency contacts, listings and sensor captures, on our servers as well as on your device. Two deliberate exceptions: the spots you created remain in the app because they belong to the community, and the moderation and rescue records are kept for their evidentiary value. In both cases they are detached from your identity. Deleting your account does not cancel a subscription purchased from Apple or Google: cancel it from your App Store or Google Play account.

Cookies and similar technologies

This website sets no tracking or advertising cookies. The app uses your device's local storage for your preferences and offline operation (session drafts, map cache), as well as Firebase Analytics for usage statistics.

Minimum age

The app is not intended for people under 16. If you become aware that an account was created by a child under 16 without the consent of their legal guardians, contact us and we will delete it.

Changes to this policy

We may update this policy. The last update date appears at the top of this page, and you will be informed of significant changes through the app.

Revision of 1 August 2026: added health data (heart rate via Apple Health), the raw motion sensors used for jump detection, emergency contacts and SOS alerts, public sharing via tracking links, purchases and Strava/Garmin accounts. Added the legal basis and retention period for each processing activity, and clarified what account deletion entails.

Contact

For any question about this policy or about your personal data, contact us through the contact form in the app or at our website letskite.ch.