WindSpark logo
WindSpark
Back to Home

Privacy Policy

Last Updated: 20.12.25
Effective Date: 20.12.25

WindSpark ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address
  • Name and surname (optional)
  • Display name/nickname
  • Country (optional)
  • Authentication credentials (managed securely through Supabase)
  • Profile information you choose to provide

1.2 User-Generated Content

We collect and store content you create and share through the Service, including:

  • Images, videos, and audio recordings
  • Text content and captions
  • Challenge submissions and results
  • Comments and reactions on content
  • Drafts of your work-in-progress

1.3 Social and Activity Data

  • Friendships and social connections
  • Participation in circles and social feeds
  • Challenge completion history
  • Points, badges, and achievements
  • Leaderboard rankings
  • Seasonal league participation

1.4 Device and Technical Information

  • Device identifiers and push notification tokens
  • Device type and operating system
  • App version and usage analytics
  • IP address and network information
  • Camera, microphone, and photo library access (with your permission)

1.5 Subscription and Purchase Information

  • Subscription tier and status
  • Purchase history and transaction data
  • Payment information (processed securely through third-party payment processors)

1.6 Communication Data

  • Support requests and feedback submissions
  • Email communications
  • In-app notifications and preferences

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Improve the Service

  • Deliver daily challenges and personalized content
  • Generate AI-powered challenge prompts and hints using Google Gemini
  • Enable social features, including circles, feeds, and friend connections
  • Process and store your creative submissions
  • Manage your account and subscription

2.2 Content Moderation and Safety

  • Automatically moderate user-generated content using SightEngine to detect inappropriate, harmful, or prohibited content
  • Review flagged content for community safety
  • Enforce our Terms of Service and community guidelines

2.3 Communication

  • Send push notifications about challenges, reminders, and updates (you can manage these in settings)
  • Respond to your support requests and feedback
  • Send important service-related communications

2.4 Analytics and Improvement

  • Analyze usage patterns to improve the Service
  • Develop new features and functionality
  • Monitor and prevent fraud, abuse, and security threats

2.5 Legal Compliance

  • Comply with applicable laws and regulations
  • Respond to legal requests and protect our rights
  • Enforce our agreements and policies

3. Third-Party Services and Data Sharing

We use trusted third-party services to operate the Service. These services have their own privacy policies:

3.1 Authentication and Database

Supabase: We use Supabase for user authentication and database storage. Your account information and user-generated content are stored on Supabase's secure infrastructure.

3.2 AI Services

  • Google Gemini: We use Google Gemini AI to generate challenge prompts and provide hints. Challenge parameters and preferences may be sent to Google Gemini to generate personalized content.
  • OpenAI: We may use OpenAI services for certain AI-powered features. Data sent to OpenAI is subject to their privacy policy.

3.3 Content Moderation

SightEngine: User-generated images and videos are automatically analyzed by SightEngine for content moderation purposes. This helps us maintain a safe community environment.

3.4 Subscription Management

Adapty: We use Adapty to manage subscriptions and in-app purchases. Subscription status and purchase information are shared with Adapty to process transactions and manage your subscription.

3.5 Email Services

Resend: We use Resend to send transactional and service-related emails.

3.6 Authentication Providers

  • Google Sign-In: If you choose to sign in with Google, your Google account information is processed according to Google's privacy policy.
  • Apple Sign-In: If you choose to sign in with Apple, your Apple account information is processed according to Apple's privacy policy.

3.7 Data Sharing Limitations

We do not sell your personal information. We only share your information:

  • With your explicit consent
  • To comply with legal obligations
  • To protect our rights and safety
  • With service providers who assist in operating the Service (under strict confidentiality agreements)
  • In connection with a business transfer (merger, acquisition, etc.)

4. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: Data is encrypted in transit using HTTPS/TLS and encrypted at rest
  • Authentication: Secure authentication through Supabase with JWT tokens
  • Access Controls: Limited access to personal information on a need-to-know basis
  • Regular Security Audits: We regularly review and update our security practices
  • Secure Storage: User-generated content is stored securely on Supabase's infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

5.1 Access and Correction

You can access and update most of your account information directly through the app settings. You can:

  • View and edit your profile information
  • Update your notification preferences
  • Manage your social connections

5.2 Content Control

  • You can delete individual challenge results and submissions at any time
  • You can set content to private or public
  • You can remove yourself from circles and social feeds

5.3 Account Deletion

You have the right to delete your account at any time. When you delete your account:

  • Your account information will be permanently deleted from our systems
  • Your user-generated content (images, videos, audio, text) will be deleted
  • Your social connections (friendships, circle memberships) will be removed
  • Your comments, reactions, and other interactions will be deleted
  • Your subscription information will be removed from Adapty
  • Your authentication account will be deleted from Supabase

Note: Some information may be retained for a limited time as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance). Deletion requests can be made through the app settings or by contacting us at sparksupport@gmail.com.

5.4 Push Notifications

You can manage push notification preferences in your device settings or within the app's notification settings.

5.5 Data Portability

You can request a copy of your data by contacting us at support@freeskycom.com. We will provide your data in a machine-readable format within 14 days of your request.

6. Children's Privacy

Our Service is not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at sparksupport@gmail.com. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

8. Data Retention

We retain your information for as long as necessary to:

  • Provide the Service to you
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements
  • Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

9. Cookies and Tracking Technologies

Our mobile app does not use traditional web cookies. However, we may use:

  • Local storage to remember your preferences
  • Device identifiers for analytics and security
  • Push notification tokens to deliver notifications

We do not use tracking technologies for advertising purposes or share your data with advertising networks.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy in the app
  • Updating the "Last Updated" date
  • Sending you a notification (for significant changes)

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, and disclose.
  • Right to Delete: You can request deletion of your personal information (subject to certain exceptions).
  • Right to Opt-Out: We do not sell personal information, so there is no opt-out mechanism required.
  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, please contact us at sparksupport@gmail.com.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right of Access: You can request access to your personal data.
  • Right to Rectification: You can request correction of inaccurate data.
  • Right to Erasure: You can request deletion of your personal data.
  • Right to Restrict Processing: You can request limitation of how we process your data.
  • Right to Data Portability: You can request transfer of your data to another service.
  • Right to Object: You can object to certain types of processing.
  • Right to Withdraw Consent: You can withdraw consent where processing is based on consent.

To exercise these rights, please contact us at sparksupport@gmail.com.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@freeskycom.com

Support: For account data access requests, or privacy concerns, please email us with "Privacy Request" in the subject line. We will respond to your request within 14 days.

14. Consent

By using WindSpark, you consent to our Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use our Service.

WindSpark Privacy Policy

Protecting your creativity and privacy