Get the app
Sports Compare Tools Add a station Blog Get the app
Legal

Privacy Policy

Last updated: October 27, 2026

This is the privacy policy for WindUp ("WindUp", "we", "us"), published by Virtual Verse Studio. It covers the WindUp apps for iPhone and Android, the WindUp apps for Apple Watch and Wear OS watches, and this website, windup.live. It describes what data we collect, why, who can see it, and how long we keep it.

1. Data we collect

  • Account: If you sign in with Apple, Google or an email link, we keep your email address and the name your sign-in provides. If you use WindUp without signing in, we create a random guest account ID instead.
  • Alarms and preferences: Your wind alarms, forecast alerts, favourite stations and spots, units, notification settings and quiet hours, and the answers you give during setup (such as your sports, your goals and which watch you use).
  • Location: If you allow location access on your phone, we use an approximate position to show stations near you. It is used to answer that request and is not stored. Sessions you record contain your precise GPS track (see below).
  • Sessions you record: When you record on your watch, we store the session: your GPS track, speed, distance and time on the water, and each jump's height, airtime, distance, rotations and take-off and landing points, along with the motion-sensor readings used to measure them, the spot, and your watch model and app version.
  • Heart rate and energy: If you allow it, the watch app reads your heart rate and, where your watch provides it, energy burned, and stores them with the session. On Apple Watch these come through Apple Health, and WindUp can also save each ride to Apple Health as a workout. Your "How did it feel?" rating is stored too. We never send these numbers to analytics.
  • Profile: Your @handle, display name, profile and cover photos, bio, Instagram handle, home spot and country. You can also add your birth year and gender; they are only used to work out your heart-rate zones and are never shown to others.
  • Community: The riders you follow, your likes, comments and replies, the riders you block, the reports you send (with any note you add), and spots you suggest.
  • Purchases: Whether you have WindUp Pro and your purchase history, which we receive from Apple or Google through RevenueCat. Payment is handled by Apple or Google; we never see your card details.
  • Device and notifications: A random ID for each install, a push-notification token, your time zone and language, your app version, and device-integrity checks (Apple DeviceCheck and App Attest, Google Play Integrity, Firebase App Check). We use these to deliver alarms and notifications and to protect the service and its free offers from abuse.
  • Usage analytics: Product analytics via PostHog, covering both the app and this website: which screens and pages are opened, which features are used, errors, how quickly alarms are delivered, and your approximate location and device type derived from your IP address. In the app these events are linked to your WindUp account ID (or guest ID), not to your name or email. We do not record the text of your searches. We may occasionally ask a short question in the app; answers are stored with your analytics.
  • Session recordings: PostHog records how you use the app and windup.live (screens and pages opened, taps and clicks, scrolling and mouse movement) so we can find confusing or broken parts. In the app, all text, images and maps are masked in recordings. On the website, text you type into input fields is masked.
  • Crash reports: Sentry receives crash reports and samples of app performance, with technical details, your device model, operating system, app version and a random install ID.
  • Station owners: If you list a weather station on windup.live, we keep your email address, the station's details and location, and any contact details you add.
  • Messages: If you email us, we keep your message and address to reply.

2. What other riders can see

WindUp has a community, so some of your data is public. You control what is shared:

  • Sessions are public by default. You can make any session private in the app. A private session can only be opened by you and is hidden from your profile, leaderboards and shared links.
  • Public sessions show the sport, date and time, spot, stats, jumps and route, with the first and last part of the route trimmed. They appear on your profile and on leaderboards, and WindUp may suggest you to riders who ride at the same spots.
  • Your public profile shows your @handle, display name, photos, bio, Instagram handle, home spot, country, follower counts, totals from your public sessions and the badges you choose to show.
  • Comments, likes and follows are visible to other riders.
  • Never shown to others: your heart rate, energy, effort rating, birth year, gender, email address and Gusts balance.

If you block a rider, they can't follow you or see your sessions, and you won't see theirs. Making a session private later can't recall images or copies someone has already shared.

3. What we don't do

  • We do not sell your data to third parties.
  • We do not show third-party ads.
  • We do not track you across other companies' apps or websites, and we do not use your device's advertising identifier.

On Android, if you install WindUp from a link on windup.live, we connect that website visit to your app's analytics, so we can tell how many people who read the site go on to use the app. The website side uses a random ID; in the app, analytics are linked to your WindUp account ID as described above.

4. How we use the data

  • To run WindUp: deliver alarms and forecast alerts, show stations and forecasts, record and show your sessions, run the community features, provide WindUp Pro, and sync everything across your devices.
  • To email you: sign-in links, forecast alerts you've asked to get by email, and links to jump videos you create. We don't send marketing emails.
  • To send notifications about WindUp itself, such as wind at your spots, activity on your sessions, a reminder when you haven't opened the app for a while, or that a free Pro period is ending. You can turn notifications off in your phone's settings.
  • To keep WindUp safe: review reports, remove content and accounts that break our Terms, and prevent abuse.
  • To improve the product, using analytics, session recordings and crash reports.

5. Legal bases

If you are in the EU, the EEA or the UK, we rely on these legal bases:

  • Providing the service you asked for: your account, alarms, sessions, community features and purchases.
  • Our legitimate interests: analytics, session recordings, crash reports, security and abuse prevention, and notifications about WindUp. You can object to these by emailing us.
  • Your consent: location, heart rate and energy, notifications, camera and photo access, and connecting Strava. You give it in your phone or watch settings or in the app, and you can withdraw it there at any time.

6. Sharing you ask for

  • Strava: If you connect Strava (a WindUp Pro feature), we send the sessions you choose, or every session if you turn that on, to Strava, including your route and heart rate. We keep your Strava athlete ID, name, profile picture and the access tokens needed to upload. You can disconnect at any time; activities already on Strava stay there.
  • Instagram: When you share a story to Instagram, the image goes straight from your phone to Instagram. Our servers are not involved.
  • Files and images: GPX files, images, videos and session diagnostics you export go wherever you send them through your phone's share sheet.

7. Service providers

We use these companies to run WindUp. They process data on our behalf and under their own privacy policies:

  • Amazon Web Services: our servers, database, file storage and outgoing email (Amazon SES).
  • Google: Firebase for sign-in, push notifications and App Check; Google Sign-In; Google Maps; Google Play Integrity and Google Play billing; and the Wear OS connection between your watch and phone.
  • Apple: Sign in with Apple, push notifications, DeviceCheck and App Attest, and App Store purchases.
  • RevenueCat: manages WindUp Pro subscriptions.
  • PostHog: analytics, session recordings and in-app questions.
  • Sentry: crash and performance reports.
  • Strava and Instagram, only when you use them as described above.

We do not share your personal data with anyone else, unless the law requires it.

8. International transfers

Our servers are in the United States, and PostHog, Sentry and RevenueCat process data there too. If you use WindUp from outside the United States, your data is transferred there. Where the law requires it, we rely on the transfer safeguards our providers offer in their data-processing terms, such as the European Commission's Standard Contractual Clauses.

9. How long we keep data

  • Your account and sessions are kept until you delete them or delete your account. In the app you can delete any session, jump, comment, alarm or forecast alert.
  • Deleting your account (in the app, under Settings → Account & privacy) erases your sessions, profile, handle, photos, follows, likes, comments, reports, alarms, favourites, devices, forecast alerts and notification history, disconnects Strava and removes your sign-in. This normally finishes within minutes.
  • What stays after deletion: a minimal record of each deleted session (its ID, your account ID and a time), so it can't be uploaded again; and your analytics, which are kept for 90 days to understand why people leave and then erased. Deleting your account does not cancel a WindUp Pro subscription. Cancel it in the App Store or Google Play.
  • Server logs, including IP addresses, are kept for 30 days.
  • Jump videos you create are kept for 30 days.
  • Session recordings are deleted automatically after 30 days. Other analytics events are kept for up to 7 years, or until 90 days after you delete your account.
  • Backups: deleted data can stay in our server backups for a limited time before it is overwritten.

10. Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable format. In the app you can edit your profile, make sessions private, download a session as a GPX file and delete your account. For anything else, email support@windup.live. We aim to respond within 30 days. You can also complain to your local data protection authority.

11. Security

Data is encrypted in transit and at rest on our servers, and every request for another rider's data is checked against their privacy choices.

12. Children

WindUp is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has given us personal data, email us and we will delete it.

13. Changes to this policy

If we materially change this policy we'll update the "Last updated" date at the top and announce it in the app or on our website. Continued use of WindUp after changes counts as acceptance.

14. Contact

WindUp is published by Virtual Verse Studio. Email support@windup.live for any privacy questions.