Privacy policy
ALTO/WIND (the “Wind” app on iPhone) shows live wind, cameras and forecasts for kitesurfing spots. To do that we keep as little data as we can. This page explains, in plain language, what it is, what it is for, who it is shared with and how you delete it all. With an Apple Watch, the app also records your sessions on the water. It covers the app (on iPhone and Apple Watch) and the wind.alto.surf website.
01Who looks after your data
ALTO/WIND is run by E-DEW, LLC, a company incorporated in the State of Delaware, United States, with its address at 1111 South Governors Avenue, 39424, Dover, DE 19904. We are the controller of your data under Brazil's General Data Protection Law (the LGPD).
For anything about your data, including reaching the person in charge of data protection, write to [email protected].
02What we keep and why
You need an account to use the app. Today you sign in with Google; once Sign in with Apple is available, you will be able to use it too.
| What we keep | Why |
|---|---|
| Account identity: which service you signed in with (Google or Apple), the identifier it gives us and your e-mail, when it is provided. With Apple you can hide your e-mail; we then receive a relay address. We also keep the name that comes from your Google or Apple account (Apple only sends it on the first sign-in), when the account was created and the last time you used the app. | Create and recognize your account, and show who is signed in on the Account screen. |
| Your preferences: wind unit, language, weight and when you finished the first-run screen. | Show the wind in the unit and language you chose. Your weight is used only to suggest a kite size. |
| Your favorites: the spots you starred, their order and when you starred them. | Build your list and keep it the same on all your devices. |
| Sign-in sessions: when you signed in, when the session was last used, the type of device (iPhone), when and why the session ended, and scrambled codes (SHA-256 hashes) that keep you signed in. Your Google or Apple password never goes through us. | Keep you signed in, let you sign out and notice if an access code was copied. |
| Apple Watch sessions (Sessions tab): for each session you record on the watch, the GPS track (position, time, speed and accuracy of each point), the start, the end, the time paused and the laps, and what we compute from them (distance, top and average speeds, best marks and the spot nearest the start). Also the average and maximum heart rate and the calories of the workout the watch recorded. | Show your sessions, the track on a map, your best marks and the year's totals, and keep them the same on all your devices. |
| Only if you sign in with Apple, when Apple provides it: an access token issued by Apple. | Ask Apple to revoke ALTO/WIND's access when you delete your account. |
| Hourly usage counters: of attempts to sign in and to renew access, tied to a scrambled code (SHA-256 hash) of the IP address, never to the IP itself; and of wind and camera lookups, tied to your account's internal number. | Keep fair usage limits and protect the service from abuse. |
| Technical logs, at Vercel: IP address, date and time, the route accessed and error codes, without the content of what you send. When something fails, the log may include technical details of the failure. | Security and troubleshooting. |
The app also keeps on your iPhone what it needs to work: the codes that keep you signed in, in the Keychain (iOS's secure vault), and, in the app's storage, a copy of your account (name, e-mail, preferences and favorites) and changes that have not reached the server yet. Signing out or deleting the account removes these from the device. Each Apple Watch session is kept on the watch and then on the iPhone only until it reaches our server. The device's display settings (unit, language, weight, the last spot opened in Forecast and the last pair in Compare) stay on the iPhone, not tied to any account, until you delete the app.
03Your location and what we don't keep
On iPhone, the app asks for your location only on the first-run screen, and only while you use the app. If you allow it, it is used on your iPhone itself to list the spots closest to you first. That location is not sent to our server and is not stored. If you decline, the app shows the windiest spots instead, and everything keeps working.
On Apple Watch, the app uses the watch's GPS only during a session you start, and only while it lasts. That session's track goes from the watch to the iPhone and from there to our server, tied to your account, so it shows in the Sessions tab. Outside sessions, no location leaves your devices.
Apple Health: the watch app saves each session as a workout in the Health app (with heart rate, energy and the route). From Health, only each session's average and maximum heart rate and calories reach us. We don't use this data for advertising and we don't sell it. The iPhone app only uses Health when you tap “Save to Health” on a session's screen: it writes that session as a workout, with the route, and reads your workouts only to avoid saving the same session twice. Nothing it reads from Health is sent to us. The workout saved in Health is yours: deleting a session or the account in ALTO/WIND does not delete it from Health.
- We don't sell data and we don't show ads.
- The app uses no analytics or tracking tools, and sends no data to ad services.
- The wind.alto.surf website sets no cookies and stores nothing in your browser.
- Searching for spots happens on the device: what you type is not sent.
- The app does not access your contacts, your photos or your iPhone's camera.
- There are no payments in the app: we receive no card data.
04Who we share it with
To work, ALTO/WIND uses the services of these companies, which process data on our behalf, confirm your identity or supply the wind data:
| Who | What they do |
|---|---|
| Vercel | Hosts the website and the app's server, and keeps the technical logs. |
| Railway | Runs the database that holds your account, preferences, favorites, sign-in sessions and Apple Watch sessions (United States). |
| Google and Apple (sign-in) | Confirm who you are when you sign in. They learn that you use ALTO/WIND; we receive your identifier, your name and, when provided, your e-mail. |
| Wind data provider | Supplies the wind, forecast, tide and camera data. Our server fetches that data with our own credential and sends nothing about you. But when you open a camera, the video is loaded by your iPhone directly from that provider's camera servers, which see your IP address. Spot photos are also loaded by your iPhone directly from where it hosts them (Google Cloud Storage). |
| Apple (maps) | The map in the Explore tab and the map of each session's track are Apple's maps: your iPhone requests the map images from Apple. |
Some of these companies are based outside Brazil and process data in other countries, such as the United States, where our database is. This is an international data transfer, made under the safeguards each of them offers by contract.
Other than that, we only hand data to third parties when the law or a court order requires it.
05Why we may process this data
- To make the app work for you (performance of a contract, LGPD art. 7, V): account, sign-in sessions, preferences, favorites, the track and numbers of your Apple Watch sessions and the Apple token used to revoke access.
- Heart rate and calories are health data, sensitive data under the LGPD. We process them only with your consent (art. 11, I), which you give by allowing Health access on the Apple Watch and can withdraw at any time in Health's privacy settings. Sessions that already reached us you delete in the app.
- Legitimate interest and legal compliance (art. 7, IX and II): technical security logs and usage counters.
- Your iPhone's location is not on this list because it never reaches us.
06How long we keep it
| Data | Kept for |
|---|---|
| Account, preferences and favorites | Until you delete your account. |
| Apple Watch sessions | Until you delete the session (“Delete session”, on the session screen) or the account. The workout saved in Apple Health stays there: it is yours and we don't delete it. |
| Sign-in sessions | Valid until you sign out, or up to 90 days without use. Each session's record stays until the account is deleted, when they all go at once. |
| Apple access token | Until the account is deleted, when we ask Apple to revoke it. |
| Usage counters | Up to 30 days; then they are deleted. Counters tied to an account are not deleted with it: they hold only the account's internal number, which no longer points to anyone, and go within the same period. |
| Technical logs | Up to 30 days. |
| Database backups | Up to 6 days after deletion. After that they disappear on their own. |
We do not automatically delete idle accounts.
07Your rights
The LGPD gives you the right to: know whether we process your data and access it; correct what is wrong; ask for deletion; ask for a copy to take to another service; know who we share it with; withdraw consent; and complain to Brazil's National Data Protection Authority (ANPD).
In the app, you change your preferences and favorites and delete your account yourself. Your name and e-mail come from Google or Apple. For any other request, write to [email protected]. We answer within 15 days. Before acting on it, we may ask you to confirm the account is yours.
08How to delete your account
In the app, open Account (the settings icon at the top of the Favorites tab), tap “Delete account” and confirm with “Delete”. We immediately delete your account, preferences, favorites, Apple Watch sessions and every sign-in session and access code, and your devices are signed out. Workouts saved in Apple Health stay in Health. If you signed in with Apple and we hold the token Apple issues for this, we ask Apple to revoke ALTO/WIND's access. The app removes from the device what it kept about the account, including its sessions still waiting to be sent. Deletion cannot be undone.
Can't open the app? See how to delete your account and your data.
09Children and teenagers
ALTO/WIND is not aimed at children. You must be at least 13 to have an account, and anyone under 18 should use the app with a parent's or guardian's knowledge. We do not knowingly collect data from children under 13. If you believe a child created an account, write to [email protected] and we will delete it.
10Security
Traffic between the app and our server is always encrypted, and so is the connection between our server and the database, with the database's certificate checked. The codes that keep you signed in are stored on the server only as hashes and, on your iPhone, in the Keychain. Each person can access only their own data.
Camera video comes straight from the camera provider's servers, and it is not always encrypted.
No system is perfect. If an incident happens that could put you at risk, we will tell you and the ANPD.
11Changes to this policy
When this policy changes, we publish the new version on this page, with the new date. If the change is significant, we also let you know in the app before it takes effect.
Questions or requests about your data: [email protected]
Version 2026-10-v2, in force from October 16, 2026.