Winter privacy policy.
Last updated ·
Winter lets members of a gliding club log their maintenance hours, usually on a shared iPad in the workshop, and sends them to the club’s zweef.app account. In short: Winter has no accounts, no tracking and no servers of its own. What it keeps stays on the device; what it sends goes only to your club’s zweef.app.
Who is responsible
Winter is made by Jelle Vandebeeck (fousa) in Edegem, Belgium, and is open source. The club that sets Winter up decides how it is used, and is responsible for its members’ data in zweef.app.
What stays on the device
Winter stores the following on the device it runs on, and nowhere else:
- the club’s members as zweef.app lists them: first name, last name and member number;
- the club’s material (aircraft, vehicles, other projects) as zweef.app lists it;
- the timers and hours: who worked, when they started and stopped, what they worked on and an optional comment;
- the club’s settings: its name, its zweef.app address, the closing time, and a logo if one is chosen from Photos (only that one picture is read);
- the club’s zweef.app API key and the settings code, in the iOS Keychain; the code only as a salted hash.
What is sent, and where
Winter talks only to the club’s own zweef.app account (admin.gliding.app, run by GlidingApp), over an encrypted connection and with the club’s API key. It fetches the members, the material and the club’s name. When someone taps “Upload”, it sends each finished session: the member’s number and name, the date, the hours, what was worked on, and a description with the start and stop time and the comment.
From then on that data is in zweef.app, where the club’s board checks it, and zweef.app’s own privacy policy applies. Nothing is sent to me or to anyone else.
What Winter does not do
- no accounts or logins;
- no analytics, advertising or tracking, and no third-party code;
- no access to location, contacts, the camera or the microphone;
- no selling or sharing of data.
Crash reports
If you allow iOS to share analytics with app developers, Apple may send me anonymous crash reports. Apple handles these under its own privacy policy; they contain no names or hours.
The demo
“Try with a sample club” shows a fictional club. Its members and hours exist only in memory while the demo is open; nothing is saved or sent.
How long, and removing it
The hours stay on the device after they are uploaded, so the sync screen can show what was sent. Deleting the app removes everything it stored, except the API key and the settings code, which iOS keeps in the Keychain until the device is erased or the app is set up again. Hours already in zweef.app can be changed or removed by the club’s board; ask them.
Changes and questions
When the app changes what it does with data, this page changes with it; the date at the top shows the last change. Questions are welcome by email.