WowSky is an app for forecasting, photographing and sharing sunrises and sunsets. This policy explains what data WowSky processes, why, where it is stored and what your rights are. We collect as little as possible: your live location is never shown to anyone, published photos only show an area of about 1 km, and we do not track you or show ads.
1. Who is responsible
The controller of your personal data is eazy.studio s.r.o., Kraľovany 146, 027 51 Kraľovany, Slovakia, company ID (IČO) 53 315 057 ("we", "us"). Contact for anything about privacy: support@wowsky.app.
2. Summary
| What | Why | Stored | Linked to you |
|---|---|---|---|
| Account (sign-in provider ID, e-mail) | to sign you in | Supabase, EU (Frankfurt) | yes |
| Profile (@nickname, name, avatar, bio, what you follow) | your public profile | Supabase, EU | yes, public |
| Skies you share (photo, time, ~1 km area, place name, forecast score, caption) | the core of the app | Supabase, EU | yes, public or followers |
| Wows, follows, blocks, reports, notifications | community features and safety | Supabase, EU | yes |
| Device push token, language, time zone, notification settings | to send notifications you allowed | Supabase, EU | yes |
| Location while using the app | forecast for where you are, skies nearby | on your phone only (only a ~1 km point is ever sent with a shared photo) | no |
| Anonymous usage statistics | to improve the app's introduction | PostHog, EU | no |
3. Data we process in detail
3.1 Account and sign-in
You sign in with Sign in with Apple, Google or a one-time code sent by e-mail. We receive a unique account ID from the provider and your e-mail address (with Apple you may hide it – we then only see an Apple relay address). With Apple we also receive your name once, if you share it. Passwords are never used or stored. Login e-mails are sent through Resend (Resend Inc.) from the domain send.wowsky.app; Resend processes your e-mail address only to deliver the code. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) – providing the account you asked for.
3.2 Profile
Your @nickname, optional display name, avatar (a photo you choose or a colour), short bio, what you follow (sunsets / sunrises) and whether your profile is public or locked. The nickname, name and avatar of a public profile are visible to everyone, also on the web (wowsky.app/u/<nickname>). Legal basis: contract.
3.3 Skies (photos you share)
When you share a sky we store the photo in three sizes, the time it was taken, whether it is a sunrise or sunset, a rounded location – the centre of a cell of about 1 × 1 km, never the exact GPS point, the place name, the country, the time zone, the forecast score for that moment, your optional caption and who can see it (everyone / followers). Before upload the app re-encodes the photo, which removes all metadata (EXIF), including GPS coordinates, camera and device data. You can delete any sky at any time; the files are deleted with it. A public sky is visible to everyone in the app and on the web page wowsky.app/s/<id>; a followers-only sky only to people you accepted. Legal basis: contract.
3.4 Location
WowSky asks for location only while you use the app ("When In Use"). It is used on your phone to compute the forecast and the sun times and to name the area (reverse geocoding by Apple). We do not store your location on our servers, except the rounded ~1 km point attached to a sky you decide to share, and a coarse point (snapped to a ~5 km cell) when you open "Nearby" – it is used for that request only and not stored. Background location is never used. Legal basis: consent (Art. 6(1)(a) GDPR), given in iOS; you can withdraw it in iOS Settings at any time.
3.5 Camera and photos
The camera and your photo library are used only when you take or pick a photo to share, and – with add-only access – to save share cards to your photos. We do not scan your library.
3.6 Community and safety
We store wows (who gave a wow to which sky, how many taps), follows and follow requests, blocks (visible only to you), reports you send (reason, optional note) and in-app notifications (deleted after 90 days once read, 180 days at the latest). Reports are reviewed by us to keep the community safe; the reported person is not told who reported them. Captions and names are automatically checked against a list of prohibited words; matching content is held for review. Legal basis: contract and our legitimate interest in a safe community (Art. 6(1)(f) GDPR).
3.7 Notifications
Reminders about the sunrise/sunset are scheduled on your phone. For notifications from other people (wow, followers) we store your device's push token, app version, language, time zone and your notification settings, and send them through Apple Push Notification service. Legal basis: consent (iOS permission) and contract.
3.8 Weather and maps
To compute the forecast the app requests weather data for the coordinates of your place directly from Open-Meteo (open-meteo.com, Switzerland/EU) and MET Norway (api.met.no). These requests contain the coordinates but no account or device identifier. Maps, the globe and place names come from Apple Maps / MapKit.
3.9 Anonymous statistics
To learn how many people finish the introduction and whether they allow location and notifications, the app sends anonymous events (e.g. "location screen shown", "location allowed", "first sky shared") to PostHog (PostHog Inc., EU data centre in Frankfurt).
- No photos, location, place names, name, @nickname, e-mail or advertising identifiers are sent.
- Events are not linked to your account: the phone creates a random number used only for these statistics.
- IP addresses are not stored and no location is derived from them; no screen recording, no automatic tap capture.
- Data is kept for at most 12 months.
Legal basis: legitimate interest in improving the app (Art. 6(1)(f) GDPR). Because the data is not linked to you, there is no in-app switch; the random number disappears when you uninstall the app.
3.10 Server logs
Our hosting provider keeps technical logs (IP address, time, request) for security and debugging for a few days (at most 7 days on our plan). Legal basis: legitimate interest in running a secure service.
3.11 Tester feedback (TestFlight only)
Test versions distributed through TestFlight can send feedback with a screenshot when you shake the phone. App Store versions do not contain this feature. Feedback is kept until it is processed and is not deleted with the account (the link to the account is removed).
4. What we do not do
- No tracking across apps or websites, no advertising identifier (IDFA), no ads, no data brokers.
- We never sell or rent personal data.
- No automated decisions with legal effect; the prohibited-words check only holds content for human review.
5. Processors and transfers
| Processor | Purpose | Location |
|---|---|---|
| Supabase Inc. | database, authentication, file storage, server functions | EU – AWS eu-central-1 (Frankfurt) |
| Resend Inc. | sign-in e-mails, moderation alerts to us | USA (EU-US Data Privacy Framework / SCCs) |
| Zoho Corporation B.V. | e-mail support (sender address, message content and attachments) | EU (mail storage) |
| Netlify, Inc. | website hosting and content delivery | USA / global CDN (EU-US Data Privacy Framework / SCCs) |
| PostHog Inc. | anonymous statistics | EU (Frankfurt) |
| Apple Inc. | Sign in with Apple, push notifications, maps and geocoding, App Store | per Apple's privacy policy |
| Google LLC | Sign in with Google (only if you use it) | per Google's privacy policy |
| Open-Meteo, MET Norway | weather data (coordinates only) | Switzerland / Norway |
Where data leaves the EEA, it is protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep data
- Account, profile, skies, wows, follows, blocks: until you delete them or your account.
- Notifications: 90 days after they are read, 180 days at the latest.
- Reports: until reviewed and for up to 12 months after a decision, as evidence for repeat abuse; deleted with the reporter's account.
- Anonymous statistics: 12 months. Server logs: up to 7 days. Backups: up to 30 days.
7. Deleting your account
In the app: Profile → Settings → Delete account. This immediately deletes your account, profile, all your skies and their photo files, avatar, wows, follows, blocks, reports, notifications and push tokens. Data in backups disappears when the backups expire (at most 30 days). You can also ask us by e-mail.
8. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest, and to withdraw consent at any time. Write to support@wowsky.app; we answer within one month. You can also lodge a complaint with a supervisory authority – in Slovakia the Úrad na ochranu osobných údajov SR (dataprotection.gov.sk), in the Czech Republic ÚOOÚ (uoou.cz), or the authority where you live.
9. Children
WowSky is not intended for children under 13 (in the EU under the age of digital consent in your country, 16 in Slovakia without parental consent). We do not knowingly collect their data; if you believe a child has an account, write to us and we will delete it.
10. Changes
We will publish changes here and, if they are significant, tell you in the app before they apply.