Wind On logs the frames you shoot on film and writes the metadata into your photos. It runs on your iPhone and Apple Watch. There is no account, no server holding your data, and no analytics. This page says exactly what the app touches and what leaves your devices.
Everything the app records lives on your iPhone and Apple Watch:
The watch and the phone exchange this data directly over Apple's WatchConnectivity, between your own two devices. It is not sent to me or to anyone else. Scans are kept out of iCloud backup on purpose; the rest is covered by whatever device backup you have set up with Apple.
If you grant location access, each frame you log is stamped with where you were standing at that moment. The app only reads location while you use it, and it never waits for a fix: with no fix available it logs the frame without one. Locations are stored with the frame on your devices and are written into a photo only when you choose to match a scan and write it to Photos. You can turn location off at any time in Settings.
If you grant Photos access, the app adds your matched scans to your library and files them into a "Wind On" album folder. It sets the date, location, camera and lens on those photos. It updates them in place when you edit a frame later. It does not read, upload or analyse any other photo in your library.
The app has a feedback form for bugs and ideas. When you press Send, the text you typed goes over HTTPS to a small server I run on Cloudflare, which files it as an issue in the app's private GitHub repository so I can act on it.
A diagnostics toggle on that form is off by default. If you turn it on, one line rides along, shown to you word for word before you send: app version, iOS version, device model, whether a watch is paired, and how many rolls and frames you have. Never names, locations, notes or scans.
Cloudflare sees your IP address as part of delivering the request, and uses it to rate-limit abuse. I do not store it. Feedback is kept as long as it is useful for fixing the app. Write to me and I will delete a report you sent.
Delete the app from your iPhone and from your watch and everything it stored is gone. Photos you wrote into your library stay there, because they are your photos.
Wind On is not aimed at children and collects nothing from anyone.
If the app ever starts sending anything new off the device, this page changes first and the date at the top moves.
Peter von Grundherr
petervongrundherr.dev@gmail.com