Privacy Policy

1. Who is responsible for your data

Vindeiro SL (NIF B26805648), a company incorporated in Spain, is the data controller for the personal data described in this policy.

You can reach us about anything in this policy at hola@vindeiro.com.

2. What we collect

We collect as little as we can get away with.

• This website. No accounts, no advertising, and no third-party analytics or tracking cookies. Our host records standard server logs, including IP addresses, for security and reliability.
• Our apps. Where an app works without an account, we do not collect personal data at all. Where an app needs an account or a subscription, we collect only what is necessary to run it, and the app's own privacy details on the App Store and Google Play describe exactly what that is.
• Support. If you email us, we hold your address and whatever you tell us, for as long as we need it to resolve the issue.
• Crash and diagnostic reports. Apple and Google may send us crash reports if you have opted in to sharing them with developers on your device. These are aggregated and do not identify you to us.

3. Why we are allowed to process it

Under the GDPR, we rely on: the performance of a contract, where we need the data to provide an app or service you have asked for; our legitimate interest in keeping our services secure, working, and supported; your consent, where we ask for it, which you can withdraw at any time; and our legal obligations, such as keeping invoices.

4. Who we share it with

We do not sell your personal data and we do not share it for advertising.

We use a small number of service providers who process data on our behalf under contract: our website host and our email provider, and where an app has accounts, our hosting and database provider. Apple and Google process App Store and Google Play purchases and subscriptions under their own privacy policies. We may also disclose data where the law requires it.

5. Where your data is held

We prefer providers who store data in the European Economic Area. Where a provider transfers data outside the EEA, that transfer is covered by an adequacy decision or the European Commission's Standard Contractual Clauses.

6. How long we keep it

Support correspondence: up to two years after the issue is closed. Account data: for as long as the account exists, and up to 30 days after you delete it. Invoices and tax records: as long as Spanish law requires. Server logs: up to 90 days.

7. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to what we do with it, or hand it to another provider in a portable format. Where we rely on consent, you can withdraw it at any time.

Email hola@vindeiro.com and we will respond within one month. If you are not satisfied with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the supervisory authority in your own country.

8. Children

Our apps and this website are not directed at children under 14, and we do not knowingly collect their personal data. If you believe a child has given us personal data, write to us and we will delete it.

9. Changes to this policy

If we change this policy in a way that matters, we will update the date below and, where the change is significant, tell you in the app or by email.