Privacy Policy

Information you provide

Account information. If you register with email, Winddrops processes your email address and a password-derived value used to authenticate you. If you use Google sign-in on the web, Winddrops receives an account identifier and profile details made available by Google, such as your email and display name. A copy of basic sign-in information is also kept on your device.

Session input. When you request a personalized session, the selected feeling or state, an optional note, and limited context from up to three recent sessions (state, mode, and feedback, when present) are sent to the Winddrops server and then to OpenAI to generate the session. Do not include information you do not want processed by an AI provider.

Voice input. If you choose web voice input, your browser records up to 45 seconds of audio. The recording is sent through the Winddrops server to OpenAI for transcription. The resulting text is placed in the note field and, if you continue, is processed like other session input.

Support communications. If you email us, we receive your email address and the information you include in your message.

Information stored on your device

Saved session scripts, titles, selected states, favorites, feedback, streak and feature-use counters, preferences, and basic sign-in information are stored locally on your device or browser. Winddrops does not intentionally save session records or raw voice recordings in its application database.

Removing the app or clearing its site/app storage generally removes locally stored information. Account and billing records held by Winddrops or its providers are separate and are not removed merely by uninstalling the app.

Audio narration

When you request spoken narration, the session script is sent through the Winddrops server to ElevenLabs to create audio. If ElevenLabs is unavailable, OpenAI may be used instead. Generated audio is returned to your device and may be temporarily cached by the service or your device/browser.

Accounts and payments

For email accounts, Winddrops stores an email address, username/account identifier, a salted password hash, account creation time, and—if applicable—Stripe customer and subscription identifiers. Passwords are not stored in readable form.

Stripe processes subscription checkout, payment, billing, and customer-portal activity. Winddrops does not receive full payment-card details, but receives billing and subscription status information needed to provide Plus access. Google processes authentication when you select Google sign-in on the web. Native Google sign-in and Apple sign-in are not currently available.

Usage information

Winddrops records an app-open event using a randomly generated visitor identifier stored on your device and the platform type. On the public website, it records a random browser identifier, page path, platform, and the referring site's origin, if present. These events are used to count visits and understand general use.

The server also processes ordinary request information, such as IP address and headers, to deliver the service, apply rate limits, and operate hosting infrastructure. Infrastructure providers may create operational logs.

How information is used

We use information to provide personalized sessions, transcription and narration; authenticate accounts; provide and verify Plus access; process and manage subscriptions; respond to support and deletion requests; count use; protect the service from abuse; troubleshoot; and comply with legal obligations.

Service providers and disclosure

Information is disclosed as needed to providers that operate Winddrops, including hosting/database providers, OpenAI (session generation, transcription, and fallback narration), ElevenLabs (narration), Stripe (payments and subscriptions), and Google (when Google web sign-in is used). Their handling of information is governed by their own terms and privacy policies.

We may also disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or in connection with a business transfer. Winddrops does not sell personal information.

Retention

Locally stored information remains until you delete it, clear app/site storage, or remove the app, subject to device and browser behavior. Account, subscription, support, analytics, and operational records are kept for as long as reasonably needed for the purposes described above, legal obligations, dispute resolution, and service protection. Third-party providers apply their own retention practices.

Your choices

You may use core features as a guest, decline microphone access and type instead, delete individual locally saved sessions, manage or cancel a subscription through the billing portal, and request account deletion using the instructions on the Account Deletion page.

Depending on where you live, you may have legal rights concerning personal information. Email us to make a request. We may need to verify your identity before acting.

Age requirement

Winddrops is for adults age 18 or older. It is not directed to children, and people under 18 may not use the service.

Changes and contact

We may update this policy as the service changes. The date shown below identifies the current version. Questions or privacy requests may be sent to info@winddrops.com.