Privacy Policy

Last updated: August 4, 2026

Winder is built local-first, and its privacy story is short because there isn't much to tell: your photos never leave your devices through us.

What Winder stores, and where

• Your photos and metadata are stored as plain files in a library folder on your device (or in a synced folder you choose, such as iCloud Drive). They are never transmitted to our servers. We have no servers that hold user content.
• App settings (theme, language, scan size, subscription state) are stored locally on your device.

What Winder does NOT do

• No account. No sign-up. No user database.
• No analytics or tracking inside the app.
• No photo uploads, no cloud processing of your images.
• No selling of data — there is no data to sell.

Sync

If you place your library in iCloud Drive, Dropbox, WebDAV or a similar service, syncing happens between your devices and your storage provider, under that provider's terms and privacy policy. Winder simply reads and writes files in the folder you chose.

Map tiles

The map view and the location picker load map imagery from OpenStreetMap's public tile servers. When you open the map, your device requests tiles directly from OpenStreetMap, which sees your IP address like any web request. See the OSMF privacy policy. No location you attach to a photo is sent anywhere; it is written to the photo's local sidecar file only.

Purchases

Winder Pro purchases are processed by Apple's App Store or Google Play. We receive no payment details. Your entitlement is recorded on your device.

The website

winder.app uses Vercel Analytics to count page views in a privacy-friendly, cookie-free way. No cross-site tracking, no advertising identifiers.

Children

Winder does not knowingly collect any personal information from anyone, including children.

Changes

If this policy changes materially, we will announce it in the app and on this page, with the date above updated.

Contact

Privacy questions: hello@winder.app