Privacy policy v2
-
Who we are
Winterlamb is provided by Cubeshell LLC, a Wyoming limited liability company, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States. Cubeshell LLC is responsible for the personal information described in this policy. We, us and our mean Cubeshell LLC.
This policy applies to the Winterlamb app for iPhone and to the website winterlamb.app.
-
Summary
Free tracking requires no account. Your workouts, routes and history stay on your iPhone.
During a paid Winter, a summary of each qualifying workout is sent to our server so it can confirm your days. Routes and heart rate are never sent.
We do not show ads, track you across other companies' apps or websites, use third-party analytics, or sell personal information.
You can delete your account and its server data in the app at any time.
-
Information that stays on your iPhone
Workouts and routes you record, your free tracking history, your display, unit and notification preferences, and any report you have not yet sent.
Location is used only while you record an outdoor workout, to draw its route. The route is stored on your iPhone and in Apple Health.
-
Apple Health
With your permission, Winterlamb reads workouts from Apple Health, including workouts recorded with Apple Watch or other apps, together with their routes, heart rate, active energy and distance. It reads no other Health data. It saves workouts you record in Winterlamb to Apple Health.
Health data is used only to provide Winterlamb's features: to show you your own workouts and, during a Winter, to determine whether a day counts. It is not used for advertising, marketing or data mining, is not sold, and is not disclosed to advertisers or data brokers. Winterlamb does not store Health data in iCloud.
Except for the workout summaries described below, which are sent only to our server and only during a Winter, no Health data leaves your iPhone.
You can change Winterlamb's access at any time in the Health app or in iOS Settings.
-
Information sent to our server
Account: if you create an account, the account identifier issued by our sign-in provider and your email address. If you use Sign in with Apple and hide your email, we receive the private relay address Apple provides instead.
Installation identifier: an identifier that Apple generates for Winterlamb on your iPhone and that changes if you delete the app. It is stored with your device registration and used to secure sign-in and prevent abuse.
Workout summaries, during a Winter only: for each workout that may count toward a day, its activity type, start and end times, active intervals, Apple Health workout identifier, the type of source that recorded it, whether it was entered manually or recorded in Winterlamb, and its time zone. Free tracking, and workouts that ended before your Winter started, are never sent.
Purchases: Apple's signed transaction record and transaction identifier, your iPhone's time zone, used to set Day 1, and the version of the Winter rules you accepted.
Support reports: the text you write, the Winter and day concerned, and, only if you choose to include it, a diagnostic summary of the app version, iOS version, iPhone model, the time zone your days use and the help content version.
Technical data: when your device connects to our servers or our providers, they receive its IP address and basic technical information such as the app version. This is used only to provide and secure the service.
-
Information that is never sent
Route coordinates, heart rate, distance, pace, energy, elevation and other workout details from Apple Health.
Free tracking data, your location, your contacts and photos, and your preferences. Reminders are scheduled on your iPhone, and no push token is sent to us.
Winterlamb does not use the advertising identifier and does not track you as defined by Apple's App Tracking Transparency.
-
How we use information
We use information to provide your account, run each Winter under the same rules for everyone, deliver each Winter Pass exactly once, respond to support reports, keep the service secure and working, and meet our legal obligations.
Where the GDPR or similar laws apply, our legal bases are: performance of our contract with you, for your account, Winter and purchases; your consent, for the workout summaries, which you give by allowing Winterlamb to read Apple Health and starting a Winter; our legitimate interests in securing the service and preventing abuse; and compliance with legal obligations, such as keeping purchase records.
You can withdraw consent at any time by turning off Health access or deleting your account. Days after you withdraw consent cannot be confirmed.
-
Service providers
Apple: Sign in with Apple and App Store purchases.
Supabase: account sign-in. Supabase stores your email address, your password if you set one, and your sign-in methods, and sends sign-in emails. It is the only provider that receives your password. Location: Ireland.
Cloudflare: our server, our database of attempts, day results and purchase records, and this website. Location: Western Europe.
RevenueCat: processing of App Store purchase events and receipts, linked to your account identifier, so each pass is delivered exactly once. RevenueCat receives no Health data. Location: United States.
These providers process personal information only to provide their services to us, under terms that require them to protect it to a standard at least equal to this policy. They may not use it for their own purposes, including advertising.
We may also disclose information where required by law, to protect the rights and safety of our users or the service, or to a successor in a merger or acquisition, which will remain bound by this policy.
-
International transfers
Account and Winter data are stored in Western Europe, and sign-in data in Ireland. RevenueCat processes purchase data in the United States, and Cubeshell LLC is based in the United States. Where the law requires safeguards for these transfers, we rely on recognised mechanisms such as the European Commission's standard contractual clauses.
-
Retention
Attempts, day results and purchase records are kept indefinitely, so that a completed Winter remains verifiable and refunds issued by Apple can be reconciled. When you delete your account, they are kept only in de-identified form.
Workout summaries are kept until you delete your account.
Sign-in codes are deleted after one day, notification records after 30 days, and Apple account notifications 90 days after they are received, once processed.
Support cases are deleted one year after they are resolved, or when you delete your account, whichever is sooner.
-
Deleting your account
You can delete your account in the app, under Settings, then Account, then Delete account. No email or phone call is needed. You can also request deletion by writing to support@winterlamb.app.
Deletion removes your email address, your sign-in methods, your installation identifier and device registration, all workout summaries, and your support cases. Your account is also deleted from our sign-in provider, and, if you used Sign in with Apple, your authorisation is revoked with Apple.
Your attempts, day results and purchase records are retained in de-identified form, without your name, email address or any Health data. Signing in again creates a new, empty account.
Workouts Winterlamb saved to Apple Health remain in Apple Health and can be deleted in the Health app. Deleting the app removes your free tracking history from your iPhone.
-
Your choices
Health, location and notification permissions can be changed at any time in iOS Settings. Free tracking works without an account, and recording works without location, without the route.
Signing out removes your sign-in from your iPhone and does not affect your free tracking history.
-
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to receive a copy of it, to object to or restrict its processing, to withdraw consent, and to lodge a complaint with a data protection authority.
To make a request, write to support@winterlamb.app. We may need to verify your identity, and we respond within the time required by law. Where local law allows, an authorised agent may make a request on your behalf.
We do not sell or share personal information for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights.
-
US state health data laws
Some US states, such as Washington and Nevada, give additional rights over consumer health data. To the extent these laws apply, the consumer health data we collect is the workout summaries described above, collected from Apple Health with your consent, during a Winter only, to confirm your days. We share it only with the service providers listed above and do not sell it. You can access or delete it, and withdraw consent, as described in this policy.
-
Security
Data is transmitted over encrypted connections. Your sign-in session is stored in your iPhone's Keychain, and sign-in credentials we hold are encrypted. No method of transmission or storage is completely secure. If you believe your account has been compromised, contact support@winterlamb.app.
-
Children
An account, which is needed only to buy a Winter Pass, is for people aged 13 or older, or the minimum age required by local law if higher. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact support@winterlamb.app and we will delete it.
-
This website
winterlamb.app does not use cookies or analytics and loads no third-party content. Cloudflare, which hosts it, processes standard request data such as IP addresses to deliver and secure it.
-
Changes to this policy
We will post any changes in the app and at winterlamb.app/privacy, with a new version number and effective date. If a change materially affects how we use your information, we will notify you in the app before it takes effect.
-
Contact
Cubeshell LLC, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States.
Questions and requests about this policy: support@winterlamb.app.