Privacy Notice

EmeraldWings ("we", "us") provides a loft management platform for pigeon breeders and racers. EmeraldWings is the data controller for the personal data described here and decides why and how it is processed. This notice explains what we collect, why, who we share it with, and the rights you have.

1. Personal data we collect

• Account data — email address, password credentials (stored hashed) or Google sign-in identifier, full name, loft name, country.
• Content you enter — pigeons, ring numbers, pedigrees, races, results, awards, breeding pairs, health and nutrition records, and any notes you add.
• Subscription data — plan, billing cycle, subscription status, renewal date and payment history metadata (amount, currency, date). Card details never reach us; they are handled by Paddle.
• Technical data — IP address, device and browser information, and error and usage logs generated when you use the app.
• Support messages — anything you send us when asking for help.

2. Why we use it, and our legal basis

• Creating your account, storing your loft records and providing the service — performance of a contract.
• Managing subscriptions, entitlements and renewals — performance of a contract.
• Security, fraud prevention, abuse detection, backups and troubleshooting — legitimate interests in running a safe, reliable service.
• Product improvement based on aggregated usage — legitimate interests.
• Marketing or newsletter emails, where offered — consent, withdrawable at any time.
• Accounting, tax and responding to lawful requests — legal obligation.

3. Who we share data with

• Merchant of Record — Paddle.com, which sells the subscription on our behalf and handles payments, subscription management, invoicing, tax compliance and refunds.
• Service providers / subprocessors — cloud hosting, managed database and authentication infrastructure, and error monitoring, all acting on our instructions.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are legally required to disclose.

We do not sell personal data.

4. International transfers

Some providers process data outside the EEA/UK. Where that happens, transfers are covered by an adequacy decision or by Standard Contractual Clauses with appropriate supplementary safeguards.

5. Retention

We keep your account and loft data for as long as your account is open. If you delete your account, your records are deleted from live systems and purged from backups within 30 days, except where we must keep transaction records for accounting and tax purposes (typically up to 10 years) or to defend legal claims.

6. Your rights

Under the GDPR you can request access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interests. You can withdraw consent at any time. Contact us through the app and we will respond within one month. You also have the right to complain to your supervisory authority — in Portugal, the CNPD.

7. Security

Data is encrypted in transit and at rest. Access is restricted through row-level database rules so each account can only reach its own records, and administrative access is limited to what is needed to operate the service.

8. Cookies

We use essential cookies and local storage to keep you signed in and remember your language preference. Paddle sets cookies needed to run checkout and prevent fraud. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will stop working.

9. Contact

For any privacy question or to exercise your rights, contact EmeraldWings from within the app.