This Privacy Policy explains how the Winky mobile application (the “App”) collects, uses, and shares information when you use it. Winky turns your phone into a fullscreen signboard.
The data controller responsible for your information is:
Nasavan
Contact: support@nasavan.com
Winky is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
Signing in is optional — you may use the App as a guest. If you choose to sign in with Google, we receive and store the following from your Google account:
This data is stored in our database (Google Firebase / Firestore) and used to identify your account and link your subscription status to it.
If you purchase a subscription (Winky Pro), the purchase is processed by Google Play Billing and managed through RevenueCat. We receive your purchase history and entitlement status (e.g. whether you have an active “pro” subscription), associated with your account identifier. We do not receive or store your full payment-card details — those are handled by Google Play.
Winky displays ads through Google AdMob. To serve and measure ads, AdMob may collect and process your device’s advertising identifier and related device information. This data is shared with Google for advertising purposes. See Google’s handling of this data at policies.google.com/technologies/ads.
If you are in the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent before any personalised advertising data is collected. On first launch, Winky shows a consent form provided by Google’s User Messaging Platform, listing the advertising partners involved and letting you accept or reject each purpose. No ad is requested until you have made a choice. If you decline, your advertising identifier is not used to personalise ads, though non-personalised ads are still shown.
You can change or withdraw your choice at any time under Settings → Privacy options. Withdrawing consent applies to future ad requests; it does not undo processing that already took place while consent was in force.
Our legal basis for personalised advertising is your consent (UK/EU GDPR Article 6(1)(a)). If you decline, we do not use your advertising identifier to personalise ads, but non-personalised ads are still shown on the basis of legitimate interests (Article 6(1)(f)).
Your signs, saved messages, theme choices, and app settings are stored locally on your device (via local app storage). This content stays on your device and is not transmitted to us.
| Purpose | Data used |
|---|---|
| Create and manage your account | Email, display name, photo, user ID |
| Provide and unlock Pro features | Purchase / subscription status, user ID |
| Display advertising | Advertising identifier, device information (in the UK/EEA/Switzerland, personalised only with your consent) |
| App functionality (your signs and settings) | Stored locally on device only |
We do not sell your personal information. Information is shared only with the service providers that operate core parts of the App:
| Provider | Role | Data |
|---|---|---|
| Google Firebase (Authentication & Firestore) | Account sign-in and database | Email, name, photo, user ID, subscription tier |
| Google AdMob | Advertising | Advertising ID, device information |
| RevenueCat | Subscription management | Purchase / entitlement data, user ID |
| Google Play Billing | Payment processing | Purchase transactions |
These providers process data under their own privacy policies. We may also disclose information if required by law.
We retain your account information for as long as your account exists. You can:
Data stored only on your device can be removed by clearing the app’s data or uninstalling the App.
Depending on your location, you may have rights to access, correct, or delete your personal data, to object to or restrict its processing, and to data portability. To exercise any of these rights, contact us at support@nasavan.com.
If you are in the UK, EEA, or Switzerland, you also have the right to withdraw consent for personalised advertising at any time — see Settings → Privacy options — and the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).
We rely on industry-standard infrastructure (Google Firebase) to store account data. While no method of transmission or storage is completely secure, we take reasonable measures to protect your information.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
If you have questions about this Privacy Policy, contact:
Nasavan —
support@nasavan.com