What we collect, what we do with it, and how to make it vanish.
The short version
PinWheelerZ is operated by Circle Shots, LLC. We collect what you give us (email, name, photos, voice samples, profile answers) plus a little operational metadata (IP, browser). We use it to run your account, generate your pinwheel-self, draft captions, and post bundles to the camp’s public socials. We don’t sell it. You can see, edit, export, or delete it anytime.
What we collect
- Account stuff: email, display name, optional handles for Instagram / Facebook / TikTok.
- You stuff: selfies you upload, voice prompts you fill in, profile answers (relationship, talent tags, bio), favorites you pinwheel.
- AI outputs: the avatars Pinhead generates from your selfie, captions Pinhead drafts about you.
- Bundles + media: photos and videos you upload, comments you leave, bundles you’re tagged in.
- Operational metadata: IP at sign-in and at agreement-acceptance, browser user-agent, timestamps, error logs.
How we use it
- Sign you in (magic links via Supabase).
- Generate your pinwheel-self avatars (Google Gemini family via Vercel AI Gateway).
- Draft captions in your voice (same model family).
- Schedule bundles to the camp’s public Instagram + Facebook (RobinReach).
- Show your stuff to other camp members inside the app.
- Keep an audit trail of what you agreed to (Terms / Privacy version, timestamp, IP, browser).
Who we share it with
We use a small set of third-party services to run PinWheelerZ. They process your data on our behalf, under their own terms:
- Supabase — auth + database.
- Vercel — hosting, deployment, blob storage for media.
- Vercel AI Gateway / Google Gemini — AI image + text generation.
- RobinReach — social media scheduler that pushes bundles to Instagram + Facebook.
- Meta (Instagram + Facebook) — the public destinations for scheduled bundles.
We do not sell your data. We do not share it with advertisers. We will share it if a court tells us to, or if we genuinely believe someone’s safety is at risk.
How long we keep it
Until you delete it, or until you delete your account. Operational logs (error logs, request logs) roll off in 30 days. Public posts already on Instagram or Facebook live by Meta’s rules, not ours — see below.
Your rights
- See it:
/meshows your profile, voice samples, avatar history, agreement history. - Edit it: same place.
- Delete part of it: remove individual voice samples or generated avatars from
/me. - Delete all of it: request account deletion via pinhead@pinwheelerz.com. We’ll wipe your profile, media, voice samples, generated avatars, comments, and favorites within 30 days.
- Export it: ask via the same email and we’ll send a JSON dump of your data.
- Pull posts: ask us to request removal of any public post that features you. We’ll send the takedown to Meta; their final call.
AI processing notice
PinWheelerZ uses generative AI to turn your selfies into pinwheel avatars and to draft captions in your voice. Your inputs (selfies, voice prompts) are sent to the AI provider for processing and the outputs (generated images, drafted captions) are stored in our database and on Vercel’s blob storage. Per our gateway arrangement, providers do not use your inputs to train their public models.
Children
PinWheelerZ is for adults (18+) only. We don’t knowingly collect data from anyone under 18. If you think a child’s data got in here somehow, email pinhead@pinwheelerz.com and we’ll remove it.
Cookies + tracking
We use session cookies set by Supabase to keep you signed in. That’s it — no analytics cookies, no ad pixels, no third-party trackers. We may run server-side error logging that captures minimal request metadata (URL, status code, anonymized IP).
Security
We use industry-standard practices (HTTPS everywhere, encrypted at rest via Supabase, service-role isolation, etc.). No system is perfect; if you notice something off, please tell us at pinhead@pinwheelerz.com.
Changes
When we update this Privacy Policy, we bump the version at the top and ask you to re-acknowledge at next sign-in. The acceptance is recorded with timestamp, IP, and browser.
Contact
For privacy questions, data requests, takedowns, or anything else: pinhead@pinwheelerz.com. Mail to Circle Shots, LLC reaches us through that address.