Privacy Policy

1. Introduction

Welcome to Wings ("the App," "we," "us," or "our"). Wings is a shared journal and mood tracker designed for couples. This Privacy Policy explains in detail what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have regarding your data.

We are committed to protecting your privacy. We do not sell your personal data. We do not use your data for advertising or marketing purposes. We do not share your data with third parties for their own purposes. Your journal entries, mood data, and personal reflections are yours and your partner's alone.

This Privacy Policy complies with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), the Swiss Federal Act on Data Protection (FADP/nDSG), the California Consumer Privacy Act (CCPA), Apple's App Store Guidelines, and other applicable data protection laws.

By using Wings, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Data Controller

The data controller responsible for your personal data is:

Wings
Operated by: Kol Deda
Address: Unterwilrain 32, 6014 Lucerne, Switzerland
Email: support@wings-app.com

If you have any questions about this Privacy Policy or your personal data, please contact us at the email address above.

3. Data We Collect

We collect only the data necessary to provide the App's core functionality — enabling you and your partner to share journal entries, track moods, and stay connected. Below is an exhaustive list of all data we collect, organized by category.

3.1 Account & Authentication Data

Apple Sign In: If you sign in with Apple, we receive your name and email address (or Apple's private relay email address if you choose to hide your email). Apple may share a private relay address (e.g., xyz@privaterelay.appleid.com) instead of your real email, which we fully support. We never receive your Apple ID password.

3.2 Profile Data

3.3 Journal Entries

3.4 Daily Mood Check-Ins

3.5 Couple & Relationship Data

3.6 Invite Codes

When you invite your partner, we generate a one-time invite code. The plaintext code is shown to you once and is never stored on our servers. We only store a SHA-256 cryptographic hash of the code, which cannot be reversed to reveal the original code. Invite codes expire after 48 hours and can only be used once.

3.7 Connection Features

3.8 App Settings (Stored Locally on Your Device)

Biometric data (Face ID / Touch ID): We never collect, store, or transmit your biometric data. Biometric authentication is handled entirely by Apple's operating system on your device. We only store your preference for whether biometric unlock is enabled (a simple on/off setting).

3.9 Push Notification Data

The device push token is an anonymous identifier assigned by Apple's Push Notification Service (APNs). It is not linked to your device's hardware identity and changes periodically.

3.10 Analytics Data

Important: Analytics events contain only action names and basic properties (e.g., word count, plan type). We never send your journal entry text, mood details, love note content, partner names, or any personal content to our analytics provider.

3.11 Subscription Data (When Available)

Subscription purchases are processed by Apple through the App Store. We use RevenueCat as a subscription management service. We do not have access to your payment card details, bank account information, or Apple ID password. Apple and RevenueCat handle all payment processing.

4. Data We Do NOT Collect

We want to be explicit about what we do not collect:

• We do not collect your precise or approximate location
• We do not collect your contacts or address book
• We do not collect your health or fitness data
• We do not collect advertising identifiers (IDFA)
• We do not collect browsing history
• We do not use tracking pixels or cookies
• We do not perform any profiling or automated decision-making
• We do not use your data for advertising or share it with ad networks

5. How We Use Your Data

We process your personal data for the following purposes and legal bases:

5.1 Providing the App's Core Service

Legal basis: Performance of a contract (GDPR Art. 6(1)(b))

• Authenticating your identity and maintaining your account
• Storing and displaying your journal entries, moods, countdowns, love notes and other features
• Sharing your data with your linked partner
• Delivering love notes, reactions, and connection features between you and your partner
• Displaying your profile information (name, avatar) to your partner
• Managing your couple relationship and invite system

5.2 Sending Notifications

Legal basis: Consent (GDPR Art. 6(1)(a))

• Sending push notifications about partner activity (new entries, love notes, sent love)
• Sending daily journaling reminders (if you enable them)
• Sending countdown reminders for events you create

You can withdraw consent for notifications at any time through your device's Settings app or within Wings' settings.

5.3 Managing Subscriptions

Legal basis: Performance of a contract (GDPR Art. 6(1)(b))

• Processing and managing your premium subscription status
• Providing premium features to your couple

5.4 Analytics and Improvement

Legal basis: Legitimate interest (GDPR Art. 6(1)(f))

• Understanding how features are used so we can improve the App
• Identifying where users drop off during onboarding to improve the experience
• Monitoring subscription conversion to sustain the service

Our legitimate interest is maintaining and improving a functional app. Analytics data is aggregated and does not include any personal content (journal text, moods, love notes, or names).

5.5 Security and Integrity

Legal basis: Legitimate interest (GDPR Art. 6(1)(f))

• Protecting against unauthorized access to your account
• Enforcing Row Level Security policies to prevent data leakage between couples
• Hashing invite codes to prevent unauthorized couple access

6. How We Protect Your Data

We take the security of your personal data seriously and implement the following measures:

6.1 Encryption in Transit

All data transmitted between the App and our servers is encrypted using HTTPS/TLS (Transport Layer Security). This means your journal entries, moods, photos, and all other data are encrypted while traveling over the internet.

6.2 Encryption at Rest

Our infrastructure provider (Supabase) encrypts data at rest in accordance with industry standards, including AES-256 encryption provided by AWS-managed storage services.

6.3 Cryptographic Hashing

• Invite codes are hashed using SHA-256 before storage. The plaintext code is never stored on our servers.
• Passwords (for email/password accounts) are hashed using bcrypt by our authentication provider. We never store or have access to plaintext passwords.
• Apple Sign In nonces are hashed using SHA-256 to prevent replay attacks.

6.4 Access Control

• Row Level Security (RLS): Our database enforces strict access control policies at the database level. Every query is scoped to your couple. Our systems are designed to prevent unauthorized access to other couples' data.
• Authentication tokens: All API requests require a valid, non-expired JWT (JSON Web Token) tied to your user account.
• Couple isolation: Journal entries, check-ins, love notes, and all couple data are strictly isolated per couple. Our database enforces a maximum of 2 members per couple.

6.5 Biometric Security

If you enable biometric unlock (Face ID or Touch ID), the App uses Apple's LocalAuthentication framework. Your biometric data never leaves your device and is never transmitted to our servers. Apple's Secure Enclave handles all biometric verification.

6.6 Photo Security

Photos are stored in isolated storage buckets organized by couple ID and user ID. File paths are sanitized to prevent path traversal attacks.

7. Third-Party Services

We use a limited number of third-party services to operate Wings. We do not share your data with third parties for advertising, marketing, or any purpose unrelated to providing the App.

7.1 Supabase (Infrastructure Provider)

Purpose: Database hosting, user authentication, file storage, serverless functions
Data processed: All data described in Section 3
Location: AWS data centers (Region: United Kingdom)
Privacy Policy: supabase.com/privacy

Supabase acts as a data processor on our behalf.

7.2 Apple (Authentication & Payments)

Purpose: Apple Sign In authentication, App Store subscription payments
Data processed: Apple ID credentials (handled entirely by Apple), payment information (handled entirely by Apple)
Privacy Policy: apple.com/legal/privacy

When you use Apple Sign In, authentication is handled directly by Apple. We receive only an identity token, your name (first sign-in only), and your email (or Apple's private relay email). We never receive your Apple ID password.

7.3 RevenueCat (Subscription Management)

Purpose: Managing premium subscription status and entitlements
Data processed: Anonymous user ID, transaction ID, purchase dates, subscription status
Privacy Policy: revenuecat.com/privacy

RevenueCat does not receive your name, email, journal entries, or any personal content. They only process subscription-related transaction data.

7.4 PostHog (Analytics)

Purpose: Product analytics — understanding feature usage, onboarding completion, and subscription conversion
Data processed: Anonymous user ID, screen views, feature usage events (action names only, no personal content), device type, OS version
Location: EU
Privacy Policy: posthog.com/privacy

PostHog does not receive your journal entries, mood data, love notes, partner names, email, or any personal content. It only receives action names (e.g., "entry created") and basic metadata (e.g., word count, subscription plan selected).

7.5 Apple Push Notification Service (APNs)

Purpose: Delivering push notifications to your device
Data processed: Device push token (anonymous, rotating identifier)
Privacy Policy: apple.com/legal/privacy

8. Data Sharing

We do not sell your personal data. We never have and never will.

Your data is shared only in the following limited circumstances:

1. With your linked partner: Your shared journal entries, mood check-ins, profile information (name and avatar), love notes, reactions, and connection feature data are visible to your linked partner.
2. With our infrastructure providers: As described in Section 7, solely for the purpose of operating the App.
3. If required by law: We may disclose your data if required to do so by law, court order, or governmental authority. We will notify you of such requests where legally permitted.

9. International Data Transfers

Our infrastructure provider (Supabase) hosts data in the region selected for our project (currently the United Kingdom). Where personal data is transferred outside the European Economic Area (EEA) or Switzerland, such transfers are governed by Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms provided in our infrastructure providers' Data Processing Agreements.

10. Data Retention

We retain your personal data only for as long as necessary to provide the App's services or as required by law.

When you delete your account, we delete all your personal data from our servers, including your profile, journal entries, check-ins, photos, love notes, and all associated couple data. This deletion is permanent from our active systems. Backup copies may remain for a limited period in encrypted backups and are automatically deleted in accordance with our infrastructure provider's retention policies.

11. Children's Privacy

Wings is not intended for use by anyone under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children under 13. We do not verify age in our app-internal sign up process.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at the email address in Section 2.

12. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

12.1 Right to Access (GDPR Art. 15)

You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format.

12.2 Right to Rectification (GDPR Art. 16)

You have the right to correct any inaccurate personal data we hold about you. You can update your name and profile photo directly in the App's settings.

12.3 Right to Erasure / Right to Be Forgotten (GDPR Art. 17)

You have the right to request deletion of your personal data. We delete your personal data from our active systems. Backup copies may remain for a limited period in secure encrypted backups and are automatically deleted in accordance with our infrastructure provider's retention policies.

12.4 Right to Restrict Processing (GDPR Art. 18)

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of your data.

12.5 Right to Data Portability (GDPR Art. 20)

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller. The App also includes an export feature in Settings that allows you to export your journal entries.

12.6 Right to Object (GDPR Art. 21)

You have the right to object to processing of your personal data based on legitimate interests. This includes the right to opt out of push notifications at any time.

12.7 Right to Withdraw Consent (GDPR Art. 7(3))

Where we process your data based on consent (e.g., push notifications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. If you are in the EU, you can find your local authority at edpb.europa.eu. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

How to Exercise Your Rights

To exercise any of these rights, please contact us at the email address in Section 2. We may ask you to verify your identity before processing your request.

13. Automated Decision-Making and Profiling

We do not use any automated decision-making or profiling systems. No algorithms make decisions about you based on your personal data. The features in the Insights tab are simple statistical calculations (entry counts, mood matching) performed for your benefit and do not constitute profiling under GDPR Art. 22.

14. Cookies and Tracking Technologies

Wings is a native iOS application. We do not use cookies, web beacons, tracking pixels, or any browser-based tracking technologies.

We use PostHog for product analytics (see Section 7.4). This is first-party analytics to improve the App — we do not share analytics data with advertisers, data brokers, or any third parties. We do not request App Tracking Transparency (ATT) permission because we do not track you across other apps or websites.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the App's features. When we make material changes:

1. We will update the "Last Updated" date at the top of this policy
2. For significant changes, we may request your renewed consent

We encourage you to review this Privacy Policy periodically. Your continued use of the App after changes are posted constitutes your acknowledgment of the updated policy.

16. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request disclosure of the categories and specific pieces of personal data we have collected about you.
• Right to Delete: You can request deletion of your personal data (see Section 12.3).
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Sale of Data: We do not sell your personal data. We have never sold personal data and have no plans to do so.

17. Swiss Data Protection

If you are located in Switzerland, your personal data is also protected under the Swiss Federal Act on Data Protection (FADP/nDSG). You have equivalent rights to those described in Section 12, and you may contact the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch to lodge a complaint.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: support@wings-app.com

We aim to respond to all inquiries within 30 days.