Wingua Privacy Policy
1. Who this policy covers
This Privacy Policy describes how we collect, use, and share information when you use the Wingua app and related services. By using Wingua, you agree to this policy together with our Terms of Service.
2. Information we collect
We collect information in the ways described below. This section incorporates the same categories of information we previously described in earlier versions of this policy, and adds detail specific to the Wingua app as it works today.
Personal information you provide directly. Depending on how you use Wingua, this may include:
- Name or display name (if you provide it or it is supplied by a sign-in provider).
- Email address (for email/password accounts or when shared by Apple/Google sign-in).
- Username or account identifiers assigned or chosen as part of authentication.
- Password or credentials — passwords for email sign-in are handled by our authentication provider (Supabase); we do not store your password in plain text in the app.
- Contact preferences (for example, if you tell us how to reach you for support).
- Authentication and contact data needed to maintain your session and respond to you.
Sensitive categories. We do not ask you to provide “sensitive” or “special category” personal data (such as health data) as defined under applicable laws. Content you voluntarily submit for coaching (such as a scene description or photo) is provided by you for that feature; do not upload imagery or text you consider highly sensitive if you are uncomfortable with the processing described here.
Account and authentication. If you create an account, we process information needed to sign you in and secure your account (for example, email address for password sign-in, or identifiers from Apple or Google when you use those sign-in options). This is handled through our authentication provider (Supabase).
Coaching content you send. When you use the wingman feature, you may send text and/or a photo. That content is transmitted from your device to our servers to generate coaching. Text and images may be sent to OpenAI (including vision models when you include a photo) to produce AI-generated suggestions. We use OpenAI’s APIs in accordance with their terms and policies.
AI-powered features. Wingua includes AI-powered language and social coaching (phrase suggestions, rewrites, and related assistance). Prior versions of this policy referred to “AI translation”; today’s product focuses on contextual coaching and practice lines. We may add or adjust AI features over time; when we do, we will update this policy and, where required, the in-app disclosures.
Photos and retention. Images are processed only to deliver the specific coaching response you requested. Wingua does not use your photos to train any public, third-party, or Wingua-owned AI model, and we do not sell or share photos with advertisers or data brokers. Image payloads are handled in memory for the request (and may be briefly cached on our API for a short window to improve reliability and detect abuse); we do not operate a long-term photo library of your wingman uploads. Our model providers (currently OpenAI) process the image to generate a response under their API terms, which prohibit using API content to train their general models.
Your responsibility when capturing photos of others. If you photograph another person — for example to ask the wingman for read-the-room coaching — you are responsible for complying with the laws of the country and venue you are in, including consent, privacy, and recording laws. Some jurisdictions and venues require explicit permission before you may photograph someone, even in a public space. Wingua does not, and cannot, verify on your behalf that the people in your photos consented to be photographed; you must do so yourself, and you must not use Wingua to capture or analyze imagery of minors, undressed individuals, identifying documents, or anyone who has not agreed.
Subscriptions. If you purchase Wingua Plus, Apple and/or Google process payment information. We receive subscription status through RevenueCat; we do not receive your full card number from those platforms.
Usage analytics. The app may send limited, structured events to our API (for example, event type, session identifier, country/scenario context, and whether a turn included an image) to understand how the product is used. These events may be written to server-side logs for operations, troubleshooting, and abuse prevention.
Permissions. The app may request access to your camera and photo library so you can attach images for wingman coaching. You can decline; some features will not work without them. Prior versions mentioned push notifications; the current build does not use push notifications. If we add them in a future release, we will update this policy and request permission in the app before collecting related data.
Device and app data. We may receive standard technical data (such as app version, OS type, and coarse error or performance signals) needed to run and secure the service.
3. How we use information
We may process your information for purposes that include (and build on prior versions of this policy):
- Create and manage your account.
- Authenticate users and keep sessions secure.
- Provide, operate, and improve Wingua (including AI coaching and phrase suggestions).
- Communicate with you (for example, support responses or important service notices).
- Protect against fraud, abuse, and security risk.
- Comply with legal obligations and respond to lawful requests.
- Protect vital interests where the law requires or permits.
- Enforce limits (such as photo quotas for free accounts) and process subscriptions / restore purchases.
4. Legal bases (where applicable)
If you are in the European Economic Area, the UK, or similar regions, we rely on one or more legal bases, such as: consent (where we ask for it), performance of a contract (to provide the service), legal obligations, vital interests (where applicable), and legitimate interests (for example security, product improvement, and fraud prevention—balanced against your rights). Where consent is the legal basis, you may withdraw consent; withdrawing may limit features that require that processing.
5. Sharing and subprocessors
We share information with service providers who help us run Wingua, including:
- Supabase — authentication and related backend infrastructure.
- OpenAI — processing text and images to generate coaching outputs.
- RevenueCat — subscription status and in-app purchase tooling.
- Cloud hosting (for example Fly.io or similar) — hosting our API and operational logs.
- Apple App Store / Google Play — distribution and payment processing for digital purchases.
These providers may process data on our instructions and subject to their own privacy terms.
No sale of personal information. We do not sell your personal information for monetary or other commercial consideration, including where “sale” is defined under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA).
Legal requests and protection. We may disclose information when we believe in good faith that disclosure is required by law, subpoena, court order, or governmental request, or to protect the rights, property, or safety of Wingua, our users, or others.
Business transactions. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction as permitted by law and subject to appropriate confidentiality and continuity commitments.
6. International transfers
We and our subprocessors may process information in the United States and other countries where we or they operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
7. Social sign-in
If you sign in with Apple or Google, we receive the identifiers and (where you allow it) email or name that those providers share with us through our authentication integration (Supabase). We do not offer Facebook or X (Twitter) login in the Wingua app.
8. Children and minimum age
Wingua is intended for people aged 16 and over. We do not knowingly collect personal information from anyone under 16, and the in-app experience (including AI-generated dating, nightlife, and bar/door coaching) is not designed or intended for children. Where local law sets a higher digital-consent age, that higher age applies.
If you believe a person under the minimum age has provided personal information to Wingua, contact us at hello@wingua.app and we will take appropriate steps to delete the account and any associated data.
Our services are not directed to minors who cannot lawfully consent on their own in their jurisdiction; eligibility and account rules are also described in our Terms of Service.
9. Security
We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is 100% secure; we encourage you to use a strong password and protect your device.
10. Your choices and rights
Depending on your location, you may have rights that include (where applicable by law):
- Access your personal data.
- Correct inaccurate data.
- Delete your data.
- Restrict processing.
- Data portability.
- Object to certain processing.
- Withdraw consent (where processing is based on consent).
To exercise these rights, contact support@wingua.app. You can also delete your account where the app provides that option (if applicable) or request account deletion by email.
You may submit a data subject access request (DSAR) through our Termly portal: app.termly.io/dsar/06644429-2fe7-43b1-a31c-87d03ec75039
Access, update, or delete. You may request to review, update, or delete your personal information by emailing support@wingua.app or using the DSAR link above.
11. Do Not Track
At this time, we do not respond to browser “Do Not Track” (DNT) signals in a uniform way, due in part to the lack of a consistent technical standard—especially for mobile apps. If industry practice changes, we will update this section.
12. Region-specific rights
Residents of certain U.S. states and other regions—including, where applicable, the European Economic Area (EEA), the United Kingdom, Switzerland, Canada, Australia, New Zealand, and South Africa—may have additional privacy rights under local laws. Nothing in this policy is intended to limit those rights where they apply. Use the contact and DSAR options in Section 10 to reach us.
13. California notice
If the California Consumer Privacy Act (CCPA/CPRA) applies, we do not “sell” or “share” personal information as those terms are defined for cross-context behavioral advertising. California residents may have additional rights described in Section 10; contact us to submit a request.
14. Changes
We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the “Last updated” date below. Material changes may be communicated in the app or by email where appropriate.
15. Contact
If you have questions about this Privacy Policy, contact Wingua at support@wingua.app.
Last updated: April 24, 2026