WingIt Privacy Policy

WingIt (“the app”) is a to-do app in which completing your own tasks helps carry a shared, animated migratory flock. This policy describes what data WingIt handles, where it lives, and what never leaves your device. It is written to be read; if anything here is unclear, write to us and we will answer plainly.

The short version

• Your tasks are private. No other user can ever see a task's text, its times, or whether you finished it. Fellow travellers only ever see your wind — anonymous, aggregate signals.
• We collect no advertising identifiers, run no ads, and sell no data.
• Deleting your account erases your data from our servers immediately. There is no retention window.

What WingIt stores, and where

On your device only

• Your app settings (sounds, reduce motion, snooze length).
• Whether you have seen the introduction.
• If you use WingIt without an account: everything — your tasks, reminders, and postcards live only on your device and never reach a server.

In your account (if you sign in)

Stored with our hosting provider, Supabase (PostgreSQL, with row-level security so only your authenticated session can read your rows):

• Your tasks (title, list, dates/times, repeat rules, completion state) — synced so your day survives a new phone.
• Your postcards (the app's weekly keepsakes: place names and shared distances — no personal content).
• Your account identity: the email address (and display name, if provided by Google sign-in) from the sign-in method you chose. Google sign-in shares only your basic profile (name, email); WingIt requests no other Google scopes.

Shared with everyone (always anonymous)

The flock is communal. What crosses between users is only the shape of effort, never its content:

• Distance released to the flock (a number added to a shared total).
• A “chirp” (an anonymous one-note signal; it carries nothing but the fact that it happened).
• An activity pulse (+1/−1 to a shared mood counter).
• A sky sponsorship window (a shared timestamp; attribution in the app is always anonymous — never a name or an amount).

None of these can be traced back to you by other users. Task content is never part of any shared signal.

What WingIt does not do

• No advertising, no ad identifiers, no third-party analytics SDKs.
• No selling, renting, or sharing of personal data with third parties for their own purposes.
• No reading of your contacts, location, photos, or files.
• No tracking across other apps or websites.

Notifications

If you set a task reminder, WingIt asks for Android's notification permission (and, where available, exact-alarm access so reminders land on time). Reminders are scheduled and shown locally on your device; their content never touches a server.

Data deletion

• Delete account (in Settings, while signed in): permanently erases your tasks, postcards, and account rows from our servers and your device, immediately. Distance already given to the flock remains in the shared total — they contain nothing personal.
• Delete data on this device (while signed out): wipes local data only.
• Sign out: clears this device; your account data remains and returns when you sign in.

Service providers

• Supabase hosts the database and authentication. Data is processed per their infrastructure security practices.
• Google provides optional sign-in. Its use of data is governed by Google's own policy.

Children

WingIt is not directed at children under 13 and knowingly collects no data from them.

Changes

If this policy changes, the “last updated” date changes with it, and material changes will be noted in the app.