Wundau — Privacy Policy
Last updated: 2 July 2026
Wundau is a small app that lets a family check in each day so everyone knows
one another is doing OK. We built it with privacy as the default. This policy
explains, in plain language, what we collect, why, and the choices you have.
If anything here is unclear, email us at
support@warm-byte.com.
Who we are
“Wundau”, “we”, and “us” refer to the developer of the Wundau app. We are the
data controller for the information described below.
What we collect
- Account — your email address and display name, obtained
when you sign in with Google or Apple. We do not manage passwords.
- Content you create — your daily “appearances” (check-ins),
moods, text notes, and photos you choose to attach; your profile photo,
circle icon, and any custom monthly artwork you upload.
- Emergency contact (optional) — if you choose to set one,
the name, phone number, and email of the person you nominate. This is stored
encrypted and is only used to notify them if you are absent
for a period you configure.
- Push notification token — a device identifier used solely
to deliver the notifications you opt into.
- Device & session information — for the “logged-in
devices” feature and remote sign-out, we store, per device you use: a random
install identifier, the platform (iOS/Android), a friendly device name (which
may include a name you gave the device), the current session identifier, and
the time it was last seen. Only you can see this list, and you can sign any
device out from within the app.
- Subscription status — if you subscribe, purchase and
renewal status. This is handled by RevenueCat, which receives only an
anonymous identifier — never your email, name, family
content, or photos.
What we do NOT do
- We do not show ads or use advertising trackers.
- We do not sell or rent your personal data to anyone.
- We do not use your content to train AI or for any purpose other than
running the app for you and your family.
How we use your information
Only to provide the app: to show family members that each of you has appeared,
to display the notes and photos you share within your circle, to send the
notifications you turn on, to manage subscriptions, and to keep the service
secure and working.
Who can see your content
Content you add is visible to members of your family circle, according to the
per-item privacy choices you make in the app (for example, notes you mark as
private are visible only to you — not even to the circle owner). Access is
enforced server-side.
Service providers we use
We rely on a small number of processors, each only for the function listed:
- Supabase — application backend, database, and sign-in
(servers located in Tokyo, Japan).
- Cloudflare R2 — storage for photos, avatars, and icons.
- RevenueCat — subscription management (receives an
anonymous identifier only).
- Google and Apple — sign-in.
- Firebase Cloud Messaging and Apple Push
Notification service — delivery of push notifications.
Security
Access to data is restricted per user and per circle at the database level.
Photos are served through short-lived signed links. Emergency-contact details
are encrypted at rest.
Keeping and deleting your data
We keep your information for as long as your account exists. In the app you
can:
- Export your memories at any time (in Settings).
- Delete your account, which permanently and irreversibly
removes your data. You may wish to export first.
Children
Wundau is intended for family members using it with the consent of the family.
It is not directed to children under 13, and we do not knowingly collect
personal information from children under 13.
Your rights
You can access and export your data, and delete it, from within the app. For
any other request regarding your personal data, contact us at the address below.
Changes to this policy
If we make material changes, we will update the date above and, where
appropriate, notify you in the app.
Contact
Questions about your privacy? Email
support@warm-byte.com.