This Privacy Policy describes how Wivit ("we," "us," or "our") collects, uses, and protects your information when you use the Wivit iOS application and website at https://www.wivit.app.
1. Data we collect
We collect the following categories of data:
- Apple ID identifier, for authentication (retained for account lifetime)
- Display name, for your profile (account lifetime)
- Email, if provided by Apple, for account recovery and deletion requests (account lifetime)
- Timeline content, photos, notes, and entries you add (Space lifetime)
- Place tags, the name and map coordinates of a place you search for and attach to a Moment yourself (Space lifetime)
- Timezone, for accurate reminders (account lifetime)
- Notification tokens, for push notifications (account lifetime)
- Subscription status, for access control (transaction lifetime plus legal minimum)
- Analytics events, for product improvement (up to 12 months)
Wivit never asks for or accesses your device's location. The app holds no location permission and cannot see where you are. A place is stored only when you type its name, pick it from the search results, and save it to a Moment; the coordinates come from a public places directory so the Moment can be shown on a map.
2. How we use data
- Provide the shared Timeline service
- Send task and reminder notifications
- Process and verify subscriptions
- Improve the product through analytics
3. Who can access your data
Space members can access content shared within that Space. We do not sell personal data. Service providers that process data on our behalf include:
- Supabase (database and storage)
- Fly.io (hosting)
- Apple (authentication and billing)
- Google/Firebase (push notifications and analytics)
- Google Places (place search). When you search for a place, our server forwards the text you typed to Google Places on your behalf. Your IP address and account are not shared with Google.
4. Data retention
- Active accounts: data retained while your account is active
- Trial / unsubscribed Spaces: if a Space is created and no active subscription is started within 14 days, the Space and its content may be permanently deleted
- Deleted accounts: identity removed within a 14-day grace period; contributions anonymized in shared Spaces
- Space deletion: 14 days after the owner ends a Space, then permanent deletion
- Compliance records: a minimal record of deletion and export requests is kept after the account is gone (see below)
Records of deletion and export requests
When you ask us to export or delete your data, we log that request and the action we took on it. Each entry holds the date and time, the type of request, the internal account identifier, and the IP address and device description the request was made from. These entries cannot be edited or removed once written, including by us.
We keep them after the account itself is deleted, and we rely on our legitimate interest in being able to show that a request was received and carried out. Without such a record we could not answer a later dispute over whether a deletion was requested or completed, nor demonstrate compliance to a data protection authority. The record is retained for three years and then deleted.
These entries contain no Timeline content, photos, notes, names, or email addresses, and they are never used to contact you, to profile you, or for any purpose other than the one described here.
5. Your rights (GDPR / CCPA)
- Access / portability: In-app data export is available with an active Wivit Premium subscription. If you cannot export in the app, email privacy@wivit.app and we will handle verified requests within applicable legal timeframes.
- Deletion: Delete Account in Settings or email privacy@wivit.app
- Correction: Edit your profile in Settings
- Objection: Contact privacy@wivit.app
6. Account deletion
In the app: Settings → Delete Account. Your request enters a 14-day grace period during which you may cancel.
By email: If you cannot access the app, send an email to privacy@wivit.app from your Apple ID email address. We will verify your identity and process your deletion request within 30 days.
7. Shared content after deletion
Content you shared in a Space with another member becomes part of shared history. Upon account deletion, your name will be replaced with "Deleted User" on shared content. Your personal information will be permanently removed, apart from the request record described in section 4.
8. Children's privacy
Wivit is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect data from children.
9. Contact
- Privacy: privacy@wivit.app
- Support: support@wivit.app
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the app and on this page. Continued use after changes constitutes acceptance of the updated policy.