Privacy Policy

Overview

Wingmate (“we”, “our”, “the app”) is an AI-powered confidence coaching application. We respect your privacy and are committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights.

Information we collect

When you sign in with Google, we receive and store:

• Your name, email address, and Google profile picture
• A unique user identifier provided by Google

We also collect:

• Your custom username and profile picture (if you set one)
• Your subscription status and plan details
• Usage counts (sessions used, messages sent) for managing free tier limits
• Daily check-in records (whether you checked in and your streak)
• Community posts, comments, and votes you create

Google API Services disclosure

Wingmate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the Google data necessary to provide the service (basic profile information for authentication)
• We do not use Google data for serving advertisements
• We do not transfer Google data to third parties unless necessary to provide or improve the service, to comply with applicable law, or as part of a merger or acquisition with adequate data protection
• We do not use Google data for purposes unrelated to the functionality of Wingmate
• Human review of Google user data is limited to security purposes, investigating abuse, complying with legal obligations, or where the user has provided affirmative consent

Chat messages

Conversations with the AI coach are stored only in your browser's session storage and are deleted when you close the tab or start a new chat. Messages are sent to our AI provider for generating responses but are not stored on our servers after the session ends. We may use anonymized, aggregated usage statistics to improve the service.

Payments

Payments are processed securely by Stripe. We never see or store your full card number, CVV, or billing address. We only receive confirmation of your subscription status. Stripe's own privacy policy applies to payment processing.

How we use your information

• To provide and personalize the coaching service
• To manage your account, subscription, and free tier usage
• To track your daily check-in streak and progress
• To display your community posts and profile to other users
• To improve the app experience based on anonymized, aggregated usage patterns

Data sharing

We do not sell your personal information to third parties. We share data only with the following service providers, strictly for operating the app:

• Supabase — authentication, database, and file storage
• Stripe — payment processing
• Anthropic / AI providers — chat responses and image analysis
• Vercel — hosting and content delivery
• Google — OAuth authentication

Data retention

We retain your account data for as long as your account exists. Chat messages are not retained beyond your browser session. When you delete your account, all associated data (profile, posts, comments, votes, check-ins, usage records, and subscription records) is permanently deleted.

Your rights

You have the right to:

• Access your personal data through your profile page
• Update or correct your information (username, profile picture)
• Delete your account and all associated data at any time from your profile page
• Export your data by contacting us

Revoking access

You can revoke Wingmate's access to your Google account at any time by visiting your Google Account Permissions page and removing Wingmate. You can also delete your Wingmate account from your profile page, which will permanently remove all your data from our systems.

Children's privacy

Wingmate is intended for users aged 18 and older. We do not knowingly collect information from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly.

Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication (OAuth 2.0), and row-level security policies on our database. However, no method of transmission over the Internet is 100% secure.

Changes to this policy

We may update this policy from time to time. We will notify users of significant changes. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

If you have questions or concerns about this privacy policy or your data, please contact us at keugenelee11@gmail.com.