Privacy Policy

Overview

Wingmate (“we”, “our”, “the app”) is an AI-powered confidence coaching application. We respect your privacy and are committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights.

Information we collect

When you sign in with Google, we receive and store:

• Your name, email address, and Google profile picture
• A unique user identifier provided by Google

We also collect:

• Your custom username and profile picture (if you set one)
• Your subscription status and plan details
• Usage counts (sessions used, messages sent) for managing free tier limits
• Daily check-in records (whether you checked in and your streak)
• Community posts, comments, and votes you create
• Roster entries you create — a private log of people you've approached, which may include a name or nickname, an optional photo, where you met, an attractiveness rating, how the approach went, contact and outcome status, dates of any meetups, and your own notes
• Product analytics events — for example which onboarding steps you complete and which features you use — to understand and improve the app

Google API Services disclosure

Wingmate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the Google data necessary to provide the service (basic profile information for authentication)
• We do not use Google data for serving advertisements
• We do not transfer Google data to third parties unless necessary to provide or improve the service, to comply with applicable law, or as part of a merger or acquisition with adequate data protection
• We do not use Google data for purposes unrelated to the functionality of Wingmate
• Human review of Google user data is limited to security purposes, investigating abuse, complying with legal obligations, or where the user has provided affirmative consent

Chat messages

Conversations with the AI coach are stored only in your browser's session storage and are deleted when you close the tab or start a new chat. Messages are sent to our AI provider for generating responses but are not stored on our servers after the session ends. We may use anonymized, aggregated usage statistics to improve the service.

Your roster

The roster is a private journal of people you've approached. It is visible only to you and is never shown to other users. Any photos you add are stored as small thumbnails tied to your account. When you request AI feedback on your roster, only anonymized, aggregated data is sent to our AI provider — such as attractiveness ratings, approach ratings, whether you got contact, and outcomes. Names, photos, and your written notes are never sent to the AI.

Analytics

We use PostHog to collect product analytics — anonymized, aggregated events about how the app is used, such as which onboarding steps are completed and which features are opened. We use this only to understand and improve the app, never to sell your data or serve advertising.

Payments

Payments are processed securely by Stripe. We never see or store your full card number, CVV, or billing address. We only receive confirmation of your subscription status. Stripe's own privacy policy applies to payment processing.

How we use your information

• To provide and personalize the coaching service
• To manage your account, subscription, and free tier usage
• To track your daily check-in streak and progress
• To display your community posts and profile to other users
• To improve the app experience based on anonymized, aggregated usage patterns

Data sharing

We do not sell your personal information to third parties. We share data only with the following service providers, strictly for operating the app:

• Supabase — authentication, database, and file storage
• Stripe — payment processing
• Anthropic / AI providers — chat responses and image analysis
• Vercel — hosting and content delivery
• Google — OAuth authentication
• PostHog — product analytics (anonymized feature-usage and onboarding events)

Data retention

We retain your account data for as long as your account exists. Chat messages are not retained beyond your browser session. When you delete your account, all associated data (profile, posts, comments, votes, check-ins, roster entries, usage records, and subscription records) is permanently deleted.

Your rights

You have the right to:

• Access your personal data through your profile page
• Update or correct your information (username, profile picture)
• Delete your account and all associated data at any time from your profile page
• Export your data by contacting us

Revoking access

You can revoke Wingmate's access to your Google account at any time by visiting your Google Account Permissions page and removing Wingmate. You can also delete your Wingmate account from your profile page, which will permanently remove all your data from our systems.

Children's privacy

Wingmate is intended for users aged 18 and older. We do not knowingly collect information from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly.

Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication (OAuth 2.0), and row-level security policies on our database. However, no method of transmission over the Internet is 100% secure.

Changes to this policy

We may update this policy from time to time. We will notify users of significant changes. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

If you have questions or concerns about this privacy policy or your data, please contact us at wingmatesupport@gmail.com.