Privacy Policy

1) Information we collect

A) Information you provide

We collect information you choose to provide, such as:

• Account information: email address and authentication details needed to sign in
• Journal content: entries, titles, tags, moods, prompts, attachments (if you upload any), edits
• Sharing content: content you choose to share via links or exports
• Support messages: communications you send to us

B) Information collected automatically

We may collect:

• Device & app info: device type, OS version, app version, language, time zone
• Usage data: features used, interaction events, timestamps (to understand performance and improve UX)
• Diagnostics: crash logs and error reports
• Identifiers: internal user ID; push notification token (if you enable notifications)
• Network info: IP address may be processed by our systems and service providers for security and fraud prevention

C) Payments (if subscriptions launch)

If we introduce subscriptions and you purchase via iOS, Apple processes the payment. We may receive limited purchase-related information such as subscription status and transaction identifiers to provide access and customer support.

2) How we use information

We use personal data to:

• Provide, operate, and maintain the Service (account, syncing, saving entries)
• Enable features you request (including AI Features)
• Improve reliability and safety (debugging, security, abuse prevention)
• Communicate with you (support, security notices, service updates)
• Comply with legal obligations and enforce our Terms

3) AI Features and what gets shared

When you use AI Features:

• We may send relevant excerpts of your journal entries and context to AI providers like OpenAI and Anthropic to generate the response.
• If you use external assistant workflows (e.g., "remember this" / "search my journal"), those platforms may transmit requests to our service and receive results you authorize.

We encourage you not to include highly sensitive personal information in prompts you do not want processed by third-party providers. Third-party providers process data under their own terms and privacy policies, and under agreements (where applicable) with us.

4) Where your data is stored (Supabase)

We store app data using Supabase, a cloud database and backend platform. Your data may be stored and processed in the United States and/or other countries depending on the infrastructure configuration. We use reasonable safeguards designed to protect data during transfer and processing.

5) How we share information

We do not sell personal information or journal content.

We may share limited information with:

• Service providers (processors): hosting, databases, storage, analytics/diagnostics, email delivery, customer support tooling (only as needed to provide the Service)
• AI providers: when you use AI Features (as described above)
• Legal and safety: if required by law, subpoena, court order, or to protect rights, safety, and security
• Business transfers: if Wonderfarm is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction (subject to appropriate safeguards)

6) Data retention

We keep information for as long as needed to provide the Service and for legitimate business purposes such as security and compliance.

• Journal content: retained until you delete it or request account deletion
• Account data: retained while your account is active
• Logs/diagnostics: retained for a limited period as needed for security and troubleshooting

Backups may retain deleted data for a limited time before being overwritten.

7) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information (e.g., encrypted connections, access controls, and least-privilege access). No security system is perfect; we cannot guarantee absolute security.

8) Your choices and rights

A) In-app controls

Where available, you can:

• Create, edit, delete entries
• Export entries (data portability)
• Create/revoke share links (if supported)
• Manage notifications

B) Account deletion (Right to Erasure)

You can request deletion of your account and associated journal data by emailing hi@wonderfarm.app with the subject line "Account Deletion". We may ask you to verify ownership of the account. We will complete deletion within a reasonable timeframe and may retain limited information as required by law or for security/fraud prevention.

C) GDPR / EEA-UK rights

If you are located in the EEA or UK, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Restrict or object to certain processing
• Data portability
• Lodge a complaint with your local Data Protection Authority

To exercise these rights, email hi@wonderfarm.app.

D) U.S. state privacy rights

Depending on your U.S. state, you may have rights to access or delete personal information, or to appeal certain decisions. We do not sell personal information.

9) Children's privacy

The Service is not intended for children under 13. If you believe a child under 13 provided personal data, contact hi@wonderfarm.app and we will take appropriate steps.

10) Tracking and advertising

We do not use your journal content for targeted advertising. If we ever implement tracking as defined by Apple (e.g., tracking across apps and websites owned by other companies), we will comply with App Tracking Transparency requirements and request permission where required.

11) Third-party links and integrations

If the Service links to third-party sites or you connect third-party integrations, those third parties' privacy policies apply to their services.

12) Changes to this Privacy Policy

We may update this Privacy Policy. If changes are material, we will notify you in the app and/or by email. The "Last Updated" date reflects the latest version.