Privacy Policy
The short version
- Wouldy is for fictional characters. Please don't describe a real, identifiable person.
- To create a character, your interview answers go to Anthropic, an AI service, which writes the analysis. To answer your questions, the analysis and the question go to OpenRouter, which passes them to TypeSafe's AI decision model. We ask before the first time anything is sent.
- We store your account and characters on our server in the TODO: EU region until you delete them. You can delete a character or your whole account in the app.
- No ads, no tracking, no data brokers. We do not sell or share your personal information.
Who we are
Wouldy is operated by TODO: full legal name or company, TODO: postal address, Türkiye ("we"). We are the controller of the personal data described here. Contact: support@example.com.
EU representative (GDPR Art. 27): TODO: name, address and e-mail of the EU representative. You can contact them instead of us about anything in this policy.
What we process
| Data | Examples | Why |
|---|---|---|
| Account | An account id; if you use Sign in with Apple, Apple's user id and, only if you choose to share it, an e-mail address | To keep your characters yours and let you delete them |
| Character profile and interview | The name you give the character, optional details (age, occupation, city…), your answers to scenario questions, including anything you type | To build the character |
| Generated analysis | Personality scores, topic analysis, summary, the profile text used to answer questions | To answer your questions about the character |
| Questions and answers | What you asked, the structured question, the probabilities, the date | To show you the answer and your history |
| Usage limits and purchases | How many characters and questions you used today; subscription status from Apple | Fair use and billing |
| Technical data | IP address and request time in our server's access log; event type, ids, timings and costs in our application log. The application log never holds your answers, questions or the AI's text. | Security, abuse prevention, fixing errors |
| Crash reports | TODO: only if Sentry is adopted: device model, OS version, app version, the error. Otherwise only what Apple shares with developers when you opt in to share analytics. | Fixing crashes |
About real people. If you describe a real person anyway, their details become personal data that we have no basis to process. Please don't, and never enter health, religion, political, sexual-life or criminal details about anyone. If you tell us that a character describes you or someone else, we will delete it.
We do not collect contacts, location, photos, advertising identifiers or browsing history, and we do not track you across other companies' apps or websites.
Who receives data
We use these service providers (processors) under contracts that limit them to providing their service to us.
| Provider | Receives | Purpose and retention |
|---|---|---|
| Anthropic PBC, USA (Claude API) | Profile and interview answers; each question with the character's name, profile details and summary | Writes the analysis and turns your question into a structured question. Anthropic deletes API inputs and outputs within 30 days; content flagged by its automated safety systems may be kept for up to 2 years, and longer where the law requires. |
| OpenRouter, Inc., USA | The character's analysis (or the part relevant to the question) and the structured question | Routes the request to the decision model and bills it. OpenRouter does not keep prompts unless we opt in (we don't); it keeps request metadata such as token counts. We ask it to use only providers that keep no data ("zero data retention"). |
| TypeSafe (model provider behind OpenRouter) | Same as OpenRouter | Runs the "jev" decision model. Location: TODO: confirm country/region with OpenRouter. |
| TODO: hosting provider, TODO: country | Everything we store | Hosts our server, database and encrypted backups |
| TODO: Sentry (Functional Software, Inc.), EU data region, only if adopted | Crash reports | Error monitoring |
| Apple | Sign in with Apple, purchases, crash reports you agree to share | Apple acts under its own privacy policy |
We may disclose data if the law requires it or to protect users and the service. If Wouldy is ever transferred to someone else, this policy keeps applying to the data collected under it.
International transfers
Anthropic, OpenRouter and TypeSafe are outside the EU. Transfers to them rely on the European Commission's Standard Contractual Clauses (GDPR Art. 46) in their data processing terms; where a recipient is certified under the EU–US Data Privacy Framework we may also rely on that adequacy decision. Ask us for a copy of the relevant safeguards.
Legal bases (EU / EEA / UK)
- Performing our contract with you (Art. 6(1)(b)): your account, characters, analysis, questions and answers.
- Legitimate interests (Art. 6(1)(f)): security logs, abuse prevention, usage limits.
- Consent (Art. 6(1)(a)): optional crash reports. You can withdraw it at any time.
- Legal obligation (Art. 6(1)(c)): purchase and tax records.
How long we keep it
| Data | Kept |
|---|---|
| Characters, analysis, question history | Until you delete them or your account |
| Account | Until you delete it. Accounts unused for 12 months: we warn you, then delete them. TODO: confirm |
| Application log | 30 days |
| Server access log (IP addresses) | 14 days |
| Backups | 30 days, encrypted; deleted data leaves backups within 30 days |
| Purchase records | As long as tax law requires |
| At our providers | See "Who receives data" |
Deleting and exporting
- A character: character page → "…" → Delete. It is removed from our server, with its history, and from your phone.
- Your account: TODO: path to Delete Account in the app. Everything above is deleted. If you subscribe, cancel the subscription in your Apple ID settings first; Apple bills it, not us.
- Export: character page → "…" → Export gives the full character as a JSON file.
Your rights
Depending on where you live, you can ask to access, correct, delete, restrict or port your data, object to processing based on legitimate interests, and withdraw consent. Most of this works in the app; otherwise e-mail us. We answer within one month. You can complain to your data protection authority; in the EU, the authority where you live or work.
Türkiye (KVKK). Because we are established in Türkiye, Law No. 6698 also applies to us. Under its Article 11 you can learn whether and how your data is processed, who receives it at home and abroad, and ask for correction, deletion or compensation. Write to us; you may then apply to the Personal Data Protection Board.
United States. We do not sell or share personal information, and we do not use it for targeted advertising or profiling. You can still ask what we hold about you and have it deleted, wherever you live.
AI-generated content
Character analyses and answers are generated by AI models. They are estimates about a fictional character, can be wrong, and are not statements about any real person. Shared result images carry an "AI estimate" label.
Children
Wouldy is not for children under 13, and in the EU not for anyone under the age at which they can consent to online services in their country (13 to 16). We don't ask for your birth date. If we learn that a child has given us personal data, we delete it. Parents can contact us.
Security
HTTPS everywhere, per-user access tokens, encrypted storage and backups, access to production limited to the operator, and no user content in our logs. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Changes
We will post changes here and update the date above. If a change affects how your data is used, we will tell you in the app before it applies.
Local mode
Developer builds can run against a Wouldy server on your own computer. Characters are then stored only there; if that server uses the hosted AI services, the providers above receive the same data (a server set up for jev.ai sends what would otherwise go to OpenRouter to jev.ai instead). Nothing reaches us in local mode.