Privacy Policy
Last updated: October 12, 2026
Wingman AI (“Wingman”) is published by Perch Labs, an individual developer based in Kenya and not an incorporated company (“Perch Labs”, “we”, “us”). We are the data controller for the personal data described here. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices you have. By using the app you agree to this policy.
1. Who can use Wingman
Wingman is for people aged 18 or older. You enter your age during setup, and the app and our servers refuse ages under 18. We do not knowingly collect information from anyone under 18. If you believe a minor has used the app, contact us and we will delete the data.
2. Information we handle
| Information | Why | Where it lives |
|---|---|---|
| Account details: your name, email address and profile photo from Google or Apple when you sign in | To create and secure your account and show it in Profile | Handled by our sign-in provider (Clerk). A copy of your name, email and username is also kept in our Supabase project’s authentication list so the account can be matched to your data. |
| Profile preferences: your gender, your age, the other person's age, relationship stage, goals and personality | To personalize suggestions | On your device and in our database (Supabase), linked to your account so they follow you to a new phone. Sent with a request so the AI can tailor its reply. |
| Setup answer: where you heard about Wingman (optional, you can skip it) | To understand how people find Wingman | On your device and in our database, linked to your account. Not sent to the AI with your messages. |
| Messages you type and screenshots you upload | To generate reply suggestions | Sent through our backend to Google’s Gemini AI service when you tap Generate. We do not save the text of your messages or your screenshots in our database or logs. |
| Saved favorites: replies you tap the heart on, with their style and time | So you can find replies later and on a new phone | On your device and in our database, linked to your account. |
| Usage stats: number of replies generated and the days you were active | To show your progress in Profile | On your device and in our database, linked to your account. |
| Free and AI usage records: your account ID with the time of each AI request, a lifetime count of free generations used, and, for each AI call, the model used, whether a screenshot was attached, token counts and its cost | To apply the free allowance and fair-use limits, prevent abuse and track our AI costs | Our database (Supabase), linked to your account. Request times are cleaned up after about 31 days. The free-generation count and cost records are kept while your account exists; on deletion the count is erased and cost records lose the link to you. |
| App activity events: a small set of first-party events such as paywall viewed, purchase started or failed, restore failed, reply copied (with its style), Discover deck opened, a successful generation (with timing) and app errors | To fix problems, understand what is used and keep the paywall and purchases working | Our database (Supabase), linked to your account ID. On account deletion the link to you is removed. We do not use any third-party analytics, advertising or tracking SDK and we do not use advertising identifiers. |
| Feedback you choose to send (optional): the topic, your short message, an optional star rating, the app version and your phone's platform (iOS or Android) | To understand what to fix and improve | Our database (Supabase), linked to your account and erased when you delete your account. Please do not include passwords or personal details; we mask emails and phone numbers we spot. |
| Reported replies: if you report a reply, your phone opens a pre-filled email to us | To review unsuitable suggestions | Sent from your own email app, so it includes whatever you choose to send. Kept in our support inbox. |
| Subscription information: your plan, store, status, whether you are in a free trial, renewal state and expiry date | To unlock Pro and apply the right limits | Handled by Apple or Google (payment), RevenueCat (subscription management, identified by your account ID) and a copy in our database (Supabase). We never see your card number. |
| Daily reminder (optional): whether it is on, and the notification permission you gave | To remind you on days you have not opened the app | On your device only. Reminders are scheduled locally by your phone; no server sends them and we do not collect anything for them. |
3. Photos and screenshots
Wingman only asks for photo access when you choose to upload a chat screenshot, and only the image you pick is used. We send it to the AI service to read the conversation and suggest replies. Screenshots may include other people's messages; please only upload conversations you are comfortable sharing and that you are entitled to share.
4. How we use information
- To generate reply suggestions, openers and conversation ideas.
- To personalize results to your preferences.
- To apply the free allowance, fair-use limits and subscriptions, and to provide support.
- To keep the service secure, prevent abuse and fix errors.
- To understand, in aggregate, how the app is used so we can improve it.
We do not sell your personal information, we do not use your conversations for advertising, and we do not use your messages or screenshots to train our own AI models.
5. Who we share it with
We share data only with service providers that help us run Wingman. They may only use it to provide their service to us:
- Clerk: sign-in and account management (including Google and Apple sign-in).
- Supabase: our database and the servers (Edge Functions) that run the app's backend.
- Google (Gemini API): turns your messages, screenshots and profile preferences into reply suggestions. Google handles that content under its own Gemini API terms and privacy policy.
- RevenueCat, Apple and Google Play: subscriptions, free trials and payments.
We may also disclose information if the law requires it or to protect rights and safety. Like any online service, these providers receive technical data such as your IP address and device type when your phone connects to them.
6. How long we keep it
- Data on your device stays there until you delete it or uninstall the app.
- Account, profile, favorites, stats, subscription copy and feedback: kept until you delete your account.
- Request times: cleaned up after about 31 days.
- AI cost records and app activity events: kept without a link to you after you delete your account.
- Messages and screenshots: not stored by us. Google processes them to return your replies, under its own retention rules.
- Purchase records held by Apple, Google and RevenueCat follow their own retention rules and legal obligations.
- Encrypted backups made by our database host may keep deleted data for a short time before they expire.
7. Your choices and rights
- Edit or clear your preferences any time in Profile.
- Delete favorites inside the app, or permanently delete your account with Profile → Delete account & data (step-by-step guide). This deletes your sign-in account and erases your profile, saved replies, stats, usage and subscription records and feedback from our database, and clears everything stored on your device. You can also sign out at any time from Profile. Deleting your account does not cancel a subscription; cancel in your App Store or Google Play settings.
- Turn the optional daily reminder on or off in Profile, or in your device's notification settings.
- Revoke photo access in your device settings.
- Under the Kenya Data Protection Act, 2019 (and similar laws where you live, such as the EU/UK GDPR or California law) you may have the right to be informed about, access, correct, delete, receive a copy of and object to the processing of your personal data. Email us to exercise them. If you are in Kenya and are unhappy with our response, you may complain to the Office of the Data Protection Commissioner.
8. Security
Data travels over encrypted (HTTPS) connections. Our database is locked down so the app cannot read other people's data: only our backend, after verifying your sign-in, can read or write it. No method of transmission or storage is 100% secure.
9. International transfers
Our providers (Clerk, Supabase, Google, RevenueCat, Apple) may process data in countries other than your own, including outside Kenya. Where required, we rely on appropriate safeguards.
10. Changes
We may update this policy. We will change the date above and, for significant changes, notify you in the app.
11. Contact
Perch Labs
Email: perchlabs20@gmail.com