Privacy Notice

Who we are

WingWise is operated by Jack Harding ("we", "us" or the "operator"). Jack Harding is the data controller for the personal data collected through the WingWise app and website.

Contact us: jackharding930@gmail.com.

This page is maintained by Jack Harding to answer common privacy questions about WingWise.

What personal data we collect

• Identity and contact data: email address and any name you provide when you create an account.
• Authentication data: login credentials are handled by our authentication provider; we do not store plain-text passwords.
• Study data: quiz attempts, flashcard status, module progress, mock-exam results and other learning activity you generate while using the service.
• Support data: messages and attachments you send to our support team.
• Technical and usage data: IP address, browser and device type, operating system, pages visited, features used, dates and times, and cookies or similar technologies.
• Payment data: we do not collect or store card or bank details. Payment information is processed by our reseller Paddle. Please see Paddle’s privacy notice for how they handle payment data.

How we use your data and our legal basis

• To provide the service — create and maintain your account, sync your progress across devices, and deliver study content. Legal basis: contract performance.
• To process payments and subscriptions — billing, tax and invoicing through Paddle. Legal basis: contract performance and legal obligation.
• For security and fraud prevention — detecting abuse, unauthorised access and protecting our systems. Legal basis: legitimate interests.
• To improve the service — troubleshooting, analytics and product development. Legal basis: legitimate interests; where required, your consent for non-essential analytics.
• To respond to you — handling support requests and feedback. Legal basis: contract performance and legitimate interests.
• Marketing — we only send promotional emails where you have opted in. Legal basis: consent. You can withdraw consent at any time.

Who we share data with

• Hosting and backend providers (Lovable Cloud / our database and authentication platform) to store data and run the service.
• Analytics providers to help us understand how the app is used.
• Customer support tooling to manage enquiries.
• Paddle.com, our online reseller and Merchant of Record, for payment processing, subscription management, tax compliance and invoicing.
• Professional advisers (legal, accounting) under confidentiality obligations.
• Regulators and law enforcement when required by law or to protect our rights.

International transfers

Personal data may be transferred outside the UK and EEA by our subprocessors. When this happens, we ensure appropriate safeguards are in place, such as UK/EU Standard Contractual Clauses or adequacy decisions approved by the UK Secretary of State or the European Commission.

Data retention

We keep your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 12 months, unless a longer retention period is required for legal, tax or accounting purposes (up to 6 years). Some data may remain in backups for a short period before being permanently removed.

Your rights

Under UK and EU data protection law you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of your personal data (“right to be forgotten”).
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise your rights, email jackharding930@gmail.com. We aim to respond within one month.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security reviews. No online service can be guaranteed completely secure, so please keep your account credentials safe.

Cookies and similar technologies

We use essential cookies to keep you signed in and secure the service. Where permitted, we use analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

Changes to this notice

We may update this Privacy Notice from time to time. Changes will be posted on this page with an updated effective date. Significant changes will be notified to users by email or through the app.

Contact us

For privacy questions or to exercise your rights, contact Jack Harding at jackharding930@gmail.com.