Privacy policy

Information we collect and how we use it

Account information. When you sign in with Apple, Google or email, we receive your email address, an account identifier and any name your sign-in provider shares. Supabase handles authentication. We use these details to sign you in, secure your account and restore your data on a new phone.

Your answers. During setup you can give your first name and age and answer questions about your skin (type, sensitivity, how it feels, sun response, past reactions, products you use, your concerns and goals), your treatment (for example isotretinoin or tretinoin, and for how long), skin conditions a doctor has diagnosed, and your lifestyle (exercise, sleep, stress, water, food and drink, smoking). You can also add short notes and daily check-ins (sleep, stress, water, sun, picking). Some of this is health information. We use it only to describe your scans, write your routine and habits, and match products to your skin.

Photos and scan findings. Wend collects the face photos you take for scans and any product label photos you take to add a product. From each scan Wend saves the findings: skin scores, notes and the plan written for you. Face photos and skin findings may be sensitive information. We use them to provide the features you choose, never for advertising.

Your routine and activity. We store your routine products, habits, which steps you marked done, your streak, reminder times and preferences, so the app works and your data follows you to a new phone.

Purchases and referrals. Apple processes App Store payments. Superwall provides subscription screens and subscription status and receives your account identifier, purchase status, and the device and interaction information needed to run those screens. We never receive payment card details. Sharing an invite uses the iOS share sheet; Wend does not collect your contacts.

Service and support information. Hosting and authentication providers process network information such as IP addresses, request times and errors to deliver and secure the service. Our server records how many scans each account runs per day to enforce limits. If you contact us, we use what you send to answer you.

Face scans: what is shared and with whom

Before a scan, face positioning and photo quality checks run on your device using Apple's on-device frameworks. Nothing leaves your phone for those checks.

When you take a scan, Wend sends that one face photo, together with what the analysis needs (your setup answers on your first scan; afterwards your previous scores, your treatment and week, your routine and that day's check-in), through our server hosted by Supabase to Anthropic, the provider of the Claude AI model. Claude describes visible skin concerns and returns findings and a plan. The request does not include your name, email or account identifier. Supabase uses your account credentials to authenticate the request; those credentials are not forwarded to Anthropic. The photos themselves can be identifying.

Our server passes the photo through and does not log or keep it. Wend does not use face photos for identity recognition, does not create a biometric identity template, and does not compare your face with anyone else's. A scan is not a medical diagnosis and not a rating of your looks.

Product label photos are sent the same way, so Claude can read the product name and ingredients. Everything visible in that photo may be processed.

AI retention, training and your choices

Anthropic's commercial API does not use customer inputs or outputs to train its models by default, and we do not permit your photos or answers to be used for training. Under Anthropic's standard API retention policy, inputs and outputs are deleted within 30 days. Longer retention may apply for enforcing its usage policies or complying with law; for flagged policy violations, Anthropic states inputs and outputs may be kept for up to two years and safety classification scores for up to seven years. See Anthropic's retention policy, its commercial training policy and its data processing addendum.

Scanning is your choice each time: nothing is sent until you take a scan or a product photo. You can stop at any time by not scanning, and delete what is stored as described below. Stopping cannot recall a request already sent or shorten Anthropic's retention period.

Where your data is stored

Your scans, photos, answers, routine and habits are kept on your iPhone, in Wend's private app storage with iOS file protection. Wend never saves them to your photo library. When you are signed in, the same data syncs to your account through Supabase: photos in a private storage bucket under your account, and the rest in a private record. Access rules allow only your own account to read or change them. That is how your history comes back on a new phone. Device backups may include app data according to your iOS settings.

Who receives your information

We do not sell personal information, show ads, or track you across other companies' apps or websites. We share data only with the providers needed to run Wend:

No other third party receives face photos. We require providers that process personal data for us to protect it as this policy does, use it only to provide their service, and help with deletion requests. We may disclose information when required by law or to protect rights and safety, or to a successor in a merger or acquisition subject to these protections. Wend has no social features and never shows your photos or findings to other people.

How long we keep it, and deleting it

We keep your photos, findings and answers for as long as you have your account. To delete everything, open Settings in the app and choose Delete account. That removes your sign-in account, every synced photo and record, and your usage counts from our servers, and erases the data on that iPhone. We do not keep photos after you delete them. Signing out keeps your data in your account so you can sign back in. To delete specific scans or data without deleting your account, email us and we will do it for you.

Copies already sent to Anthropic follow its retention policy above. Hosting backups expire on the provider's schedule. We may keep information the law requires, or that we need for security or to resolve disputes. Deleting your account does not cancel an App Store subscription; manage that in your Apple subscription settings.

Device access

Camera access lets you take face scans and product photos. You can turn it off in iOS Settings at any time. Notifications are used for the reminders you set. Wend does not request location, contacts or calendar access.

Security and international processing

We use encryption in transit, iOS file protection and account access rules for private synced data. No method of storage or transmission is completely secure. We are based in the United States, and our providers may process information in the United States and other countries where they operate, with appropriate safeguards where required.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your information, restrict or object to processing, withdraw consent, and complain to a data protection authority. Contact us to use them. We will not treat you differently for doing so. In the EEA and UK, our legal bases are providing the service you ask for, our legitimate interest in running and securing it, legal obligations, and your explicit consent for face photos and health information, which you can withdraw by stopping scans and deleting your data. California residents may have additional rights under the CCPA and CPRA. We do not sell or share personal information for cross-context behavioral advertising.

The wend.co skincare account

If you use the skincare tools on wend.co, we save your email, skin type, concerns, notes, product experiences, ingredient lists and avoid list in Supabase. Ingredient comparisons run on our server and are not sent to an AI provider. The website uses essential sign-in cookies and no advertising trackers. You can export or clear this data from Your account on the website.

Age, changes and contact

Wend is for adults 18 and over. We do not knowingly collect information from anyone younger; contact us if you believe a minor has used Wend and we will delete it. We may update this policy as Wend changes and will tell you about material changes in the app or by another appropriate means before they apply.

Questions, deletion requests or privacy concerns: Awen Labs, Inc., wendcoapp@gmail.com.