Wyd? — Privacy Policy

Last updated: June 16, 2026

Wyd? ("the app", "we", "us") helps you mark the days you're free and find overlapping free time with friends and groups. We try to collect as little as possible. This policy explains what we collect, why, your choices, and your rights.

What we collect

• Username and password. You choose a username and password to create an account. We do not require your email, phone number, real name, or contacts. Passwords are handled by our authentication provider (Supabase) and stored only as a secure hash — we never see or store your password in plain text.
• Profile photo (optional). If you add a profile photo, we store the image. Photos are visible only to your accepted friends and people who share a squad (group) with you — they are not public.
• Your free days. The calendar days you mark yourself as free.
• Connections. Your friend requests/friendships and the squads you create or join.
• Activities and votes. Activity suggestions you create and the votes (in / maybe / out) you cast.
• Safety data. If you block or report someone, we record that block/report (including the reason you choose) so we can keep the app safe and act on abuse.

We do not collect your location, browsing history, advertising identifiers, or contacts, and the app contains no third-party advertising or analytics tracking SDKs. We do not use your photo for facial recognition or any biometric processing.

How we use it

Only to provide and protect the app's features: showing your free days and photo to people you've connected with, computing overlapping free days, running squad free-day heatmaps, activity voting, and handling blocks/reports.

Lawful basis (GDPR). We process your data to perform our contract with you (providing the service you signed up for) and, for safety data, on the basis of our legitimate interest in keeping the app free of abuse.

Who can see your data

Your free days, photo, activities, and votes are visible only to people you've connected with — accepted friends and members of squads you join. This is enforced at the database level with row-level security. We do not sell your data or share it with advertisers or data brokers.

Where it's stored

Data is stored with Supabase (PostgreSQL and object storage) hosted in the EU (Central Europe / Frankfurt). Access is restricted by row-level security policies; profile photos are served via short-lived signed links to your connections only.

How long we keep it

We keep your data while your account is active. When you delete your account, your data is removed (see below). Abuse reports may be retained for a reasonable period for safety and legal purposes.

Your rights

You can: access the data we hold about you, correct it, delete it, object to or restrict certain processing, and request a copy (portability). The quickest way to erase everything is in-app account deletion; for any other request, email us (below) and we'll respond within the timeframe required by law.

Deleting your account and data

You can delete your account from within the app (you → delete account). This permanently removes your profile, photo, free days, friendships, squad memberships, activities, and votes. You may also email us to request deletion.

Children

Wyd? is intended for users 13 and older (or older where your country's law requires — for example, parts of the EU require users to be 16, or to have verifiable parental consent, to consent to online services). The app is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests (including privacy/data-rights requests): contact@ali.photo