Wickfy Privacy Notice
Last updated: date
This notice explains what personal data we collect when you use Wickfy, why we use it, who we share it with, and the rights you have. We keep it plain and short. If anything is unclear, email us.
1. Who we are
Wickfy is run by Assan Traore, trading as Wickfy, based in London, UK. We are the "controller" of your data. That means we decide how it is used and we are responsible for it.
- Address: business address, from the address service
- Privacy email: hello@wickfy.com (put "Privacy" in the subject)
- ICO registration number: ICO registration number
We have not appointed a data protection officer, because we do not need one at our size. You can contact us about anything in this notice using the privacy email.
EU representative. EU representative. If you appoint one, give their name and contact details here. If not, delete this paragraph. Lawyer to advise.
2. The data we collect
Data you give us
- Your email address, when you sign up with email or save a guest account with an email.
- Your password, if you sign up with email. Our sign in provider stores it in a protected (hashed) form. We cannot see it.
- Your tick confirming you are 18 or over at sign up.
- Messages you send us, for example support or complaints.
- Your choices, for example whether you want marketing emails.
- Your email address, if you join the waitlist on wickfy.com. We keep it to tell you when Wickfy launches. Kit sends these emails for us.
Data we get from Google
Google sign in is coming soon. Once it is ready, if you sign in with Google, Google will send us your name, your email address and your profile photo. confirm which Google profile fields you actually request and store Google will be the source of this data.
Data from using Wickfy
- Your progress: lessons and simulations played, answers, scores, streaks, Energy, levels and rewards.
- Your username. We give you a preset or generated username. You cannot type your own.
- Basic technical data: device type, browser, app version, rough location from your IP address (country or city level), and error logs.
We use no analytics right now. If we add it, we will update this notice first.
Data about payments
- If you buy on the web, Stripe takes your payment. Stripe handles your card. We never see or store your full card number. Stripe shares limited details with us, like card type, last 4 digits and billing country, along with your plan, payment status and renewal dates, so we can help with payment questions.
- If you buy in the iPhone or Android app, Apple or Google takes your payment. They tell us whether you have Pro and when it renews. We do not get your card details.
- Records of what you saw and agreed to at checkout, including the "start Pro now" box and the trial and renewal terms.
Guest accounts. You can play Wickfy as a guest without giving us an email. When you do, we create a guest account for you. You can even buy Pro as a guest. To keep your progress or Pro, you save your account with an email address.
Data you must give us. You do not need an email address to play as a guest. You need one to save your account. Everything else is optional or comes from using the app.
We do not collect sensitive data, like health data, and we do not ask for it.
3. Why we use your data, and our legal reasons
The law says we must have a legal reason (a "lawful basis") for each use.
| What we do | Data used | Legal reason |
|---|---|---|
| Create and run your account, sign you in | Email, name, Google profile, password, username | Contract: we need it to give you Wickfy |
| Save your progress, streaks and Energy | Progress data | Contract |
| Sell Pro, take payment, give you access | Payment and plan data | Contract |
| Send service emails: receipts, trial ending reminders, renewal reminders, cancel confirmations, important changes | Email, plan data | Contract, and legal obligation (consumer law requires some of these emails) |
| Keep records of payments and of what you agreed to at checkout | Payment and consent records | Legal obligation (tax and consumer law) |
| Check your age at sign up | Age answer | Legitimate interests: keeping Wickfy for adults, and legal obligation |
| Keep Wickfy and your account safe, stop cheating and fraud, fix bugs | Technical data, logs, progress data | Legitimate interests: keeping Wickfy safe and working |
| Answer your messages and complaints | Your messages, email | Legitimate interests: helping you, and legal obligation for privacy complaints |
| Send marketing emails about new features and offers | Consent. You can say no at any time lawyer to confirm consent versus the "soft opt in" for existing customers | |
| Tell you when Wickfy launches, if you join the waitlist | Consent. You can unsubscribe at any time |
Our legitimate interests, in plain words
- Keeping Wickfy safe: we protect accounts, stop abuse and keep the service running.
- Keeping Wickfy for adults: Wickfy is for people aged 18 and over.
- Helping you: we read and answer what you send us.
You can object to these uses. See section 8.
4. Who we share your data with
We do not sell your data. We do not use ad networks or ad tracking pixels.
We share data only with companies that help us run Wickfy. They act on our instructions and must keep your data safe.
| Company | What they do for us | Where | Safeguard |
|---|---|---|---|
| Supabase | Accounts, database and server functions | Ireland (European Union) | Supabase data terms and transfer safeguard |
| Sign in with Google (coming soon) | country | safeguard | |
| Stripe | Web payments, receipts and billing emails | country | safeguard |
| Apple | iPhone app and in app purchases (later) | country | safeguard |
| Google Play | Android app and in app purchases (later) | country | safeguard |
| Kit | Waitlist and marketing emails | country | safeguard |
| Cloudflare | Hosting the website and waitlist | country | safeguard |
If you sign in with Google once it is ready, or buy through Apple or Google, they also use your data under their own privacy policies.
We may also share data if the law requires it, to protect people from harm or fraud, or if Wickfy is sold or merged. If that happens, we will tell you.
5. Sending data outside the UK
Some of these companies store or access data outside the UK.
- EU countries. UK law treats EU countries as safe, so no extra steps are needed.
- The United States. We only send data to a US company if it has signed up to the UK Extension to the EU US Data Privacy Framework, or if we have signed standard contract terms with it approved under UK law (the IDTA or the UK Addendum).
The table in section 4 shows the safeguard for each company. You can ask us for a copy of these safeguards by emailing hello@wickfy.com.
lawyer to check each company's data terms and fill in the right safeguard name
6. How long we keep your data
| Data | How long |
|---|---|
| Account and progress | Until you delete your account, then deleted within 30 days |
| Backups | Deleted on a rolling basis within 30 days of deletion |
| Payment and tax records | period, usually 6 years for tax, lawyer or accountant to confirm |
| Checkout consent records (what you saw and agreed to) | 3 years |
| Support messages and complaints | 2 years after we close the matter |
| Marketing email preferences | Until you unsubscribe, then we keep just your email on a "do not email" list |
| Accounts with no activity | Closed after 2 years with no sign in. We email you a warning first. |
7. Deleting your account
You can delete your account at any time. Go to Account, then tap Delete my account. If you pay for Pro on the web, you need to cancel Pro first. You can also use our web page at web address of the delete account page. We then delete your account and data as set out above. If you pay through Apple or Google, please cancel your subscription in the store first.
8. Your rights
You have the right to:
- See your data. Ask for a copy of the data we hold about you.
- Correct your data. Ask us to fix anything wrong.
- Delete your data. Ask us to erase it.
- Limit how we use it. Ask us to pause using your data in some cases.
- Object. Say no to us using your data for our legitimate interests, and say no to marketing at any time.
- Move your data. Ask for your data in a common format to take somewhere else.
- Withdraw consent. Where we rely on your consent, like marketing emails or the waitlist, you can change your mind at any time. Use the unsubscribe link in any email. This does not affect what we did before.
To use any of these rights, email hello@wickfy.com. We will reply within one month. We may ask you to confirm who you are first.
9. Privacy complaints to us
If you are unhappy with how we handle your data, please tell us first. Email hello@wickfy.com with "Privacy complaint" in the subject. You get an automatic reply so you know it arrived.
- We will reply in full within one month.
- We will look into it without delay.
- We will tell you what we found and what we are doing about it.
10. Complaining to the regulator
You also have the right to complain to the UK data protection regulator, the Information Commission (ICO).
- Website: ico.org.uk check the website and phone number after the Information Commission rename
- Phone: 0303 123 1113
If you live in the EU, you can also complain to the data protection authority in your country.
11. Automated decisions
We do not make any decisions about you by computer alone that have a legal or similarly serious effect on you. Scores, streaks, levels and Energy are worked out automatically, but they are part of the game and do not affect your rights.
12. Age and children
Wickfy is for people aged 18 and over. It is not made for children. We ask your age at sign up. We do not knowingly collect data from anyone under this age. If we find out we have, we delete it and close the account. If you think a child is using Wickfy, please email us.
13. Cookies
We use a small number of cookies and similar tools. Our Cookie notice explains them.
14. Keeping your data safe
We use sensible security, including encryption when data travels, access controls and trusted providers. No system is perfect. If something goes wrong that puts you at risk, we will tell you and the regulator when the law requires it.
15. Changes to this notice
We may update this notice. If the change is important, we will tell you by email or in the app. The date at the top shows when it last changed.
lawyer to check this notice against the ICO's updated guidance under the Data (Use and Access) Act 2025