Wando
Privacy Policy
Effective date: 27 September 2026
Wando is a travel-language app operated by Pocket Labs LLC ("we", "us"). This policy describes what the Wando iOS app and its supporting services collect, why, and who else receives it.
We do not sell your personal information, we do not share it for advertising, and the app contains no third-party analytics or tracking SDKs of any kind.
1. What we collect
Account information
When you sign in with Apple or Google we receive, and store on our servers, your name, email address and an account identifier. If you choose *Continue as guest* we create an anonymous account identifier and receive no name or email.
We also store the preferences you set in the app (coaching style, voice, display options, daily goal).
Trip answers and lesson content
The questions you answer when building a trip — destinations, dates, who you are travelling with, activities, dietary needs, your level, and any free text you write — and the lesson plan generated from them are stored on your device, in the app's private storage. They are not stored on our servers.
They are transmitted to our plan-generation service, and on to OpenAI, at the moment a plan is generated or lessons are added. See section 2.
Voice practice
When you start a voice conversation and grant microphone permission, your microphone audio is streamed live to the AI providers listed in section 2 so the conversation can happen in real time. Transcripts of what you and the coach said are produced, shown to you in the app, and used to grade the session.
Audio and transcripts are held on your device for the session and its report. We do not store recordings of your voice on our servers.
Voice practice never begins until you have explicitly agreed to it. The first time you open a conversation, the app asks for your permission and explains where the audio goes.
Usage records
To enforce fair-use limits and prevent abuse we store, against your account identifier: seconds of voice practice used, number of sessions started, and daily counts of calls to our plan and pronunciation services. These are counters. They contain no content.
Purchases
Subscription status and purchase history are handled by RevenueCat and Apple. We receive whether your subscription is active. We never see your payment details — Apple processes all payments and does not share card information with us.
What we do not collect
We do not collect your location, your contacts, your photos, your device advertising identifier, or any browsing activity. We do not track you across other apps or websites. Our app's privacy manifest declares no tracking and no tracking domains.
2. Who else receives your information
Running an AI language coach means sending some of your information to specialist providers. Each one receives only what it needs to do its job.
| Provider | What it receives | Why |
|---|---|---|
| Supabase | Account id, name, email, preferences, usage counters | Hosts our accounts and backend |
| OpenAI | Your trip answers; phrase text; live microphone audio and speech during Free Speak; conversation transcripts | Generates your lesson plan, produces pronunciation audio, powers Free Speak conversations, and grades sessions |
| ElevenLabs | Live microphone audio and speech during lesson conversations | Provides the voice and conversation engine for lessons |
| xAI | Conversation text from lesson sessions | The language model behind the lesson coach |
| RevenueCat | Account identifier, subscription status | Manages subscriptions and entitlements |
| Apple, Google | Sign-in credentials | Authenticate you; they return your name and email |
These providers act as our processors and are contractually restricted to using the data to provide their service to us. Some are located in, or process data in, the United States.
3. Legal bases (UK/EU users)
Where the UK GDPR or EU GDPR applies, we rely on:
- Contract — to create your account, generate your plan, run voice practice and manage your subscription.
- Consent — for microphone access, for sending your audio to AI providers, and for notification reminders. You can withdraw consent at any time in iOS Settings, or by deleting your account.
- Legitimate interests — for the usage counters that enforce fair-use limits and protect the service from abuse.
4. How long we keep it
- Account information and preferences — until you delete your account.
- Usage counters — until you delete your account.
- Trip answers, plans, progress and streaks — on your device, until you delete the app or delete your account.
- Voice audio — not retained by us. Providers may retain it briefly for abuse monitoring under their own policies.
5. Deleting your account
You can delete your account from inside the app: Profile → Preferences → Delete account.
This permanently removes your authentication record, your profile, and your usage counters from our servers, and clears the trips, plans and progress stored on your device. It cannot be undone.
Deleting your account does not cancel your subscription. Cancel that separately in iOS Settings → Apple Account → Subscriptions, as only Apple can cancel it.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal information, to object to processing, and to complain to your data protection authority. Account deletion is available in-app; for anything else, contact us at the address below and we will respond within 30 days.
California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not offer financial incentives for personal information.
7. Children
Wando is not directed at children. The app includes optional coaching styles that use strong language, and those are placed behind an adult confirmation. Do not use Wando if you are under the age shown on the app's App Store listing. We do not knowingly collect information from children; if you believe a child has provided us information, contact us and we will delete it.
8. Security
Traffic between the app and our services is encrypted in transit (TLS). Access to our backend is restricted and authenticated per user. No system is perfectly secure, and we cannot guarantee absolute security, but we do not store voice recordings, payment details, or lesson content on our servers, which limits what an incident could expose.
9. Changes
We may update this policy. Material changes will be posted here with a new effective date, and where required we will ask for your consent again.
10. Contact
Questions, requests or complaints:
contact@pocketlabsteam.com
Pocket Labs LLC