Privacy
PRIVACY POLICY
A plain-language account of the data Wingman uses to run the app, rank wings, protect the community, and measure clearly labeled promotions.
Effective August 29, 2026 · Version 2026-08-29
This policy applies to Wingman websites, mobile or installed web experiences, and related services operated under the name Wingmobile App from California, United States. It does not cover third-party sites you choose to visit.
1. Information we collect
Account and profile information
Email address, username, password hash (never your readable password), display name, avatar, biography, city/state, role, account status, authentication records, and acceptance of the current Terms. If you use Google sign-in after it is enabled, we receive the Google account identifier and basic profile information authorized by you, such as verified email, name, and profile image. OAuth tokens are stored only as needed to operate the connection.
Wing activity and user content
Venues, ratings, wing attributes, reviews, comments, reactions, follows, account blocks, wishlists, reports, owner claims and responses, photos, badges, and timestamps. Ratings and public profile content are designed to be visible to other users and may appear on public venue or share pages.
Location and venue information
Location you add to your profile, venue addresses, and—only when you grant browser permission—your approximate or precise device location to find nearby places. Wingman does not need continuous background location tracking.
Device, security, and usage information
Session identifiers, browser/device and request metadata, rate-limit identifiers stored as one-way hashes, error and security events, push-notification endpoints and encryption keys, ad impressions, clicks, and dismissals. We minimize logs and do not intentionally place passwords, reset links, OAuth tokens, or review content in operational error logs.
Contact submissions and friend invitations
When you use the support form, we collect the category, subject, message, optional name and reply address, source page, submission time, workflow status, and—if you are signed in—your account identifier. When you choose to invite a friend by email, we send the address to AWS SES to deliver your invitation, but retain only a one-way hash of that address with the inviter and delivery status to prevent abuse and repeated invitations. Authorized administrators use support submissions to review, route, and resolve requests.
2. Why we use information
- create and secure accounts, authenticate requests, and recover passwords;
- provide discovery, rankings, profiles, social features, notifications, venue ownership, and moderation;
- apply limited automated checks to public text and route reports for human review;
- calculate rating confidence and community scores;
- deliver and measure clearly labeled sponsored placements;
- prevent abuse, investigate reports, enforce policies, and maintain service reliability;
- comply with law and establish or defend legal claims; and
- communicate service, safety, privacy, and support information.
3. Google user data
Wingman uses Google account data only to provide sign-in/account linking and the functionality you request. We do not use Google user data for personalized advertising, sell it, or allow humans to read it except when you authorize support, when necessary for security/abuse investigation, when required by law, or when aggregated and anonymized for internal operations. You can revoke Wingman from your Google Account permissions and can delete your Wingman account separately.
4. Advertising
Wingman currently uses first-party interaction records to count delivery, clicks, and dismissals for sponsored content. We do not currently build cross-site advertising profiles, sell personal information, or use known minors’ personal information for personalized advertising. Sponsored placement does not influence organic rating scores.
5. When information is shared
We disclose data to service providers acting for Wingman, such as AWS for hosting, database, storage, password recovery, and friend-invitation email; Google for sign-in and Maps/Places features; and browser push services when you enable notifications. Providers receive only what is needed for their function and are subject to their own terms and safeguards. We may disclose information in a corporate transaction, to comply with valid legal process, to protect people or the service, or with your direction. Public content is shared as described when you post it.
6. Retention
| Data | Typical retention |
|---|---|
| Active account and public content | While the account is active or the content is needed to provide the service. |
| Account deletion | Target completion within 30 days after a valid request; accessible production data is removed sooner where practical. |
| Backups | Age out within up to 90 days and are not restored for ordinary product use. |
| Security, abuse, and audit records | Up to 12 months when reasonably necessary, or longer where law/legal claims require. |
| Aggregated/de-identified statistics | May be retained when they cannot reasonably identify you. |
7. Your controls and rights
You can edit profile information and notification preferences and can block or unblock another account from its profile. You may request access, correction, export, deletion, or restriction by using Account Deletion or the private contact form. California residents may also request disclosure, correction, deletion, and information about sharing, and will not receive discriminatory treatment for exercising privacy rights. Wingman does not currently sell or share personal information for cross-context behavioral advertising. We may verify requests to protect your account.
8. Children
Wingman is not directed to children under 13. We do not knowingly collect personal information from a child under 13. Contact us if you believe a child has provided information so we can investigate and delete it.
9. Security and international processing
We use access controls, transport encryption, verified database connections, credential hashing, request limits, and other safeguards. No system is perfectly secure. Information may be processed in the United States and other locations where providers operate, subject to applicable safeguards.
10. Changes and contact
Material changes will be posted here with a new effective date and, when appropriate, an in-product notice. Submit questions or privacy requests through the private contact form. Operator: Wingmobile App; jurisdiction: California, United States. No public business address is designated at this time.