Wundau — Privacy Policy

Last updated: 20 August 2026

Wundau is a private app for people who care about one another. This policy explains what information we handle, why we need it, who can see it, and the choices you have.

Who we are

Wundau is operated by Warm Byte, an independent developer based in Taiwan. “Wundau”, “we”, and “us” refer to Warm Byte, which is the data controller for the information described below. You can reach us at support@warm-byte.com.

What we collect

• Account information — your email address, display name, user ID, and optional profile photo when you sign in with Google or Apple. We do not manage your Google or Apple password.
• Policy record — the Terms version you accepted, the Privacy Policy version you acknowledged, and the time. These records are private and never shown to circle members.
• Sign-in SDK information — the Google Sign-In SDK bundled with the app declares linked name, email, phone number, coarse location, user and device identifiers, usage information, and other technical data. Phone number and coarse location are declared for app functionality; some identifiers, usage, and technical data are also declared for non-advertising SDK analytics. The SDK declares no tracking. Wundau itself does not request device location permission, use location for check-ins, track precise location, or store phone number or location in its product database.
• Circle content — daily appearances (check-ins), moods, text notes, photos, voice messages, comments, emoji reactions, optional challenges and responses, profile and circle images, and custom monthly artwork you choose to add.
• Safety reports and blocks — when you report content or a member, we store your account, the circle and reported item, the reason, optional details you provide, a limited server-side snapshot needed to review the report, its status, and moderation decisions. When you block a member, we store the two account identifiers and circle until you unblock them or an account is deleted.
• Birthdays and milestones — if you choose to set them: solar or lunar calendar, month and day, an optional birth year, sharing choice, circle anniversaries or custom dates, and reminder choice. When shared, circle members see only the birthday month and day; the optional birth year is not shown to them. You can edit the date or keep it private from the birthday settings.
• Circle and invitation information — circles you join, membership role and status, and invitation creation, status, expiry, and abuse-prevention counters. When you invite someone by email address, we store only a one-way hash of that address, so the right person can redeem the invitation without us keeping the address itself.
• Push notification token, language, and notification text — a device identifier used to deliver account activity, invitations, celebrations, and care reminders, together with the app language of that device so each notification arrives in the right language. Notification text may include the display name of the person who acted, the circle name, and up to the first 60 characters of a comment, mention, or challenge, so you can see what happened without opening the app. Apple’s and Google’s push services carry that text to your device. You can turn notification types off in Wundau, or hide previews on the lock screen in your device settings. If you do not appear in a circle for 36 hours, Wundau may gently notify active members of that circle. Rest mode pauses this care reminder.
• Device, session, and operational information — a random install identifier, push token, platform, friendly device name, current session identifier, last-seen time, and feature operations used for login, remote sign-out, notification delivery, security, and reliability. Firebase and supporting Google SDKs also transmit limited device/app configuration and SDK performance or diagnostic metadata for push delivery, reliability, and vendor product-quality measurement; they do not receive your circle content through those diagnostics. Wundau’s own in-app error log remains on your device and is sent to us only if you choose to copy and share it with support. Only you can see your logged-in-device list.
• Subscription status — purchase and renewal status if you subscribe. RevenueCat receives a pseudonymous Wundau account identifier that our systems can link to your account, but we do not send it your email, name, circle content, photos, or voice messages.

What we do not do

• We do not show ads, use advertising trackers, or sell or rent your data.
• We do not use location to check whether you are safe or where you are.
• We do not use your content to train AI. We do not send photos or voice messages to an external AI moderation service.

How we use your information

We use it only to provide and protect Wundau: operate private circles and monthly puzzles, show content according to your choices, deliver notifications, manage invitations and subscriptions, review reports, apply blocks and content-safety decisions, protect accounts, diagnose errors, measure SDK quality without advertising or tracking, and keep the service secure. To understand how the service is doing overall we look only at aggregate counts, such as how many circles are active; that view contains no names, email addresses, circle names, or circle content.

Legal bases

Where data protection law requires a legal basis, we rely on: performance of our agreement with you, to run the circles, content, invitations, notifications, and subscriptions you ask for; our legitimate interests, to keep accounts secure, prevent abuse, diagnose errors, and keep the service reliable; your consent, for optional things you choose to add, such as a birthday or notification permission, which you can withdraw at any time; and compliance with our legal obligations.

Who can see your information

Circle content is visible only to active members of that circle. Check-in notes, photos, and voice messages follow the author’s circle-or-private choice; author-only items remain visible only to their author, including from the circle owner. Comments, reactions, challenges, responses, and shared milestones are circle-visible rather than individually private. Birthday month and day appear only when you choose to share them. An optional profile-birthday year does not appear in circle celebration views. Access rules are enforced by the server.

Safety reports are not shown to the reported member or other circle members. Only authorized Wundau operators may review the report and the minimum target snapshot needed for a decision. A block is applied by the server in the selected circle; the other member is not told who blocked them.

Service providers

• Supabase — backend, database, and authentication services (our main project is currently deployed in the Tokyo, Japan region).
• Cloudflare — private media storage (R2) and hosting for our website.
• RevenueCat — subscription management using purchase history and a pseudonymous Wundau account identifier.
• Google and Apple — sign-in; Google SDKs also process the technical information described above for functionality and product-quality analytics.
• Firebase Cloud Messaging and Apple Push Notification service — push delivery. They carry the notification text described above, and Firebase processes the installation, device/app configuration, and limited diagnostic metadata needed to operate and maintain that delivery.

Where your information is processed

We and the service providers listed above may process information in Taiwan, Japan, the United States, and other regions where they provide services. Where personal information is transferred out of the European Economic Area or the United Kingdom, we rely on the standard contractual clauses or another lawful transfer mechanism offered by the provider concerned.

Our website

Our website hosts this policy, our terms, support information, and the page an invitation link opens. It sets no cookies, shows no advertising, and runs no analytics. Cloudflare, our hosting provider, keeps standard access logs (including IP address) to serve and protect the site. An invitation link contains a token that stays valid for 7 days, and anyone holding that link can see the inviter’s display name and the circle name before joining — so please send an invitation only to the person you mean to invite.

Security and retention

Database access is restricted per account and circle. Private media is delivered through short-lived signed links. We keep account information while the account exists and keep operational records only as long as needed to provide, secure, and comply with legal obligations for the service. Safety reports, target snapshots, and moderation records are retained only as long as needed to investigate abuse, handle disputes, enforce the Terms, and meet legal obligations, then deleted or de-identified.

If you choose not to provide information

Signing in with Google or Apple, the account information that comes with it, acceptance of the current Terms, and acknowledgement of the Privacy Policy, are required: without them we cannot create or operate your account. Profile birthday settings remain optional. You can use Wundau without setting a profile birthday — you simply will not appear in circle celebrations; without allowing notifications — invitations, reminders, and activity alerts then only appear when you open the app; and without adding photos, voice messages, or notes — your daily appearance still counts. Leaving optional information out does not otherwise limit the service.

Your choices and rights

• Edit or hide your birthday and change notification choices in the app.
• Export your memories or a JSON copy of account and activity data from the My screen.
• Delete your account in the app. Deletion is permanent; you may wish to export first. We may retain only minimal records where required for security, fraud prevention, dispute handling, or law.
• Depending on where you live, you may also have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. The export and delete tools above cover most of this directly; for anything else, email support@warm-byte.com.
• If you are in the European Economic Area or the United Kingdom, you may complain to your local data protection authority. In Taiwan, you may contact the competent supervisory authority.

Age and children

Wundau does not ask for age or birth year to decide access, and a profile birthday is optional and used only for celebrations. Wundau is a private circle service, and people of different ages may take part. If the law where you live requires a parent or guardian’s permission for a minor to use an online service, please obtain that permission. A parent or guardian with a privacy question or request may email support@warm-byte.com; we may ask for the minimum information needed to identify the account and verify authority before disclosing or deleting data.

Changes and contact

If we make material changes, we will update the date above and, where appropriate, notify you in the app. Questions or privacy requests can be sent to support@warm-byte.com.

Wundau — 隱私權政策

最後更新：2026 年 8 月 20 日

Wundau 是讓在意彼此的人使用的私人圈子 App。本政策說明我們處理哪些資料、用途、誰能看見， 以及你可以做的選擇。

我們是誰

Wundau 由位於台灣的獨立開發者 Warm Byte 營運。本政策中的「Wundau」與「我們」是指 Warm Byte；我們是下列資料的控制者。聯絡方式： support@warm-byte.com。

我們處理的資料

• 帳號資料：使用 Google 或 Apple 登入時取得的 Email、顯示名稱、使用者 ID， 以及你選填的大頭貼。我們不管理你的 Google 或 Apple 密碼。
• 政策紀錄：你同意的服務條款版本、已閱讀的隱私權政策版本與時間。這些紀錄 屬於私人帳號資料，不會顯示給圈內成員。
• 登入 SDK 資料：App 內含的 Google Sign-In SDK 在隱私清單中聲明，會處理 可連結身分的姓名、Email、電話號碼、概略位置、使用者／裝置識別碼、使用資料與其他技術資料。 電話號碼與概略位置只列 App 功能；部分識別碼、使用與技術資料另列非廣告用途的 SDK 分析。 該 SDK 聲明不做追蹤。Wundau 本身不要求裝置定位權限、不用位置完成「出現」、不追蹤精確位置， 也不把電話或位置存進 Wundau 的產品資料庫。
• 圈子內容：每日「出現」、心情、文字、照片、語音留言、留言、表情回應、 選填挑戰與回覆、大頭貼、圈子圖片，以及你上傳的自訂月拼圖。
• 安全檢舉與封鎖：你檢舉內容或成員時，我們會保存你的帳號、圈子與被檢舉 項目、原因、你選填的補充說明、處理所需的有限 server 端內容快照、案件狀態與處理決定。 封鎖成員時，會保存雙方帳號識別碼與圈子，直到你解除封鎖或其中一方刪除帳號。
• 生日與紀念日：由你選填的國曆／農曆、月日、選填出生年、分享設定、 圈子紀念日或自訂日期，以及提醒設定。選擇分享時，圈內只會看到生日月日，不會看到選填的 出生年；你可以在生日設定中修改日期或改成「先不顯示」。
• 圈子與邀請：加入的圈子、成員角色與狀態，以及邀請的建立者、狀態、 有效期限與防濫用計數。以 Email 邀請時，我們只保存該 Email 的單向雜湊值，讓對的人能兌換 邀請，不保存 Email 本身。
• 通知裝置 token、語系與通知文字：用於傳送帳號動態、邀請、慶祝與關心提醒的 裝置識別碼，以及該裝置的 App 語系，讓通知以正確語言送達。通知文字可能包含行動者的顯示 名稱、圈子名稱，以及留言、提及或挑戰的前 60 個字，讓你不必打開 App 也知道發生什麼事； 這些文字由 Apple 與 Google 的推播服務傳到你的裝置。你可以在 Wundau 內關閉各類通知，或在 裝置設定中隱藏鎖定畫面預覽。若你在某圈 36 小時未出現，Wundau 可能溫和提醒該圈的 active 成員；休息模式會暫停此提醒。
• 裝置、session 與服務運作資料：隨機安裝識別碼、通知服務識別碼、平台、 裝置顯示名稱、目前 session、最後活動時間與功能操作，用於登入、遠端登出、通知傳送、安全與 穩定性。Firebase 與相關 Google SDK 也會傳送有限的裝置／App 設定與 SDK 效能或診斷資料， 用於通知、可靠性及供應商產品品質分析；這些診斷不包含你的圈子內容。Wundau 自己的 App 內 錯誤紀錄仍只留在裝置上，只有你主動複製並提供給客服時才會傳給我們。只有你能看到自己的 已登入裝置清單。
• 訂閱狀態：訂閱時的購買與續訂狀態。RevenueCat 會收到一組假名化的 Wundau 帳號識別碼，我們的系統能將它連回你的帳號；但不會傳送你的 Email、姓名、圈子內容、 照片或語音。

我們不會做的事

• 不顯示廣告、不使用廣告追蹤器，也不出售或出租你的資料。
• 不使用定位判斷你是否安全或人在何處。
• 不拿你的內容訓練 AI，也不把照片或語音送到外部 AI 內容審查服務。

使用目的

只用於提供與保護 Wundau：運作私人圈子與月拼圖、依你的設定顯示內容、傳送通知、管理邀請與 訂閱、處理檢舉、套用封鎖與內容安全決定、保護帳號、診斷錯誤、進行不含廣告或追蹤的 SDK 品質分析，以及維持服務安全。為了解服務 整體狀況，我們只看彙總數字（例如有多少圈子仍在使用），那份報表不含姓名、Email、圈子名稱或 圈子內容。

法律依據

在法律要求說明處理依據時，我們依據：履行與你之間的契約，以提供你要求的圈子、內容、邀請、 通知與訂閱；正當利益，用於保護帳號、防止濫用、診斷錯誤與維持服務穩定；你的同意，用於你選填 的資料（例如生日）或通知權限，且你可隨時撤回；以及履行法律義務。

誰看得到

圈子內容只讓該圈 active 成員看見。出現時加入的文字、照片與語音可由作者選擇圈內可見或只有 自己；設為只有自己的內容，即使圈主也看不到。留言、回應、挑戰、挑戰回覆與共享紀念日屬於圈內 可見內容，沒有逐項私密設定。生日選擇分享時只顯示月日；生日設定中選填的出生年不會出現在圈子的 慶祝畫面。權限由 server 強制。

安全檢舉不會顯示給被檢舉者或其他圈子成員，只有經授權的 Wundau 處理人員能查看案件及判斷 所需的最少內容快照。封鎖由 server 在指定圈子內套用；對方不會收到是誰封鎖他的通知。

服務供應商

• Supabase：後端、資料庫與登入服務（主要專案目前部署於日本東京區域）。
• Cloudflare：私人媒體儲存（R2）與本網站代管。
• RevenueCat：以購買紀錄與假名化的 Wundau 帳號識別碼管理訂閱。
• Google 與 Apple：登入；Google SDK 也會為 App 功能與 產品品質分析處理前述技術資料。
• Firebase Cloud Messaging 與 Apple Push Notification service：通知傳送。它們會傳遞上述通知文字；Firebase 另處理維持通知服務所需的 安裝、裝置／App 設定與有限診斷資料。

資料在哪裡處理

我們與上述服務供應商可能在台灣、日本、美國及其他提供服務的地區處理資料。個人資料若自歐洲 經濟區或英國向外傳輸，我們依各該供應商提供的標準契約條款或其他合法傳輸機制進行。

我們的網站

本網站放置這份政策、使用條款、支援說明，以及邀請連結開啟的頁面。網站不放 cookie、不放 廣告，也沒有分析工具。代管商 Cloudflare 會保留一般存取紀錄（含 IP 位址）以提供與保護網站。 邀請連結內含 7 天內有效的 token，持有該連結的人在加入前就能看到邀請人的顯示名稱與圈子名稱， 因此請只把邀請傳給你真正想邀請的人。

安全與保存期間

資料庫依帳號與圈子限制存取，私人媒體使用短效簽章連結。我們會在帳號存在期間保存帳號資料， 其他運作紀錄只保留到提供服務、維護安全及履行法律義務所需的期間。安全檢舉、內容快照與處理紀錄 只在調查濫用、處理爭議、執行條款及履行法律義務所需期間保存，之後刪除或去識別化。

不提供資料的影響

使用 Google 或 Apple 登入、隨之取得的帳號資料、同意目前的服務條款，以及確認已閱讀隱私權政策 都是必要的： 沒有這些資料，我們無法建立或運作你的帳號。個人頁的生日設定 仍是選填；不設生日仍可正常使用，只是不會出現在圈子的慶祝畫面；不開啟 通知仍可正常使用，邀請、提醒與動態就只在你打開 App 時看到；不加照片、語音或文字，也不影響每天 的「出現」。不提供選填資料不會另外限制服務。

你的選擇與權利

• 在 App 內修改或隱藏生日，並調整通知選項。
• 從「我的」匯出回憶，或取得帳號與活動資料的 JSON 副本。
• 在 App 內永久刪除帳號；建議先匯出。若安全、防詐、爭議處理或法律要求必須保留， 我們只會保留最少必要紀錄。
• 依你所在地區的法律，你可能還有查詢、閱覽、更正、刪除、取得副本、反對或限制特定處理， 以及撤回同意的權利。上述匯出與刪除工具已能直接完成多數需求；其他請寄 support@warm-byte.com。
• 你若在歐洲經濟區或英國，可向當地資料保護主管機關申訴；在台灣可洽詢主管機關。

年齡與兒童

Wundau 不會用年齡或出生年決定能否使用；個人頁生日是選填資料，只用於生日慶祝。Wundau 是私人 圈子服務，不同年齡的人都可以參與。若你所在地法律要求未成年人使用線上服務前取得父母或 監護人同意，請先取得同意。家長或監護人若有隱私問題或資料請求，可寄信到 support@warm-byte.com；在揭露或刪除資料前，我們可能只 詢問辨識帳號與確認權限所需的最少資訊。

政策變更與聯絡方式

若有重大變更，我們會更新上方日期，並在適當時於 App 內通知。隱私問題或資料請求請寄至 support@warm-byte.com。