Privacy policy

First-use privacy notice and system age information

Before first use, please read the privacy notice and make your choice. The app connects to cloud account and training services only after you agree.

Your privacy choice is saved on this device. It does not verify your age or your guardian's identity. Before you agree, the app does not recover accounts, create temporary accounts, or read training data. You can still read the full policy and contact support. Witloop does not request a date of birth, identity documents, or biometric information for this purpose.

On supported iOS versions, the app asks Apple's system about applicable requirements. Only when the system indicates that requirements apply does it request an age range, declaration method, and related parental-control status through the system interface. Witloop does not receive a full date of birth, save or upload this system age information, or deny access solely because of the returned age range. The absence of age information does not establish that you are an adult. The system may use a previous sharing choice or provide a range automatically where required. Apple handles that information under its own rules.

Applicable system status is checked again when you return to the app. Cloud account and training services pause if a required system check is incomplete or encounters an error. You can still read the policy and contact support.

Children and guardians

If you are a minor, read this policy with your parent or guardian and obtain their consent where required. You or your guardian can request access to, correction of, or deletion of personal information using the contact email in this policy.

Children's personal information must be handled according to applicable requirements for guardian involvement, consent, and protection. Ordinary privacy acceptance in the app does not establish that required guardian consent has been obtained or that a guardian's identity has been verified.

If you or your guardian believe a child's personal information was processed without appropriate consent, email us to request a review or deletion. We will check the relevant account ownership and scope of processing. Do not send passwords, verification codes, or identity documents unrelated to your request.

Information we process

After you accept the first-use privacy notice and complete any applicable required checks, Witloop creates a temporary cloud account when you first connect to training services and have no account available to recover. A randomly generated installation identifier, device platform, app version, and sign-in credentials maintain the connection between your account and device. Witloop generates this installation identifier; it is not an advertising identifier.

The nickname, age range, gender, and training preferences you provide are saved with your account. You may choose not to disclose age and gender. These currently appear only in your profile and do not affect training plans. Your time zone determines training days and daily schedules; we do not need to access your location.

When you train, we save the activity, settings, dates, responses and timing, completion or interruption status, scores, and related reports. These support progress saving, record validation, future training schedules, and your personal history.

If you choose email sign-in or linking, we process your email address, verification records, and identity association. If you choose Apple or Google, we process the account identifiers and verification information returned by that service. A returned email address may be used to display the sign-in method. We do not receive your Apple or Google password.

If you previously set up legacy sign-in with a username, email address, or phone number and password, we process the corresponding account identifier and password verification information to verify your identity and recover that account. The server stores a password hash.

When you connect to servers, obtain app updates, access public policy pages, or request help, the relevant services process network information needed to fulfill the request, such as IP address, request time, app version, and error records. Infrastructure requests, including app updates and public pages, may occur before you accept the first-use privacy notice. Keeping cloud account and training services inactive does not mean there have been no earlier network requests or logs. Email content and contact details you voluntarily send are used to respond to you.

How information is used

We use this information to provide sign-in, cross-device sync, daily training schedules, saved results, and reports; respond to support requests; maintain security; and troubleshoot problems. Reports describe performance on the relevant training tasks. Training records are not used as medical diagnoses or measurements of real-world ability.

The current version has no advertising or cross-app advertising tracking. We do not send training records to advertising platforms for ad targeting. If we introduce new processing purposes or methods, we will update this policy and seek your consent where required.

Cloud storage and device cache

Account profiles, training preferences, training records, daily schedules, and reports are stored on Witloop's servers. Linking a sign-in method lets you recover the same account on another device. An unlinked temporary account may be unrecoverable after changing devices or losing sign-in credentials.

Your device stores sign-in information and unfinished settings. It also caches recently loaded profiles, plans, training records, and reports for offline viewing. Caches are separated by account and service environment. Switching or deleting an account clears the corresponding cache. Uninstalling the app does not delete your server account.

We retain data as needed to provide these features. You can clear training records or delete your account; the scope of these actions is described below. If applicable law requires retention of some information, we retain it only for the scope and period required. Contact us using the details in this policy with questions about backups or specific retention practices.

Service providers and third-party sign-in

Witloop uses infrastructure providers for servers, databases, and network services. When email verification is available and you request it, an email delivery provider processes the recipient address and information needed to send the code. These services support the corresponding features.

Apple and Google sign-in are optional. Their authorization flows open only when you choose them, and their own privacy policies also apply. You can cancel authorization or manage linked sign-in methods in Witloop's account settings.

Google sign-in services may process names, email addresses, phone numbers, user identifiers, device identifiers, and usage information for sign-in functionality and service analytics. They may also estimate approximate device location from an IP address to prevent fraud. Witloop does not need device location permission for this, and this does not mean Witloop offers new phone-number registration.

The app uses Expo's update service to check for and download updates. That service receives the network, platform, and version information needed for requests, plus a random identifier distinguishing update requests from an installation. It may also receive an error description from a previous launch failure to diagnose update problems. Witloop does not intentionally attach training scores or profile details to update requests.

When you choose system sharing, the shared content includes the selected game's name, your result, settings, and an invitation link. It does not include age, gender, or account sign-in information. The app you choose for sharing handles that content under its own rules.

Your choices and deletion options

After accepting the first-use privacy notice and completing any applicable required checks, you can set up and train without registering or linking a third-party account. A temporary cloud account is used if there is no account to recover. In Profile, you can view or change your profile and training preferences. Manage sign-in methods in Account & profile.

Clear training data in Privacy & data clears training records, report history, training progress, and today's completion status, then generates today's schedule again. Your profile, sign-in methods, and training preferences are kept.

To delete your entire account, open account management in Account & profile. Deletion removes that account's profile, sign-in associations, and training data, and invalidates its sign-in sessions. Signing out affects only the current device and does not delete server data.

If your current account is linked to Apple, you must verify that Apple account before deletion so its sign-in authorization can be revoked. If you previously merged Witloop accounts using other Apple accounts, credentials for revoking those older authorizations may be unavailable. We still delete the merged source accounts and data, but this does not mean those older Apple authorizations have been revoked. On an iPhone or iPad signed in to each Apple account, open Settings, tap your name, open Sign in with Apple, select Witloop or the relevant developer, and remove access. You can also sign in at account.apple.com and manage Sign in with Apple under Sign-In and Security. Manually removing an older authorization is not a prerequisite for deleting Witloop data.

You can also contact us below to request access, correction, a copy, deletion, or other handling of personal information. To prevent unauthorized access or deletion, we may need to verify account ownership. Do not send passwords or verification codes.

Device permissions

Everyday training does not require camera, microphone, contacts, precise location, or advertising tracking permissions. Rhythm exercises play sounds and do not record your voice. Apple's system age interface is used where applicable. Apple or Google sign-in and system sharing open their corresponding flows only when you initiate them.

Policy updates

We update this policy as features and applicable requirements change. The current version appears on this page. We will explain significant changes to personal information processing in the app or through another appropriate channel and obtain consent where required.

Contact us

Contact us at the email address below with questions, suggestions, or personal information requests.

dev@fingerwave.top

Do not send passwords or verification codes by email.