This policy explains what WISR collects, why, who processes it on our behalf, and how to have it removed. WISR is published by Keren Labs. If anything here is unclear, write to wisr@kerenlabs.com.
What we collect
Everything in the table below is linked to your account. We do not buy data about you, and we do not collect anything not listed here.
| Data | Where it goes | Why |
|---|---|---|
| Email address | Supabase, PostHog | Account identity, and to tie analytics to an account |
| Name | Supabase | Shown on the leaderboard and on your profile |
| Avatar image | Supabase storage | Your profile picture. Optional |
| Country | Supabase | The country leaderboard. You choose it |
| Date of birth | Supabase | Collected when you sign up, to confirm eligibility |
| User id | Supabase, PostHog | Links you to your scores and to your events |
| Gameplay events | PostHog (EU) | Rounds started, questions answered, rounds finished |
| Device and operating system | PostHog (EU) | Attached to every event by the analytics SDK |
| Approximate location | PostHog (EU) | Derived from your request's IP address, server side |
How you sign in
WISR uses Sign in with Apple and Sign in with Google. There is no password to create and we never see one. If you use Apple's Hide My Email, we only ever receive the relay address Apple gives us, and that is what we store.
We do not track you
WISR does not track you across other companies' apps or websites. There is no advertising SDK, no advertising identifier and no data broker. Our iOS privacy manifest declares tracking as false, and that is a commitment rather than a default we left alone.
Who processes data for us
- Supabase hosts the database, authentication and the storage bucket holding avatar images.
- PostHog records product analytics, on their EU cloud. Six events, all about playing a round: signing up, a failed sign in, and a round started, answered, finished or abandoned.
- Apple and Google handle sign-in and distribute the app.
Each of these is a processor acting on our instructions. None of them is permitted to use your data for their own purposes.
Notifications
If you turn on the daily reminder, it is scheduled on your own device. The reminder does not send anything about you to us, and you can turn it off in Settings at any time.
How long we keep it
Your account, your scores and your avatar are kept for as long as your account exists. Analytics events are retained by PostHog under their standard retention policy. When you ask us to delete your account, the account and everything attached to it goes.
Deleting your account and your data
Email wisr@kerenlabs.com from the address you signed up with and ask for your account to be deleted. We will remove your account, your profile, your avatar, your scores and your analytics events within 30 days, and confirm when it is done. Deleting the app from your phone on its own does not delete your account, because your scores live on our servers so they survive a new phone.
Your rights
If you are in the UK or the EU, you have the right to access a copy of your data, to correct it, to have it erased, to restrict or object to how we use it, and to ask for it in a portable form. Write to wisr@kerenlabs.com and we will answer within one month. You also have the right to complain to your data protection regulator, which in the UK is the Information Commissioner's Office.
Children
WISR is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us their data, write to wisr@kerenlabs.com and we will delete it.
Security
Data is encrypted in transit. Access to the production database is limited to the people who run the service, and rows are protected so one account cannot read another's. No system is perfect, and we will not pretend otherwise, but we do not hold payment details or passwords, which removes the two things most worth stealing.
Changes to this policy
If this policy changes in a way that affects you, we will update the date at the top and, where the change is significant, say so in the app.
Contact
Keren Labs, wisr@kerenlabs.com.