Privacy policy
In plain words: your data is yours. Here is exactly what we collect, why, and how you stay in control.
Last updated
Draft of November 14, 2026. This policy covers the Wonday app, the Wonday Ring waitlist and wondaystore.com.
What we collect
Account: your email and the sign-in method you choose (Google or email). With Google, also your Google account name and photo.
Health and wellness data: sleep, heart rate, temperature, steps, workouts and weight, from the Wonday Ring and, if you allow it, Apple Health or Health Connect. Today this stays only on your phone.
What you tell us in the app: goals, daily check-ins, symptoms and emotions you choose to log. Also only on your phone.
Waitlist: first name, email, country, city and ZIP code (city and ZIP are optional), how interested you are in the ring, the finishes and size you picked, whether you need a sizing kit, the language of the page, how you found us (the campaign tags in the link and the website you came from, domain only), and when you gave consent.
How we use it
In the app: to show your data and build your daily insight, on your phone.
Waitlist: to email you about the waitlist and the launch, and to plan how many rings and sizing kits to make of each finish and size. The legal basis is your consent.
We never sell your data and never use it for advertising.
Sensitive data
Symptoms, emotions and health data are sensitive. The app asks for your explicit consent before you log symptoms or emotions, and you can withdraw it at any time in Your data and privacy.
AI Coach
Today the Coach’s daily text is built on your phone from your scores; nothing is sent to an AI provider. If that changes, we will ask for your consent first and name the provider here.
Emails
Our emails record when you click a link, so we know which news interests you. They don’t track when you open them. Every email has an unsubscribe link.
Who we share with
- Brevo (Sendinblue SAS, France) stores the waitlist and sends our emails, including the confirmation email.
- Cloudflare hosts this site and runs Turnstile, the check that stops bots on the form, using technical data from your browser and your IP address. To avoid repeated emails, it also keeps a one-way code (hash) of your email for 24 hours, never the email itself.
- Google Fonts serves the fonts of this site, so your browser connects to Google when a page loads.
- Our login provider stores your account data.
Authorities only when the law requires it. Some of these companies process data outside your country, under their own data protection agreements.
This site
No analytics and no cookies of our own. To remember how you found us, the site keeps the campaign tags and the referring domain in this browser tab only (session storage), until you close the tab.
Where your data is stored
Health data: only on your phone. Waitlist: Brevo, in the European Union. Encrypted in transit.
Your rights
You can delete the data on your phone at any time in the app (Profile → Your data and privacy), leave the waitlist from any email, or write to [email protected] to see, correct, export or delete your data. Rights under GDPR, LGPD (Brazil) and US state laws such as CCPA and Washington’s My Health My Data Act apply where relevant.
Retention
Waitlist: if you don’t confirm by email, your sign-up is deleted after 30 days. If you confirm, we keep it until you unsubscribe, ask us to delete it, or at most 12 months after the Wonday Ring launches. App: data on your phone stays until you delete it. Your login stays on our server until you ask us to delete it; deleting the account from the app is coming in a future version.
Children
Wonday is not intended for people under 18.