Ace Wingman Privacy Policy

1. Information We Collect

(a) Information you give us

1. The questions and conversations you type in. These are sent to third-party AI providers (see Section 4) to generate a response, and stored so you can find them again in your history.
2. Messages you paste from other people. The core way this app works is that you paste in a message someone sent you. That text is sent to third-party AI providers too. We recommend removing names, phone numbers, addresses, and anything else that identifies the other person before you paste. You are responsible for having the right to share what you paste. We do not analyze, extract, or separately store third-party identity information found in it.
3. A display name. We assign you a default one when you sign up; you can change it under Profile → Edit profile. We never pull your real name or photo from any third party.

(b) Information collected automatically

1. An Apple user identifier and the email address Apple shares with us. When you use Sign in with Apple, Apple gives us an anonymous identifier that is unique to this app, plus the email address you choose to share — if you pick Hide My Email, we receive Apple's private relay address instead of your real one. We use the email for one thing: telling accounts apart when you contact support or when we grant a membership by hand. We never send marketing to it, never share it, and never receive your real name or your Apple ID password.
2. An Apple authorization refresh token. Used for one purpose only: to revoke this app's Sign in with Apple authorization when you delete your account, as Apple requires (App Review Guideline 5.1.1(v)). It is not used for anything else.
3. A device identifier. If you use the app as a guest without signing in, we generate an identifier from device information and keep it on your device, so your saved cards and history are still there when you reopen the app. It contains no name or contact information and is not shared with other apps.
4. Usage records: your question history, saved cards, quiz results, daily question count, and last active time. These maintain your account state, power the history feature, and enforce the free daily limit.
5. Subscription receipts. When you purchase a membership, we receive and store the transaction identifier, product identifier, subscription status, and expiration date from Apple, in order to confirm your membership. We never see or store your payment method, card number, or billing address — Apple handles all of that.

2. How We Use Your Information

We use your information only as needed to run the product:

1. To identify your account and attach your data to it.
2. To generate AI responses to the questions you ask.
3. To store your conversations, saved cards, and history in the cloud so you can return to them.
4. To confirm your subscription status and enforce free-tier limits and member benefits.
5. To troubleshoot problems, guard against abuse, and improve the product.

We do not use your personal information for advertising. We do not sell your personal information. We do not share it with third parties for their own marketing purposes.

If we ever need to use your information for a purpose not described here, we will ask for your permission first.

3. Legal Bases and Your Consent

When you create an account, you check a box confirming that you accept these terms and this policy. That check is your consent to the processing described here, including sending what you type to third-party AI providers.

You can withdraw that consent at any time by deleting your account (Section 7) or by uninstalling the app. Withdrawing consent does not affect processing that already happened.

4. Third-Party Services

To deliver core features, we use the following categories of third-party service. We send each of them only the minimum data the feature requires:

1. Third-party AI providers. The text you type is sent to a third-party AI service to generate a response. What we send does not include your account identifier, display name, or any other identity information. The specific providers we use may change as the product evolves, including the addition of providers located in other countries; material changes will be reflected in an update to this policy.
2. A cloud infrastructure provider. Supplies the database, serverless functions, and file storage this app runs on. Your data is stored with this provider.
3. Apple Inc. Provides Sign in with Apple authentication and validates in-app purchases. We send Apple a subscription transaction identifier to verify your membership; your payment information goes to Apple directly and never passes through us.

We require each of these providers to protect your information to a standard no lower than the one described in this policy, and to process it only for the purposes stated here.

Apart from the above, and apart from disclosures required by law or valid legal process, we do not share, transfer, or publicly disclose your personal information to anyone.

5. Where Your Information Is Stored

1. Your information is stored on servers operated by our cloud infrastructure provider, located outside the United States.
2. If you use Ace Wingman from the United States or anywhere else, the questions you ask, your usage records, and your account information are transmitted to and processed on those servers. By using the app, you acknowledge and agree to this transfer. If you are not comfortable with that arrangement, please stop using the app; you can delete your data at any time under Section 7.
3. AI generation is performed by the providers described in Section 4. Only the text you type is sent to them, with no account identity attached. Where those providers are located outside the United States, your request is processed abroad.
4. Retention: we keep the information above while you use the app. When you delete a specific item, or delete your account, we delete the corresponding personal information or irreversibly anonymize it, except where law requires us to retain it.

6. How We Protect Your Information

1. Data is partitioned by account identifier. Database permissions are configured so that only server-side cloud functions can write, and by default only you can read your own data.
2. Data in transit is encrypted over HTTPS. Data at rest is protected by our cloud provider's security controls.
3. Access is tightly restricted. Engineering access to production data happens only for necessary troubleshooting, against redacted logs.
4. If a personal data breach occurs, we will notify affected users of the nature of the incident, its likely consequences, and the steps we have taken, as required by applicable law.

7. Your Privacy Rights

Wherever you live, you can do all of the following:

1. Access. View your question history and saved cards inside the app at any time.
2. Delete individual items. Remove any history entry or saved card from its page.
3. Delete your account and all data. Go to Profile → Delete account. This is self-service — you do not need to contact us. It permanently deletes your account record, question history, saved cards, quiz results, and usage counts, and revokes this app's Sign in with Apple authorization. Subscription transaction records are kept only after the identifying fields are stripped, for financial reporting; they no longer link to you. It cannot be undone.
4. Revoke Apple authorization separately. You can also disable this app's Sign in with Apple access at any time under iOS Settings → Apple Account → Sign in with Apple.
5. Get a copy, or complain. To export a copy of your data, or if you disagree with how we handle your information, email us at the address in Section 11. We respond within 15 business days.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion or correction of it, to opt out of its sale or sharing, and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we do not use sensitive personal information for any purpose beyond delivering the service you asked for. We will never discriminate against you for exercising any of these rights. Sections 1 through 5 describe every category of personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to. You may exercise these rights through the in-app controls above or by emailing us.

Deleting your account does not cancel your subscription. Subscriptions are managed by Apple — cancel separately under iOS Settings → Apple Account → Subscriptions. See Section 5 of the Terms of Service.

8. Children's Privacy

Ace Wingman is not directed to anyone under 16. If you are under 16, please stop using this app. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, as defined by the Children's Online Privacy Protection Act, we will delete it promptly. If you believe a child has provided us with personal information, contact us using Section 11.

9. Do Not Track

Ace Wingman does not track you across other companies' apps or websites, and does not use the App Tracking Transparency framework to request tracking permission, because we do not track. We therefore do not respond to browser Do Not Track signals — there is nothing for them to turn off.

10. Changes to This Policy

We may update this policy when the law changes or the product changes. The current version always lives on this page, and we will note the effective date at the top. For material changes, we will tell you inside the app before they take effect. Continuing to use Ace Wingman after an update means you accept the updated policy.

11. Contact Us

Questions, requests, or complaints about this policy or how we handle your information:

1. Email: enzosun94@gmail.com (fastest route — this reaches the developer directly)
2. Any other contact method listed on the app's Profile → About page.

We reply within 15 business days of receiving your request.