Privacy Policy — Waddle

Last updated: September 2, 2026

    Waddle works fully on your own device, with no account. Your routines,
    penguin, gold and progress stay on your phone. A few features are
    optional and only run if you turn them on: signing in, backing up to
    your account, the shared “Waddle with others” rooms, and two AI
    helpers. This policy explains exactly what each one sends, and where.
  

Waddle (“the app”, “we”) is a gentle routine app for ADHD adults. We’ve tried to write this plainly. Everything below that involves leaving your device is optional — decline it and the app still works.

What stays on your device

By default, your routines, penguin and outfits, gold, streak-free progress, brain-dump notes and settings are saved only in your phone’s local storage. If you never sign in, none of it is ever uploaded, and we cannot see any of it.

If you create an account (optional)

An account is only needed for two things: backing your data up to the cloud, and joining shared rooms. You can sign in with an emailed link, with Sign in with Apple, or with Google. When you do, we store:

What	Why
Your email address (or the identifier from Apple/Google sign-in)	To let you sign back in and to send the sign-in link
Your penguin’s name, your join date, and the time you accepted the community rules	To show your penguin in rooms and to record consent
A backup of your routines, gold, progress and brain-dump notes (including your saved clear-my-head history) — only if you turn on cloud backup or tap “Save”	So a new phone can pick up where you left off

This is stored on our behalf by Supabase (our database and sign-in provider). Sign-in links are delivered by Resend. You can delete your account at any time inside the app (account sheet → Delete account); this removes your account and its server data. What is saved on your phone stays on your phone.

Shared rooms — “Waddle with others” (optional)

Rooms let penguins do their routines side by side. They need an account. While you are in a room we handle:

Presence: your penguin’s name, outfit, position and what activity you’re doing, sent live to others in the same room so they can see your penguin. This is transient — it is not kept after you leave.
Chat: short messages appear as speech bubbles and are never stored on our server. They live briefly on the phones in the room and are gone when you leave.
People you’ve shared a room with: so you can invite them again later. You can’t see their contact details, only their penguin.
Blocks and reports (safety): if you block someone, we store that so they can’t follow you into your rooms. If you report someone, we store the report — the reason, your note, and a snapshot of the recent chat you saw as evidence — so we can act on harassment. Reports are visible only to us, for moderation.

Optional AI features

Two features can use AI, and both are off until you say yes inside the app: Smart split (tidies your brain-dump into tasks) and Write one for me (drafts a routine from a sentence).

What is sent: only the text you type into those two places — no name, no email, nothing else. The text travels over an encrypted connection through Waddle’s own small relay (hosted on Vercel) to Anthropic’s Claude, which returns the result. The relay carries no API key and does not log or store your text; Anthropic processes it to generate the reply and does not use it to train its models. If you decline, both features simply run on your device instead — nothing is lost.

Occasional news by push (optional)

If you turn notifications on inside Waddle — the switch whose list includes “notes from the maker” — the app stores a push token on our server so we can send you occasional app news (a new feature, an important fix). A push token is a delivery address for your installation of the app, created by Apple/Google's push service. It is not linked to your name, email or account, and we keep nothing else alongside it except your app language and app version, so news arrives in the right language. Turn the switch off and the token is deleted from the server; delete the app and it goes dead on its own. We never use push for advertising.

Who processes data for us

Provider	Purpose
Supabase	Account sign-in, database, live rooms, cloud backup, push tokens
Resend	Delivering sign-in emails
Vercel + Anthropic	The optional AI features only
Firebase (Google)	Delivering push notifications, if you opted in
Apple / Google	Sign-in (if you choose it) and any purchases

Data we share or sell

We never sell your data, and there is no advertising or tracking of any kind. We share data only with the providers above, only to run the features you use.

Purchases

If you buy Waddle Plus, payment is handled entirely by the Apple App Store or Google Play. We never see your card details.

Sharing your own progress

When you tap “Share card”, the app makes an image on your device and hands it to your phone’s share sheet. What you do with it is your choice; Waddle is not involved after the image is made.

Children

Waddle is intended for adults and is not directed at children. Because the rooms let people type to each other, we ask that users be old enough for that (see the age rating on your app store). We do not knowingly collect information from children.

Changes to this policy

If this policy changes, the date at the top will change too. Bigger changes — like the shared rooms added in this version — will always be reflected here.

Contact

Questions, or want to report something? Email lhgdlagusurd@naver.com, or visit waddleroutines.com.