Winnow
Privacy Policy
Last updated: 26 September 2026
Winnow is operated by Michelle Walstra, an individual developer based in Calgary, Alberta, Canada. This policy explains what data we collect, how we use it, and your rights regarding it.
Questions? Email info@getwinnow.app.
What We Collect
- Email address — collected when you create an account. Used for authentication and communication.
- Audio recordings — uploaded or recorded within the app for transcription. Audio is deleted from our servers immediately after transcription processing is complete.
- Conversation transcripts and generated reports — stored securely and associated with your account until you delete your account.
- Names and details you add about conversation participants — if you name or label the people in your conversations (for example a partner, friend, or colleague), those names, relationship labels, and any notes you add are stored with your account so we can show relationship insights over time.
- Profile photo — optional. If you add one, it is stored in a publicly accessible storage bucket and associated with your account.
- Device identifiers and push notification tokens — Expo push tokens used to deliver notifications to your device, and your device timezone so reminders arrive at a sensible local time.
- Usage analytics — how you navigate and use the app (screens viewed, features used, and session replays of your interactions). Conversation content, transcripts, and reports are masked and excluded from analytics.
- Feedback you send us — if you send feedback from within the app, your message is stored with your account and emailed to our support inbox.
- Subscription and purchase information — managed by Apple. We receive confirmation of subscription status but do not store your payment details.
How We Use Your Data
- To provide the core Winnow service — transcription, analysis, and report generation.
- To send you push notifications — when your report is ready, for daily practice reminders, and occasional reminders if you haven't used the app in a while. You can disable notifications at any time in your device settings.
- To improve the app and diagnose technical issues.
- We do not sell your data to third parties. We do not use your conversations for advertising.
Shared Links
You can choose to share part of a report through a private link on getwinnow.app. When you do, we store a copy of only the parts you picked: a short highlight, your own section, or the full report, with quotes included only if you turn them on. Shared links never include audio or transcripts.
- Anyone who has the link can open the page, so share it only with people you trust. Links use a long random code that can't be guessed, and the pages are marked so search engines don't index them.
- A full report can include what Winnow noticed about the other people in the conversation. Please consider them before sharing it.
- Links end after 30 days. You can turn a link off at any time from the report; its copy is deleted straight away. Links are also deleted when you delete the conversation or your account.
- We count how many times a shared page is opened. We don't use analytics or session replay on shared pages.
Third Parties We Share Data With
- Supabase — database and authentication infrastructure. supabase.com
- AssemblyAI — audio transcription. Audio is sent to AssemblyAI solely for transcription and is not retained by them beyond their standard processing period. assemblyai.com
- Anthropic — AI-powered conversation analysis via the Claude API. Transcripts are sent to Anthropic for analysis. anthropic.com
- Apple — payments, subscription management, distribution, and push notification delivery (APNs). apple.com
- Expo — push notification delivery. Your device push token and notification content (such as a conversation's title) are processed by Expo's push service to deliver notifications to your device. expo.dev
- Resend — email delivery. If you send feedback from within the app, your message and email address are sent through Resend to reach our support inbox. resend.com
- PostHog — product analytics and session replay, used to understand how the app is used and to fix problems. Conversation content is masked before anything reaches PostHog; it receives usage events and masked interaction replays associated with your account ID. posthog.com
Data Retention
- Audio files are deleted immediately after transcription is complete.
- Transcripts and reports are stored until you delete your account.
- Shared links keep their copy of a report for 30 days at most, or until you turn the link off.
- Email address is retained while your account is active.
- Profile photo, if provided, is retained until you replace it or delete your account.
- Usage analytics are deleted from our analytics provider within 30 days of account deletion.
Your Rights
You can delete your account at any time from the Settings screen within the app. This will permanently delete your account and all associated data, including transcripts and reports. We will complete deletion within 30 days.
You may also request deletion by emailing info@getwinnow.app.
Children
Winnow is not intended for users under the age of 17. We do not knowingly collect data from children.
Changes to This Policy
We may update this privacy policy from time to time. We will notify users of material changes via email. Continued use of the app following notification constitutes acceptance of the updated policy.
Governing Law
This policy is governed by the laws of the Province of Alberta, Canada.
← Back to Winnow