Privacy Policy

1. Who we are

Wyrdee is operated by David Wells trading as Wyrdee, based in the United Kingdom. We are the data controller for personal data processed through the Service. You can reach us at support@wyrdee.com.

2. Data we collect

• Account data: email address, authentication identifiers (e.g. Google account ID if you sign in with Google), and profile information you provide.
• Content data: the prompts you submit and the translations you generate or save.
• Usage data: daily translation counts, subscription status, and basic interaction telemetry.
• Technical data: IP address, browser type, device information, and log data needed to operate and secure the Service.
• Payment data: handled directly by Stripe (see Section 5). We do not receive or store your card details.

3. How we use your data

• To create your account and provide the Service.
• To generate translations (your prompts are sent to AI model providers - see Section 5).
• To enforce daily limits and manage subscription access.
• To respond to your support requests.
• To detect, prevent and investigate fraud and abuse.
• To comply with our legal obligations.

4. Legal bases (UK GDPR)

• Contract: to provide the Service you have subscribed to.
• Legitimate interests: to secure the Service, prevent abuse, and improve our product.
• Legal obligation: to meet tax, accounting and regulatory requirements.
• Consent: where specifically requested (e.g. optional communications).

5. Who we share data with

• Lovable Cloud / Supabase: hosting, database and authentication infrastructure.
• Stripe: our Merchant of Record. Stripe processes all payments, manages subscriptions, calculates taxes and issues invoices. See Stripe's privacy notice.
• AI model providers (Google, OpenAI): your prompts are sent to these providers via the Lovable AI Gateway to generate translations. They process the data as our processors, subject to their own commitments.
• Professional advisers and authorities where required by law.

6. International transfers

Some providers (e.g. AI model providers, Stripe) are located outside the UK / EEA, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions.

7. Retention

We retain account data for as long as your account is active, and for a reasonable wind-down period afterwards. Saved translations are kept until you delete them or close your account. Billing records are retained as required by tax law (typically 6 years in the UK). Logs are retained for a short operational period and then deleted or anonymised.

8. Your rights

Subject to UK GDPR, you have the right to access, rectify or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent where processing is based on consent. To exercise these rights, email support@wyrdee.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and isolated authentication. No system is perfectly secure, however, and you use the Service at your own risk.

10. Cookies

We use only essential cookies needed to operate the Service - primarily for authentication and session management. We do not use advertising or third-party tracking cookies, so we do not show a cookie consent banner. You can clear cookies in your browser at any time, but signing in will not work without them.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice.