Privacy policy

Who is responsible for your data

Wuffi is run by Gary Studio, which decides how the data described in this policy is handled. Subscription payments and invoices are processed by Polar as merchant of record. For any questions, email support@wuffi.app。

What data we collect

Account data

When you sign in with Google, we receive your Google account ID, email, name and profile picture URL. We never receive your Google password and never read your Gmail, Drive or other Google data.

What you write

Documents saved to the cloud (titles, text and tags), earlier versions of documents (up to 50 each), images you upload or paste, and content you import from Word, Epub and other files.

Usage

To track your plan allowance, we record how many AI tokens and voice seconds you use each day or month, not what you said to the AI.

Subscriptions and payments

Polar processes payments; we never see or store your card number. We keep only the customer ID, plan, status and subscription period that Polar provides.

Technical logs

Our servers keep access logs (IP address, time, requested URL and browser information) and error logs to keep the service running and prevent abuse.

Website analytics

The wuffi.app website loads Google Analytics only with your consent, to understand how the site is visited; you can withdraw anytime under “Analytics settings” in the footer. The web app at app.wuffi.app does not use Google Analytics.

How we use your data

• To provide the service: signing in, saving and syncing documents, AI revisions, speech-to-text and file conversion.
• To manage plans: determining your plan, trial period and remaining allowance.
• To keep things secure: rate limiting and detecting and blocking abuse. To prevent repeat free trials, after an account is deleted we keep a hash of its Google account ID, which cannot be turned back into your email or name.
• To reply to your emails and support requests.

We do not sell your data, do not use your writing to train AI models, and do not use your content for advertising.

Who we share data with

We share only what is needed to provide the service, with these providers:

Beyond this, we disclose data only when required by law, to protect the safety of users or others, or in a business transfer, which we will tell you about in advance.

AI and voice

Content is sent only when you send an AI request or start voice input: an AI request includes your selected passage or whole document and the current conversation; voice input sends recorded clips to be transcribed.

These requests go through OpenRouter to OpenAI. We instruct OpenRouter to use only providers that do not retain data or train on it; providers may still keep data briefly under their own policies to detect abuse. Wuffi does not store your recordings; they are discarded after transcription.

How long we keep data

• Account and documents: kept until you delete them. Deleted documents are kept for 30 days so support can recover them, then permanently deleted.
• Account deletion: your account, documents, versions, images, usage and subscription records are deleted from the database immediately; daily backups are overwritten within 14 days.
• Server access logs: rotated by size and usually overwritten within a few weeks.
• Payment records: kept by Polar as required by law and tax rules.

Your rights

At any time, you can:

• Access and download: get all your documents and images with “Download all data (ZIP)” on the account page.
• Correct: edit your documents directly; your name and email come from your Google account.
• Delete: use “Delete account” on the account page. If you have an active subscription, cancel auto-renewal first.
• Stop: withdraw analytics consent on the website, or stop using the service.

Depending on where you live (for example under Taiwan’s Personal Data Protection Act or the EU GDPR), you may have further rights. For help, email support@wuffi.appand we will reply within 30 days.

Cookies and local storage

The web app uses only the cookies needed to keep you signed in (your session and sign-in security checks), never advertising or tracking cookies. The editor keeps draft backups and preferences (such as theme, sorting and custom themes) in your browser; these stay on your device.

Security

All connections use HTTPS; the database accepts connections only from its own server; images are readable only by their owner; payment data is handled entirely by Polar. No system is perfectly secure, and if an incident affects your data we will notify you as the law requires.

Age requirement

Wuffi is not designed for people under 16, and we do not knowingly collect personal data from anyone under 16. If you learn that this has happened, tell us and we will delete the data.

Changes to this policy

If we make significant changes to this policy, we will notify you by email or on the website before they take effect.

Contact

Any privacy questions:support@wuffi.app。