Winkora Privacy Policy

1. Data Collection

Information received through Winkora may fall into several categories depending on how the app is used. This can include personal details a user submits directly, such as an email address, account credentials, support messages, or profile preferences.

The app may also gather habit-related content created inside the experience, including wake-up check-ins, reflection entries, routine milestones, streak history, and progress records. These entries are used to support the core habit-building functions of the app.

In addition, technical information may be generated automatically. Examples include device model, operating system version, app version, approximate region, language settings, crash reports, diagnostic logs, and in-app interaction data such as feature usage and session timing.

• Account and contact information provided by the user
• Morning routine activity, reflections, check-in history, and progress metrics
• Device and diagnostic details used for reliability, security, and performance analysis
• General analytics from integrated third-party software development kits or service components

Winkora does not require access to highly sensitive permissions such as contacts, photo libraries, or precise location in order to deliver its primary experience. If a future feature requests such access, the request will appear through the iOS permission system and will only be used for the stated purpose.

2. Data Usage

The information associated with Winkora is used to operate the app as intended: maintaining user accounts, syncing habit records where applicable, displaying progress, improving reflection tools, and supporting motivational features tied to a user’s morning routine.

Data may also be utilized to keep the service stable and secure. That includes troubleshooting software issues, detecting misuse, reviewing crash patterns, and understanding which features are useful or underperforming.

In some cases, contact information may be used to send service-related notices such as account confirmations, support replies, security alerts, or important updates about the app. Marketing communications, if offered, may be sent only where permitted by law, and users may opt out when such messages are available.

Information is not sold for cash. Limited sharing may occur with service providers or infrastructure partners when necessary for hosting, analytics, customer support, authentication, payment processing if introduced later, legal compliance, or platform operations.

3. Data Storage & Security

Data may be stored on secure servers, cloud infrastructure, or managed platforms used to operate Winkora and its related services. Depending on the technical setup, records may be processed in the user’s country or in other jurisdictions where our providers maintain systems.

Reasonable safeguards are used to reduce the risk of unauthorized access, disclosure, alteration, or loss. These measures may include encrypted connections, access controls, credential protections, environment restrictions, logging, and routine monitoring of service integrity.

No digital system can promise absolute security. Even so, practical technical and organizational measures are applied in line with the size and function of the app.

Retention periods depend on the type of information involved and the reason it was obtained. Account records and habit history may be kept while an account remains active. Diagnostic logs, support correspondence, and compliance-related records may be stored for a shorter or longer period as needed for operational, legal, or security reasons. When data is no longer necessary, it may be deleted, anonymized, or aggregated.

4. Third-Party Services

Winkora may rely on external providers to power parts of the app. These providers can include hosting companies, cloud storage partners, analytics tools, authentication systems, customer support platforms, and other operational vendors.

Those services may process limited information on our behalf in order to perform their assigned role. Their handling of information is governed by their own contractual terms, privacy commitments, and applicable law.

The app may also contain links or references to external websites or services not controlled by Winkora. When a user leaves our environment and enters another service, that third party’s privacy practices apply instead of this policy.

5. User Rights (GDPR & CCPA)

Depending on where a user lives, privacy laws may provide specific rights regarding personal information. These rights can include the ability to request access to the information associated with an account, ask for corrections, request deletion, object to certain processing, or limit how information is used.

• Request a copy of personal information we hold about you
• Ask us to correct inaccurate or incomplete records
• Request deletion of eligible personal data
• Opt out of certain optional communications or uses where available
• Ask questions about disclosure, retention, or data-sharing practices

California residents may also have rights related to disclosure categories, access, deletion, and non-discrimination under applicable state law. Users in the European Economic Area, United Kingdom, or similar jurisdictions may have additional rights under GDPR or related regulations.

To exercise any of these rights, send a request to support@winkora.com. We may need to verify identity before completing certain requests in order to protect account security and prevent unauthorized disclosure.

6. Children's Privacy

Winkora is intended for adults and is not designed for children under the age of 18. The app should not be used by minors, and we do not knowingly gather personal information from anyone under 18 years of age.

If we learn that a minor has submitted personal information without appropriate authorization, we will take reasonable steps to remove that information from our active systems, subject to legal or security obligations that may require limited retention.

Our practices are intended to align with applicable child privacy rules, including the principles reflected in COPPA where relevant.

7. Policy Updates

This policy may be revised from time to time as Winkora evolves, features change, legal requirements shift, or operational practices are updated. The revised version becomes effective on the date shown at the top of this page unless another date is stated.

When updates are significant, users may be informed through the app, by email, or through another reasonable notice method. Continued use of the app after a revised policy takes effect means the updated terms will govern future handling of information, to the extent permitted by law.