Privacy policy
wisst is an app for short articles, one idea each, and the discussions readers open by writing an insight. This page says what wisst keeps about you, why, who else handles it, how long it stays and what you can do about it.
About wisst
wisst is an independent project based in Israel, run by Ronen Hayun as an individual, who decides how your data is used (the controller). It currently has no revenue model.
wisst is reached by email. For questions about your data or this policy, or to delete your account, contact privacy@wisst.app. For anything else, support@wisst.app.
What wisst keeps
- Your account: an account identifier, including for guest readers. When you sign in, wisst also keeps your email address and the identity supplied by your chosen sign-in provider. Email codes, Google and Apple are supported when enabled; Apple can supply a private relay address. Sign-in credentials are kept to maintain your session and, for Apple, to revoke access when you delete your account.
- Your profile: your name and handle, a photo if you add one (it is public, like your name), the topics and languages you pick, your notification settings and quiet hours, your time zone and the app’s language.
- What you write: articles with their earlier versions, tags and photos; insights; replies; reports.
- Drafts: the app keeps a copy on your phone so work survives a lost connection, and saves drafts to your account when connected. Local copies belong to the account that wrote them.
- Photos you add to an article are re-encoded on your phone before they are uploaded, which removes their location and other details from the camera.
- How you read: which articles were shown to you, which you skipped, opened and finished, and how long you spent on them. wisst uses this to choose your feed.
- How far you got in a few steps of the app: the steps of setting it up, the sign-in screen and writing an article (for example, that you reached the title step, or which way you chose to sign in). Never what you typed.
- Who you follow and block, and which discussions you follow.
- If a moderator removes something you wrote: what it said, the rule it broke, what followed (a warning or a suspension) and any request you made for another look. Removals from the last 90 days decide the next step if it happens again.
- Notifications: your device’s push token, and what wisst notified you about.
- If you leave your email address on wisst.app to hear when the app is out: that address, the language of the page and whether you said you’d like to write, and nothing else.
- Our hosting provider keeps server logs, including IP addresses, for a short time, for security and to fix problems.
wisst shows no advertising, does not track you across other apps or websites, uses no third-party analytics and does not sell your data.
Why
- To run the service you signed up for: your account, your articles, discussions, your feed and notifications.
- To see where the app loses people, in setting it up, signing in and writing, and fix it, which is our legitimate interest. Usage counts are shown across readers; authorized staff can also review an account's recorded steps when investigating a problem.
- To keep wisst safe, which is our legitimate interest and yours: checking articles, insights and replies against the content rules, handling reports, removing what breaks the rules and telling you why, and limiting how much one account can do in an hour or a day.
- An email address left on wisst.app only to write to you once, when wisst is on the App Store, because you asked for it; and, if you said you’d like to write, about writing for wisst before the launch.
- Push notifications only with your permission, which you can withdraw in the phone’s settings at any time.
Who else handles it
- Supabase hosts the database, the files and the server functions, in the European Union (Frankfurt, Germany).
- Apple handles Sign in with Apple and delivers push notifications.
- Google handles Google sign-in. Resend delivers sign-in codes by email through its European region; it processes the recipient address and the sign-in email.
- A language model processes articles, insights, replies, display names and profile and article photos to check content against the rules, give writers advice, organize a recording's transcript and translate articles and insights. wisst reaches it through OpenRouter, and the model is Google's Gemini. Both companies are based in the United States, so submitted content may be processed outside the European Union. wisst requests providers that do not retain submitted content or use it for training.
- When you record an article instead of typing it, speech recognition runs on your phone when the selected language is supported there; otherwise audio is processed by Apple's speech recognition service under Apple's terms. wisst does not upload or store the audio. If you choose to use the transcript, it goes to the language model to be organized into the article's parts. The resulting text becomes your editable draft and, if you publish it, your article.
- Sentry receives a report when the app crashes or stops responding, and keeps it in its European Union region (Germany): where in the app's code it happened, the device model, the operating system and the app's version. A report carries no account, name, email address, screenshot or anything you wrote, and is used only to fix the app.
- Moderators, the people who review held articles and reports, see what was reported and who wrote it.
- Authorized staff can view account details and recorded usage steps through the staff console to handle support, moderation and operational problems. Access depends on their role.
- Other readers see what you publish: your articles and your name on them, and your insights and replies, which only readers who wrote an insight on the same article can see. A shared article also has a public page on the web.
How long it stays
- A signed-in account and what is in it stay until you delete your account. Guest accounts unused for 90 days are deleted with their server-side reading data.
- An article you delete can be restored for 30 days, then it is deleted with its photos.
- A photo your article no longer uses is deleted after 7 days.
- How far you got in setting up, signing in and writing: 90 days.
- Reports are kept while they are handled. Reports about you or what you wrote are deleted with your account; reports you filed stay, without your name.
- An email address left on wisst.app is deleted once wisst has written to say it is on the App Store. Write to us before then and it goes at once.
- Copies in the hosting provider’s backups disappear as those backups expire.
What you can do
- Get a copy of your account data: Settings → Your account → Download your data gives you a file with your profile, articles, photos, insights, replies, reading history and settings. A draft that has not reached the server remains on your phone.
- Change it: your name, topics, languages and notifications are in Settings; your articles can be edited or deleted from Your page.
- Delete your account: Settings → Your account → Delete your account deletes it at once, with your articles, insights, replies, drafts and settings. Insights other readers wrote on your articles stay in their journals.
- Delete it without the app: write to privacy@wisst.app from your account’s email address (if you sign in with Apple or Google, say which, and the name on your account). wisst may ask you to confirm from that address, and deletes the account within 30 days.
- Object to how your data is used, ask us to restrict it, or ask anything else at privacy@wisst.app.
- Complain to a data protection authority, such as the one where you live.
Age
wisst is for people 16 and over. People under 16 may not use it, even with a parent’s or guardian’s agreement.
Changes
When this policy changes, this page changes and so does its date. Changes to how your data is handled will be described here, and announced on wisst.app and in the app before they apply: at least 14 days before for a material change, except a change the law requires or one needed for safety.