Privacy Policy

Account & profile: your name, email, age confirmation, photo, and (for coaches) bio, location, skills, and availability.

Bookings & messages: sessions you request, your timezone, notes, recaps, reviews, and conversations with coaches.

Payments: processed by Stripe. We store payment records and account credit balances, but never your full card details (Stripe handles those directly).

Recordings (sensitive information):if you and the other participant both consent, a session’s audio and/or video may be recorded. We treat recordings as sensitive personal information and only capture them with your explicit, informed consent at the time of the call. Recordings are stored privately and auto-expire after 90 days.

AI assistant: questions you ask our in-app AI assistant are processed to generate a response and to prevent abuse.

Technical: IP address and device/browser info, used for security, rate-limiting, and abuse prevention.

We collect, use, and disclose personal information with your consent. You provide consent when you create an account and accept this policy, and we obtain express consentfor sensitive activities — most importantly, recording a session (see above), which requires the explicit agreement of every participant. Where required by Quebec’s Law 25, our settings default to the most privacy-protective option, and we ask for consent separately for each distinct purpose. You may withdraw consent at any time (see “Your choices & rights”), subject to legal or contractual limits.

To run the service — match you with coaches, schedule and host sessions, process payments and credits, send transactional notifications, provide support, meet legal and tax obligations, and keep the platform safe.

We do not sell your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects about you.

We share personal information only with service providers who process it on our behalf to deliver Wingbie: Supabase (database & authentication), Stripe (payments), LiveKit (live video/audio sessions), Cloudflare R2 (file and recording storage), Groq (AI assistant), and Brevo (email delivery). Each processes data only as needed to provide their service. We also disclose information when required by law, to enforce our terms, or to protect the rights and safety of our users.

Some of our service providers store or process data on servers located outside Canada, including in the United States and other countries. As a result, your personal information — including recordings — may be transferred to, stored in, and accessed from outside your province or country, where it may be subject to the laws of those jurisdictions (including lawful access by foreign authorities). We take contractual and technical steps intended to protect personal information that is handled outside Canada. In particular, our video infrastructure runs on servers in the European Union (Germany), and other providers (such as payment, database, email, and AI services) process data primarily in the United States and the European Union.

We keep your personal information only as long as needed for the purposes above or as required by law:

• Account & profile data: while your account is active, then anonymized on deletion.
• Session recordings: automatically deleted/unlinked 90 days after the session.
• Payment and transaction records: retained as required by tax and accounting law (commonly up to 6–7 years in Canada), in a form stripped of unnecessary personal details.
• Account credit: expires 12 months after it is issued.

Subject to applicable law, you have the right to access the personal information we hold about you, to correct inaccuracies, to delete your account and data, to withdraw consent, and to data portability. Under Quebec’s Law 25 you may also request that we cease disseminating personal information or de-index it where the legal conditions are met.

You can exercise most of these rights directly from Settings: edit your profile and timezone, export a copy of your data as a downloadable file, and permanently delete your account. Deleting your account removes or anonymizes your personal data; some records (e.g. financial transactions) may be retained where required for legal, accounting, or fraud-prevention purposes. For any request we can’t fully self-serve, contact our Privacy Officer below; we respond within the timeframes required by law.

We use strictly necessary first-party cookies to keep you signed in and to secure the service. We do not use third-party advertising or cross-site tracking cookies. You can clear or block cookies in your browser, but doing so may prevent you from signing in.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls and encryption in transit. No system is perfectly secure, but if a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the relevant privacy authorities (including the Office of the Privacy Commissioner of Canada and, where applicable, the Commission d’accès à l’information du Québec) as required by law, and keep records of breaches.

Wingbie is for adults. You must be 18 or older to use it, and we do not knowingly collect personal information from anyone under 18.

We may update this policy from time to time. Material changes will be notified in-app and/or by email, and the “Last updated” date above will change. Your continued use after an update means you accept the revised policy.

Questions, requests, or complaints about privacy? Contact our Privacy Officer at privacy@wingbie.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or your provincial privacy regulator.