Privacy Policy

This Privacy Policy explains how wuntou ("we," "us," "our," or the "App"), operated by an individual developer ("Company"), collects, uses, discloses, and protects information when you use our app for showing your work, finding skilled people, and posting and applying for gigs, and related services (collectively, the "Service").

By creating an account or using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

This app is intended for users 18 years of age and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. See Section 8.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: email address and password (stored in hashed form), or the name and email address Apple or Google share with us if you sign in with them; your username; and your confirmation that you are 18 or older, which you give by accepting the Terms when you sign up.
• Profile information: your name, username, profile photo, bio, skills, work style (remote, on-site or flexible), and the city you choose as your location.
• User content: posts (photos, videos and documents), captions, skill tags, comments and likes.
• Gigs and applications: gigs you post (description, skills, budget and currency, timeline, and a city or remote), applications you send, and pitches (collections of your posts and notes that you send with an application).
• Reviews: the ratings and reviews you give and receive.
• Direct messages: the messages you send to other users, including any photos, videos or files you attach.
• Connections and safety: the people you follow, the people you block, and the reports you make.
• Personal tools: calendar notes and tasks you add for your own planning. Only you can see your calendar.
• Communications with us: information you provide when contacting support or submitting reports (e.g., content reports, appeals).
• Waitlist: if you join the waitlist on our website, the email address you give us. We use it only to tell you when wuntou opens; we don't share it, sell it or use it for anything else.

1.2 Information Collected Automatically

• Activity on the Service: for example, when someone views your gig or pitch, and counts of your followers, comments and applicants. This powers your alerts and the analytics in your personal tools.
• Device and log data: your IP address and the details of each request in our server's logs (kept for security and to fix problems), and your device model, operating system and app version.
• Crash and error reports: when something goes wrong in the app, a report with technical details and your account ID (see Sentry in Section 3).

We don't use analytics or advertising tools that record how you use the app, and we don't use your device's location (GPS). The only location we hold is the city you choose, with its approximate map position, which we use to rank Discover and search results by distance and to tell people nearby about on-site gigs.

1.3 Permission-Based Data

Depending on features you choose to use, and only after you grant permission through your device's OS-level permission prompt, we may access:

• Camera and photo library, to let you take or choose photos and videos for your posts, profile or messages.
• Microphone, to record sound when you film a video in the app.
• Push notification token, to send you notifications (you can disable this in device settings at any time).

Files you choose to attach, such as documents, are read only when you pick them.

1.4 Public Nature of Profiles

Your profile (name, username, photo, bio, skills, work style and city), your posts, the gigs you post and the reviews you receive can be seen by other users of the Service. Please consider this before posting personal or sensitive information.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account.
• Operate and improve the Service, for example ranking Discover by shared skills and distance, telling people with matching skills about new gigs, and suggesting a pitch for a gig.
• Provide the features you use: posting, commenting, liking, following, messaging, gigs, applications, pitches and reviews.
• Send you service-related communications (e.g., security alerts, notifications you've opted into).
• Detect, investigate, and prevent fraud, abuse, spam, and violations of our Terms & Conditions.
• Check content automatically, respond to reports, and enforce our Terms.
• Comply with legal obligations and enforce our legal rights.

We do not use your information for advertising, and we do not sell your personal information.

3. How Information Is Shared

We share information only in the following circumstances:

• With other users: what other users can see is described in Section 1.4. When you apply for a gig, the person who posted it sees your application and pitch. Direct messages are visible only to the sender and recipient(s).
• Service providers: we share data with vendors who help us operate the Service, under contractual confidentiality and data-protection obligations, and only what each needs:
  • Supabase: our database and sign-in (your account, profile, posts, gigs, messages and settings).
  • Render: our server, which processes uploads and requests.
  • Backblaze B2: storage for photos, videos, files, message attachments and profile pictures.
  • OpenAI: automatic checking of text and images for objectionable content.
  • Google Cloud: turning documents into preview images (processed in memory, not stored).
  • Sentry: crash and error reports (with your account id only, no content).
  • Expo, Apple and Google: delivering push notifications to your phone.
  • Apple and Google: Sign in with Apple and Google sign-in, if you use them.
• Legal and safety reasons: we may disclose information if required by law, legal process, or government request, or where necessary to protect the rights, property, or safety of our users, the public, or the Company.
• Business transfers: if the Company is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information to third parties, and we do not share it with third parties for their own marketing (California's "Shine the Light" law).

4. Your Rights and Choices

• Access & correction: you can review and edit most profile information directly in the app.
• Account deletion: you may delete your account at any time:
  • In-app: More → Account → Delete account.
  • On the web: https://wuntou.com/delete-account

Deleting your account permanently removes your profile and associated personal data from our active systems (not merely deactivation), except where we are required or permitted to retain certain data (e.g., for legal, security, or fraud-prevention purposes), as described in Section 5.

• Notification controls: you can manage push notifications in your device settings or in-app.
• Regional privacy rights: depending on where you live, you have further rights:
  • European Economic Area, United Kingdom and Switzerland: see Section 10.
  • United States: California and other states with privacy laws, see Section 11.
  • Everywhere else: see Section 12.

5. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service. Upon a verified account-deletion request, we delete associated personal data within 30 days, except where retention is required for:

• Legal, tax, or regulatory compliance.
• Fraud prevention and security investigations.
• Resolving disputes or enforcing our agreements.

Waitlist emails are kept until we've told everyone on the list that wuntou has opened, and deleted within 30 days of launch. To be removed sooner, email support@wuntou.com from that address.

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information (e.g., encryption in transit, access controls). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your own, mainly the United States, where our service providers (Section 3) run. Where the law requires it, we protect these transfers with appropriate safeguards, described for the EEA, UK and Switzerland in Section 10.5.

8. Children's Privacy

This Service is intended for users 18 and older and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete that account and its information promptly. If you believe someone under 18 is using the Service, contact us at support@wuntou.com.

9. Advertising, Tracking and Do Not Track

The Service does not display third-party advertisements or use advertising SDKs, and we do not track you across other companies' apps or websites. No third party collects information about your activity over time through the Service, apart from the service providers in Section 3, which work only for us.

Some browsers and devices can send a "Do Not Track" signal. Because we do not track you, the Service works the same whether or not the signal is sent.

If this ever changes, we will update this Privacy Policy, our App Store "Privacy Nutrition Label" and Google Play "Data Safety" disclosures first, and — for iOS — request permission via Apple's App Tracking Transparency framework before any tracking.

10. Your Rights in the EEA, UK and Switzerland

This section applies if you are in the European Economic Area, the United Kingdom or Switzerland, where the General Data Protection Regulation (GDPR), the UK GDPR or the Swiss Federal Act on Data Protection apply. It adds to the rest of this Privacy Policy.

10.1 Who is responsible for your data

The controller of your personal data is the individual developer who operates wuntou. You can reach us at support@wuntou.com.

10.2 Why we may use your data (legal bases)

• To provide the Service you signed up for (performance of a contract): your account, profile, posts, gigs, applications, pitches, messages, reviews, notifications and calendar.
• To keep the Service safe and working (our legitimate interests): automatic content checks, preventing fraud and abuse, security logs, crash reports, and ranking Discover and matching gigs by skills and distance. We have weighed these interests against your rights, and you can object (Section 10.4).
• With your consent: access to your camera, microphone and photos, and push notifications, which you give through your device's permission prompts. You can withdraw consent at any time in your device settings; this does not affect what we did before you withdrew it.
• With your consent: the email address you give to join the waitlist, used only to tell you when wuntou opens. You can withdraw it at any time by asking us to remove it.
• To meet legal obligations: answering lawful requests from authorities and keeping records the law requires.

Giving us your email address and accepting the Terms is needed to create an account; everything else in your profile is up to you.

10.3 Automated processing

New posts, comments, gigs and profiles are checked automatically for objectionable content, and something that cannot be checked straight away is visible only to you until it has been. Discover and search results are ranked automatically by shared skills, distance and freshness. None of this produces decisions with legal or similarly significant effects on you. If your content is held or removed and you think that is wrong, email support@wuntou.com and a person will review it.

10.4 Your rights

You have the right to:

• Access your personal data and get a copy of it.
• Have inaccurate data corrected.
• Have your data erased (you can also delete your account yourself, Section 4).
• Restrict how we use your data.
• Object to uses based on our legitimate interests.
• Receive your data in a portable format (data portability).
• Withdraw your consent at any time.
• Complain to a data protection authority: in the UK, the Information Commissioner's Office (https://ico.org.uk); in the EEA, the authority where you live (listed at https://edpb.europa.eu); in Switzerland, the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch).

To use these rights, email support@wuntou.com from the email address on your account. We will answer within one month, or tell you within that month if we need up to two more months because the request is complex.

10.5 International transfers

Our service providers (Section 3) process data mainly in the United States. Where a provider is certified under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), we rely on that; otherwise we rely on the European Commission's Standard Contractual Clauses, with the UK Addendum for UK data. You can ask us for a copy of the relevant safeguards at support@wuntou.com.

11. Your U.S. State Privacy Rights

This section applies to residents of California and other U.S. states with consumer privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon). It adds to the rest of this Privacy Policy.

11.1 What we collect, where it comes from, and why

In the past 12 months we have collected these categories of personal information, as described in Section 1:

• Identifiers: name, username, email address, account ID, IP address and push notification token.
• Customer records: the account and contact details you give us.
• Professional information: skills, work style, gigs, applications, pitches and reviews.
• Audio and visual information: photos, videos (with sound) and files you post or send.
• Approximate geolocation: the city you choose.
• Activity on the Service: posts, comments, likes, follows, messages, and views of your gigs and pitches.
• Sensitive personal information: your account login and the contents of your messages. We use these only to provide the Service, and not to infer anything about you.

This information comes from you, from your use of the Service, and from Apple or Google if you sign in with them. We use it for the purposes in Section 2, disclose it for those purposes only to the service providers in Section 3, and keep it as described in Section 5.

11.2 No sale, sharing or targeted advertising

We do not sell your personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that has legal or similarly significant effects, and we have not done so in the past 12 months. So there is nothing to opt out of. If that ever changes, we will update this Privacy Policy first and honor opt-out requests and signals such as Global Privacy Control.

11.3 Your rights

Depending on your state, you have the right to:

• Know and access the personal information we hold about you.
• Correct personal information that is inaccurate.
• Delete your personal information.
• Get a copy of your personal information in a portable format.
• Not be treated differently for using these rights: we won't deny you the Service or give you a different level of it.

11.4 How to make a request

Email support@wuntou.com from the email address on your account (or tell us your username if you no longer have access to it). To protect your account, we will confirm the request comes from you, usually by asking you to reply from that address. You can also delete your account yourself at any time (Section 4).

We will respond within 45 days. If we need more time (up to another 45 days, where the law allows), we will tell you why. Someone you authorize can make a request for you; we will ask for your signed permission and may ask you to confirm your identity with us directly.

11.5 Appeals

If we decline your request, you can appeal by emailing support@wuntou.com with "Appeal" in the subject line. We will reply within 60 days and explain our decision. If you disagree with the outcome, you can contact your state's attorney general.

12. Your Rights in Other Countries

Many other countries give you similar rights, for example Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act), Japan (APPI), South Korea (PIPA), South Africa (POPIA), Turkey (KVKK) and India (Digital Personal Data Protection Act). Depending on where you live, you can:

• Ask what personal information we hold about you, and get a copy.
• Have it corrected or deleted.
• Withdraw any consent you have given.
• Complain to the data protection authority in your country if you are unhappy with how we handled your request.

Email support@wuntou.com from the email address on your account. We will answer within 30 days, or sooner where your local law requires. This address is also our contact for grievances under India's Digital Personal Data Protection Act.

13. Third-Party Links and Services

The Service may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of those third parties. Review their privacy policies separately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or email, and update the "Last Updated" date above. Continued use of the Service after changes take effect constitutes acceptance.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

• wuntou
• Email: support@wuntou.com
• Account deletion requests: https://wuntou.com/delete-account