Wonky Wires Privacy Policy

1. Who we are#

Wonky Wires is operated by Onyx Consulting LTD, a Texas corporation doing business as Wonky Wires ("Wonky Wires," "we," "us," "our"). We are the company responsible for the information described in this policy (in EU and UK terms, the "controller").

You can reach us at hello@wonkywires.app for any privacy question or request.

2. Information at a glance#

Apple subscriptions for Pro are handled entirely by Apple. We don't receive or store your Apple payment details or purchase history.

3. What stays on your device#

Everything you create in Wonky Wires is stored only on your phone: jobs, boxes, wiring, notes, labels, dates, and your app settings (such as language and display preferences). We don't receive, copy, or back up your library.

A few things to know:

• Your phone's own backups. If you back up your phone with iCloud or a computer, those backups may include your Wonky Wires library. That's handled by Apple and your device, under their terms.
• We can't recover a lost library. Because your library never reaches our servers, we can't restore it if your phone is lost, reset, or the app is deleted. The ways back are your phone's backup, a backup file you exported from Wonky Wires, or asking someone you shared a box with to send it back.
• Backup files are yours. If you export a backup file from Settings, the file is created on your phone and saved wherever you choose. We never receive it. It can include anything you typed, such as notes, so store it somewhere only you can reach.

4. What the app sends to our servers#

Anonymous account ID. The first time you open the app, it creates a random, anonymous account ID for your device, whether or not you ever share anything. It's how features like sharing, crew seats, referrals, and your acceptance of our Terms work. It isn't connected to your name, email, phone number, or Apple Account. If you delete the app without signing in to a crew plan, that ID is no longer used.

A security check at sign-in. When the app creates or signs in to an account, a security service from Cloudflare checks that the request comes from a real device and not an automated script. To do that, Cloudflare looks at technical signals such as your IP address and device and browser characteristics. Usually you won't see anything. We receive only a pass or fail result.

Age confirmation. Before you first use the app, the legal screen asks for your month and year of birth. On iPhones that support it, the app may also ask Apple for your age range, as Texas law requires. We use this only to confirm you're 18 or older. We don't keep your month and year of birth or Apple's age range after the check; we keep only that you confirmed you're 18 or older, as part of the acceptance record in section 2.

Email sign-in, for crew plans only. If you own a crew plan or join a crew, you sign in with a one-time code we send to your email address. This keeps your seat or your plan tied to you, even on a new phone. We store your email address with your account. If you're a crew member, your crew's owner can see your email address in the app, so they know who holds each seat. Nobody else outside Wonky Wires can see it.

Boxes you choose to share. When you share one or more boxes, we store what you shared: the job name, box labels, the box details (the wiring layout and anything you typed into the box, including notes and labels), and a preview picture of the box. Please keep in mind:

• Anyone with the share code or link can view what you shared. That includes people you forward it to, and anyone they forward it to.
• Anyone who saves a copy keeps it. When someone saves a box you shared, it becomes part of their own library on their phone. Deleting your share, or your account, stops the link from working, but it can't remove copies people already saved.
• The preview picture can be opened by anyone who has its web address. Messaging apps also fetch it automatically to show a link preview.
• Only share what you're comfortable sharing. If you typed customer names, addresses, or other personal details into a job or its notes, they'll be visible to anyone with the link.
• Shares expire. A share stops working 90 days after it's created. The shared data is then permanently deleted within about 8 days, and its preview picture is deleted with it. If you delete a share before then, it stops working right away, but its preview picture can stay reachable by its exact web address for about a day, until our nightly cleanup removes it.

Pro access we manage. If you get Pro through a crew plan, a referral reward, or directly from us, we store a record of that access: its type, source, status, dates, and, for crew seats, which crew plan it comes from. If you subscribe to Pro through Apple, Apple manages that subscription and we don't store a record of it.

Referral and crew codes. If you create your own referral code, use someone's referral code, or join a crew with a join code, we record the code and which accounts it connects (for example, who referred whom, or which crew plan a seat belongs to). This is how rewards and crew access get applied correctly.

Safety notices. When the app opens, it checks our server for any safety notice about your version of the app, so we can warn you quickly if we ever find a problem. The check sends only your app version, along with the standard technical information any request includes.

Abuse protection. We keep a short-lived count of how often an account opens shared boxes, so we can stop automated misuse.

5. Crew plans bought on our website#

Crew plans are sold through Stripe's secure checkout page. Stripe collects your payment details, your name, your email address, and your billing address when it's needed for tax, and processes them under Stripe's own privacy policy. We never see or store your full card number.

When your purchase completes, we store:

• your company name (or your email address, if no name was entered at checkout),
• the email address used at checkout,
• your Stripe customer reference,
• the plan, number of seats, and subscription status,
• your crew's join code,
• if you arrived from one of our ads or links, the campaign tags in that link (which ad or campaign it was), and
• if the purchase used a referral code, a record linking it to the person who referred you.

We send your crew's join link to the email address used at checkout, and we keep a copy of that email in our billing inbox so we can help you if it's lost.

6. Our website#

Our website has no ads and no analytics. It doesn't load content from other companies, except Stripe's checkout page when you choose to buy a crew plan, and Meta's pixel on our two crew-plan pages, described below.

Meta's pixel, on our crew-plan pages only. On the crew-plan page (wonkywires.app/crew) and the purchase confirmation page, we use Meta's pixel to measure and improve our ads. It loads only for visitors in the United States, and never if your browser sends a Global Privacy Control signal. When it runs, it tells Meta that you visited the page, that you started checkout, or that you completed a purchase and the plan's price, along with standard browser information such as your IP address and browser type. On the confirmation page, we remove your purchase reference from the page address before the pixel loads, so Meta never receives it. Meta sets a cookie (named _fbp) on those two pages that lasts up to 90 days. On the confirmation page, our own code also keeps one temporary marker in your browser tab so a purchase isn't counted twice; it's deleted when you close the tab and is never sent anywhere. We don't send Meta your name, your email address, your payment details, or anything from a shared box. The pixel is never used on shared-box pages, our legal pages, or in the app. See section 9 for how Meta uses this information and section 13 for how to opt out.

Like any website, our hosting and database providers keep standard technical logs, such as your IP address, browser type, and the pages or data requested, to deliver the site and keep it secure.

When you open a shared box on the website (for example, from a link someone texted you), the page first shows a safety notice and asks you to tap to continue. It remembers that tap only in that browser tab; the tap is never sent to us. The box is then displayed from the shared data described in section 4. We don't collect anything else from you to show it.

7. How we use information and our legal bases#

We use information only to run Wonky Wires. The table also shows the legal basis we rely on under EU and UK data protection law.

We won't use your information for a new purpose that isn't compatible with these without telling you first and, where the law requires it, asking for your consent.

8. What we don't do#

• No selling or renting of your information, to anyone, ever.
• No ads in the app, and no ad networks in the app. The only advertising tool we use is Meta's pixel on two pages of our website (section 6). We don't use it anywhere else.
• No tracking in the app. The app doesn't track you across other companies' apps or websites.
• No analytics tools, in the app or on the website. The only tracking on the website is Meta's pixel described in section 6.
• No AI in the app. The Wonky Wires app doesn't use AI. Its explanations and checks are written into the app, not generated by AI. We may use AI-assisted tools in other parts of running the business, such as reading and answering emails and sorting bug reports, and we choose settings that keep your information out of AI model training.
• No profiling and no automated decisions that have legal or similarly significant effects on you.
• No access to your camera, photos, location, contacts, or microphone. The app doesn't ask for these permissions.

9. Who we share information with#

Service providers. We use a small number of companies to run Wonky Wires. They process information only on our behalf, to provide their service to us. Our main providers are:

Each of these main providers is bound by a data processing agreement to protect your information with the same or equal protection described in this policy, and to use it only to provide their service to us. We also use other business software to run our email, support, and operations, and we choose it with your privacy in mind.

Apple and Stripe. When you pay, you deal directly with Apple (for in-app subscriptions) or Stripe (for crew plans). They handle your payment information under their own privacy policies and are responsible for it, including for their own purposes such as fraud prevention and meeting legal requirements. Stripe also processes crew plan information on our behalf under a data processing agreement with the same protections described in this policy. On supported iPhones, Apple also provides the age range described in section 4.

Your crew's owner. If you're a member of a crew, the crew's owner can see your email address and whether your seat is active, so they can manage who's on their plan.

People you choose to share with. When you share a box, anyone with the code or link can view it, and anyone can save a copy (see section 4).

Meta (our crew-plan pages only). When Meta's pixel runs on our crew-plan pages (section 6), Meta receives the page and checkout events described there. Meta receives this as an independent company under its own privacy policy, not as our service provider, and may use it for its own purposes, including to show you ads and to measure ads. If you're logged in to Facebook or Instagram, Meta may connect it to your account. Under some U.S. state privacy laws, this counts as "sharing" for targeted advertising, or as a "sale," even though we aren't paid for it. You can opt out (section 13).

Legal and safety reasons. We may disclose information if the law requires it, to respond to valid legal process, or to protect the rights, property, or safety of our users, the public, or Wonky Wires.

If the business changes hands. If Wonky Wires is sold, merged, or reorganized, information may transfer as part of that transaction. Anyone who receives it will be bound by this policy for the information it covers.

We don't sell personal information for money. The only disclosure that some state laws may treat as a sale, or as sharing for targeted advertising, is Meta's pixel described above.

10. Where information is processed#

Our main database is located in the United States, and some of our providers process information in the United States and other countries. If you use Wonky Wires from outside the United States, including the EU, the UK, or Switzerland, your information will be transferred to and processed in the United States.

Where the law requires it, these transfers are protected by safeguards our providers offer, such as the European Commission's Standard Contractual Clauses or certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. Email us if you'd like more information about these safeguards.

11. How long we keep information#

When we no longer need information, we delete it or make it anonymous.

12. How to delete your information#

Delete your account in the app. Open Settings and choose Delete Account. This permanently deletes:

• your account ID and, if you signed in to a crew plan, your email address,
• any crew seat or Pro access we manage for you, and your own referral code,
• every box you've shared, and its preview picture. Anyone you shared with will no longer be able to open those links. Copies they already saved to their own phone stay with them.

A few things are kept, as section 11 explains:

• the record that you accepted our Terms and Safety Disclaimer (a minimal record for 15 years, and the rest for 5 years, for legal reasons),
• referral history, with the link to your account removed, and
• if you own a crew plan, the plan and its billing records (7 years, for tax and accounting). The plan stays with your company, and we're notified so it isn't left unmanaged. Deleting your account doesn't cancel a crew plan's billing. Cancel the plan first (see below).

Your library is never on our servers, so deleting your account doesn't touch it. Delete jobs and boxes in the app, or delete the app.

Other ways:

• A shared box: it deletes itself after 90 days. To remove it sooner, delete it in the app or email us the share code.
• A crew plan: cancel it in the app (Manage crew, then "Manage billing or cancel"), use the "Manage billing or cancel" link in your crew plan email, or email us from the address used at checkout. We're required to keep billing records for tax and accounting, as described in section 11.
• Anything else: email us with a share code, a referral or crew join code, or the email address used for a crew plan, so we can find the right records.

We don't rely on your consent to process information (see section 7), but you can stop sharing boxes at any time and ask us to delete what you've shared.

13. Your privacy rights#

For everyone. Wherever you live, you can ask us what information we have about you, ask us to correct or delete it, or ask for a copy. Email hello@wonkywires.app.

Helping us find your information. Most accounts are anonymous, so we can only find information you point us to. Please include whatever applies: a share code, a referral or crew join code, or the email address used for a crew plan or crew sign-in. We may ask for a little more information to confirm the request is really yours, and we'll only use it for that purpose.

If you're in the EU, EEA, UK, or Switzerland, you have the right to access your information, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Where we rely on legitimate interests, you can object at any time. You also have the right to complain to the data protection authority where you live or work. We'd appreciate the chance to help first, so please contact us.

If you're in a U.S. state with a privacy law (such as California, Colorado, Connecticut, Virginia, Texas, Oregon, Indiana, Kentucky, Rhode Island, and others), you may have the right to know what we collect and how we use it, to access, correct, and delete it, to get a portable copy, and to opt out of the sale of your information, targeted advertising, and certain profiling. Our only activity that may count as a sale or as targeted advertising is Meta's pixel on our crew-plan pages (section 6). To opt out, turn on Global Privacy Control in your browser: we treat it as a valid opt-out, and the pixel won't load. You can also block cookies in your browser, or adjust your ad settings with Meta. You can use an authorized agent to make a request on your behalf, and we won't treat you differently for exercising any of your rights.

Categories of information (for U.S. state privacy laws). In the past 12 months we have collected: identifiers (an anonymous account ID; share, referral, and crew codes; for crew owners and members, an email address; for crew plan buyers, the checkout email; on our crew-plan pages, Meta's cookie ID), customer and commercial records (crew plan purchase and subscription records, including which ad or link led to a purchase), age information used only to confirm you're 18 or older and not kept after the check, and internet activity (technical logs; sign-in security checks; on our crew-plan pages, page visit and checkout events). Sources are you, your device, Apple (age range, on supported iPhones), and Stripe. We use them for the purposes in section 7 and keep them as described in section 11. We share them with the service providers in section 9, crew members' email addresses with their crew's owner, and the crew-plan page events and Meta's cookie ID with Meta, which may count as "sharing" for targeted advertising or as a "sale" (section 9). We haven't otherwise sold or shared personal information, and we don't knowingly collect sensitive personal information. (If you type sensitive details into a box you share, that's part of the shared box, used only to show it to people with the link.)

Timing. We'll respond within one month for requests under EU or UK law, and within 45 days for requests under U.S. state laws. If we need more time, the law may allow an extension; we'll tell you why.

Appeals. If we decline your request, we'll explain why. You can appeal by replying to our answer with "Appeal" in the subject line, and we'll respond within the time the law requires. If you're still not satisfied, you can contact your state's attorney general.

14. Do Not Track and browser privacy signals#

We honor the Global Privacy Control (GPC) signal. If your browser sends it, our website doesn't load Meta's pixel at all, and we treat the signal as your request to opt out of the sale of your information and of sharing for targeted advertising. There's no common standard for "Do Not Track," so we don't respond to it separately; GPC is the signal we act on. The rest of our website works the same either way.

15. Age requirement#

Wonky Wires is a tool for electrical work and is for adults 18 and older. Before you first use the app, it asks for your month and year of birth and, on iPhones that support it, may also use the age range Apple provides, as Texas law requires. Anyone under 18 can't continue. We don't knowingly collect information from anyone under 18. If you believe someone under 18 has shared information with us, email us and we'll delete it.

16. Security#

We protect information with measures appropriate to what we hold. Information is encrypted in transit, our database and file storage are encrypted at rest, access to our database is locked down so the app can only reach what each feature needs, sign-ins pass an automated security check, and share codes are generated randomly. No system is perfectly secure, so we can't guarantee absolute security. If a security incident affects your information, we'll notify you and the relevant authorities as the law requires.

17. Changes to this policy#

If we change this policy, we'll update the "Last updated" date at the top. If a change is significant, we'll also give notice in the app or on our website before it takes effect. If a change would affect information we already hold in a meaningful way, we'll ask for your consent where the law requires it.

18. Language#

This policy may be offered in English and Spanish. If the two versions differ, the English version controls.

19. Contact us#

Onyx Consulting LTD, a Texas corporation San Antonio, Texas, USA Email: hello@wonkywires.app Website: wonkywires.app

If you need this policy in a different format for accessibility reasons, email us and we'll help.