Privacy Policy

Winside helps you work out what business to build, and then walks you through building it. This policy describes exactly what the app does with what you tell it. It is short because the app does very little.

There is no account, no login, and no profile. We do not know who you are.

What stays on your phone

Almost everything. Your answers during the Find, your Edge, the business you chose, your pact, your streak, every mission you close and everything you write when you close it — including the notes Fi writes back and any link you paste — all of it is stored in the app's own storage on your device.

None of it is sent to us to keep. We have no account system, no user database, and nothing that could hold it.

Deleting the app deletes all of it. "Reset everything" in Settings does the same without deleting the app.

What leaves your phone

Two things leave your phone, and only two: requests to a language model, when you tap a button that asks Fi for a judgement or a draft, and anonymous usage events, which say which steps of the app were reached and never what you wrote. The second are described in their own section below.

Some parts of the app ask a language model for a judgement or a draft. They send something only when you tap the button that asks for it.

Across those features, what can be sent is:

• what you typed for that step — your idea, your offer sentence, the price you set, the bottleneck you named, or the answer you are asking Fi to read
• your Edge archetype and its phrase
• the name and short description of your project
• the signals, drives, fields and worlds you picked during the Find
• your country, when the answer depends on the market you sell in
• when you open your weekly review, the missions you closed that week (up to seven), their closing questions and your answers to them, and the mission you are waiting on, if any
• when you ask Fi a question in the Journal, your question, the answers you wrote for your last fourteen closed missions, your last six questions to Fi with Fi's answers, the mission you are on and your country. The conversation itself is kept on your phone only
• when you ask Fi to check three competitors, the offer and price you wrote and your country. Fi searches the public web for similar businesses; nothing about you is part of that search beyond what your offer says
• the first name of the person you are writing to, on the one mission where Fi drafts a message for you, so the message is not addressed to a bracket

Two of these deserve to be spelled out.

When you ask Fi to read your landing page, you give it a web address. Our relay fetches that page and sends its visible text to be reviewed. It only ever fetches public https addresses, it reads at most the first few thousand characters, and it keeps nothing. Do not point it at a page you would not show a stranger, because reading it is exactly what it does.

When Fi drafts a message for you, the first name you gave is included so the message can open with it. That name is another person's, so it is worth knowing it goes with the request. It is capped at sixty characters, nothing else about them is asked for or sent, and no copy is kept.

That is the complete list for these requests. No email address, no device identifier, no advertising ID, no contacts, and no location coordinates.

What happens to it

The request passes through a relay we run on Cloudflare, which forwards it to Anthropic's API, which returns the answer. The relay writes nothing: no database, no logs, no copy of your request or of the answer. Once the response reaches your phone, nothing about it exists on our side.

Cloudflare and Anthropic are our processors for this one step. Cloudflare necessarily sees the network connection, including your IP address, because every request on the internet carries one; we use it only to limit how many requests a single connection can make per minute, and we do not store it. Anthropic processes the text under its commercial API terms and does not use it to train its models.

Anonymous usage events

The app reports which steps of the app were reached, so we can see where people stop and fix it. These events are the complete list:

• the app was opened for the first time
• the welcome screen and Fi's introduction were passed
• your Edge was revealed
• your pact was set
• your first mission was closed
• the subscription screen was shown
• your weekly review was opened, and whether you started the one thing it suggested (which kind: a follow-up, finishing fix steps, or the next mission)
• where you heard about Winside, only if you pick an answer from the list we show you

None of them carries anything you wrote. Not your answers, your idea, your project name or any mission text: an event is the name of a step. Two carry one word more, from a fixed list: the option you picked for "where you heard about us", and the kind of suggestion you started from your weekly review.

Each event comes with a random identifier created by the app on your phone, so that steps reached on the same phone can be counted together. It is not your device's identifier and not an advertising ID, it is never linked to your name, email or Apple ID, and deleting the app deletes it. Events also carry the app version, the phone model and operating system version, your language and time zone, and the country your connection comes from.

The events are stored by PostHog, our processor for this, on servers in the European Union. PostHog is set to discard your IP address: it is used for a moment to work out the country and is not kept. No person profile is created.

What you choose to share

Three screens have a share button — your Quest Card, a drafted message, and your journal. Pressing one hands the text to your phone's own share sheet, and from there it goes wherever you send it. That is your device doing it, not us: we never see what you shared or who you sent it to.

Permissions the app may ask for

Each one is optional, each one is asked for at the moment it is used, and the app works without any of them.

Location — asked once, at lowest accuracy, to fill in your country so the advice can account for where you are. The position is turned into a place name on the device. Only the country is ever sent, never the coordinates. You can also just type your country instead.

Microphone and speech recognition — so you can dictate instead of typing. The microphone is open only while dictation is running. We never record or keep audio. Note that speech recognition on iOS is performed by Apple, and Apple may process the audio on its own servers to transcribe it; that is Apple's handling, under Apple's privacy policy. If you would rather it did not, type instead of dictating.

Notifications — so the app can remind you at the hour you chose, and before a call you booked. Every reminder is scheduled and delivered by your own device. There is no push server, and no way for us to send you anything.

If you connect Google Calendar

This is optional, off by default, and only offered in Settings.

If you connect your Google account, Winside asks Google for one permission beyond your address: to create calendars of its own and manage the events in them (calendar.app.created). It cannot see, change or delete anything else in your calendar. It uses it for one job: when you tap Add my sessions to Calendar, it creates a calendar called Winside and puts one weekly event in it per session of your pact.

Those events go between your phone and Google directly. Nothing from your Google account is sent to our relay or to a language model, and nothing is stored anywhere but on your phone.

To connect, the app signs in with Google itself; our relay is not involved. The access tokens Google gives back are kept in your phone's keychain. Disconnect in Settings, or Erase everything, revokes them at Google and deletes them; you can also remove Winside's access from your Google account at any time, and delete the Winside calendar like any other.

Winside's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Payment

The subscription is sold by Apple, not by us. Your payment details go to Apple and never reach this app or our relay. We receive sales reports from Apple that say how many subscriptions were bought in which countries, with no way to tell who bought them.

To check whether your subscription is active, the app uses RevenueCat, our processor for purchases. RevenueCat receives your purchase receipt from Apple and a random identifier created by the app, never your name or payment details. So that we can see how many people who reached a step went on to subscribe, RevenueCat passes the purchase events on to PostHog under the same random identifier as the usage events above.

What we do not do

• We do not collect anything you write. The usage events above name steps, never content.
• We do not track you, across this app or any other.
• We do not build a profile about you.
• We do not sell, rent, or share anything with anyone for advertising.
• There are no advertising networks and no advertising identifier in the app.

Children

Winside is not directed at children under 13, and we do not knowingly collect anything from them.

Your rights

The usage events are not linked to your name, email or Apple ID, so we have no way to find the ones that came from your phone, and nothing else about you is held on our side to look up, export, or delete on request. Everything the app knows is on your phone and is yours to erase at any time, either through "Reset everything" in Settings or by deleting the app.

If you have a question about any of this, write to hello@getwinside.com.

Changes

If this policy changes, the date below changes with it. If a change means the app starts doing something it does not do today, we will say so in the app rather than only here.

Winside — last updated 25 October 2026.