Privacy Policy

Last updated: November 1, 2026

Wingman ("we", "us", or "our") operates wingmanapp.live — a real-time social discovery app that helps people meet others at public venues. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

1.1 Account Information

When you register, we collect your phone number to verify your identity and prevent fake accounts. We also collect your name, age, a short bio, and interests that you choose to provide.

1.2 Location Data

We collect your precise GPS location to detect when you are physically present at a supported public venue (bar, park, concert, etc.). Location is used only to power check-ins and show you other users at the same venue in real time.

Location data is processed on-device for geofencing. We do not continuously store a history of everywhere you go. Your current venue is stored only while you are actively checked in and cleared when you leave or close the app.

1.3 Usage & Interaction Data

1.4 Photos

In the app, your photos are shown to people checked in at the same venue as you, and on your profile.

Treat your photos as public. They are served from a long, unguessable web address, and anybody who has that exact address can open it without the app and without an account. We do not publish those addresses anywhere, and they are not listed or searchable, but a link that has been shared or saved keeps working while the photo exists.

A photo our moderation refuses is moved out of public reach immediately, and every photo file is deleted from storage when you delete your account.

1.5 Safety Features

If you start a live location sharing session using Wingman's Safety Tools, your real-time location is shared with a trusted contact you choose — this contact does not need to be a Wingman user. You set a check-in timer; when you start or manually end a session, the app opens your device's native messaging app so you can notify your contact directly. If the timer expires without a check-in, no automatic message or alert is sent to your contact — the app prompts you to message them yourself. Safety session data (start time, expiration, check-in status, and contact phone number) is stored only for the duration of the active session and deleted immediately once the session ends or you confirm you're safe.

1.6 Push Notifications & Device Data

If you enable push notifications, we collect a device token used to deliver notifications about waves, matches, messages, and account activity. You can disable push notifications at any time in your device settings.

2. Phone Verification

When you enter your phone number during sign-up, you'll receive a one-time verification code to confirm your identity. The code is sent and checked by Firebase (Google), not by us: we never see it and we do not store it. It is used solely for account verification - no marketing or promotional messages are ever sent via SMS.

For questions about verification, contact us at privacy@wingmanapp.live.

3. How We Use Your Data

4. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to any third party — ever. We do not share your data with advertisers or data brokers. Your phone number is never displayed to other users.

5. Third-Party Services

We use the following trusted services to operate Wingman:

These providers process data only as necessary to deliver their services and are bound by their own privacy policies.

6. Data Retention

The honest version: almost everything we hold is kept while your account exists, and goes when you delete it. We do not run a clock on it.

7. Your Rights & Data Deletion

You have the right to access, correct, or delete your personal data at any time.

To delete your account immediately: in the app, More › Settings › Delete Account. It happens while you watch. If you removed the app, reinstall it and sign in with the same number - your account is still there until you delete it.

If you cannot sign in at all: the Delete Account page takes a request and we complete it within 30 days, usually sooner. That page cannot delete an account on the spot, deliberately: anybody could type somebody else's number into it.

Deletion removes your profile, your photo FILES as well as the links to them, your matches, messages and waves, your check-ins, your Roll history, your plans, your saved spots, your badges, your reports, your push token and your sessions. Two things are kept: a record that a phone number was banned, if yours was, so that a ban cannot be escaped by deleting the account; and aggregate counts that identify nobody. After deletion your data cannot be recovered.

8. Children's Privacy

Wingman is intended for users 18 years and older. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, contact us immediately.

9. Security

We use industry-standard encryption for data in transit (TLS) and at rest. Your session token is stored on the server only as a SHA-256 hash, is replaced with a new one periodically, and is kept on your own device in the app's private storage. Photos are re-encoded on our side when they arrive, which strips the location and camera information most phones write into a photo file, so that is never served with your picture. We review our security practices, and the one this update came out of is written down in our own repository.

10. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via in-app notification. Continued use after changes constitutes acceptance.

11. Contact

Questions about privacy? Email privacy@wingmanapp.live or use our Support page.

Safety concerns? Email safety@wingmanapp.live.