On this page
1. Who is responsible
Wick is made and published by Christian Rapalo, trading as Carb Digital, an individual developer. Where this policy says "we" or "us", that is who it means. You can reach us any time at [email protected].
2. What we collect
No personal data, and nothing you write. There is no account, no email address, no name, and no way for us to identify you or contact you unless you email us first. What we do receive is anonymous product analytics: which features get used, and what crashed.
Concretely, the app sends the following to our analytics provider. Each event carries a randomly generated identifier so that repeat use can be counted as one device rather than many. It is generated by the app, it is not your advertising ID or anything derived from your hardware, and it is not linked to any identity.
| What | Example | Why |
|---|---|---|
| Feature events | That a quote was created, a widget placed, a setting changed, with counts and lengths but never content | To see which parts of the app are actually used |
| Screens viewed | The in-app route, such as /widget-setup | To find where people get stuck |
| Crash and error reports | The exception and its stack trace | To find and fix bugs |
| Device and app basics | Device model, OS version, app version, language | To know which devices to support and test |
| Approximate location | Country and city, derived from your IP address by the provider | A side effect of how the provider works (see §5) |
There is currently no in-app switch to turn this off. We would rather say so plainly than imply a control that doesn't exist. If you would prefer not to send it at all, the honest answer today is not to install the app.
3. What is never sent
Your writing stays on your device. Quote text, author names and collection names are never transmitted, in any event, ever. Every analytics event in the app carries counts, yes/no flags and fixed labels and nothing else: the length of a quote, not the quote; whether an author was filled in, not the name; whether a collection's icon is an emoji, not which emoji.
There is also no advertising, no ad network, no attribution SDK, and no tracking of you across other apps or websites. The app does not request App Tracking Transparency permission, because there is nothing to track. We do not sell or share personal information, and we never have.
4. What the app stores on your device
Everything you create is saved locally, in your device's private app storage, and leaves it only if you choose to export it.
| What | Where it lives | Why |
|---|---|---|
| Your quotes and collections | A private database inside the app's own sandbox on your device | So the app can show you what you saved |
| A copy of that content | A shared container on the same device, readable only by this app and its widget | So the home screen widget can display a quote while the app is closed |
| Your widget setups | Same private storage | To remember the collection, font, and background you chose |
| Your app settings | Same private storage | Theme, font, text size, shuffle, whether authors are shown, app icon |
Records created inside the app are given a randomly generated identifier. These are random values used to tell one quote from another. They are not device identifiers, advertising identifiers, or anything derived from your hardware or account.
5. Third parties
We use one processor, and it is the only party that receives anything from the app.
| Who | What for | Where |
|---|---|---|
| PostHog, Inc. | Product analytics and crash reporting: the data described in §2 | United States (us.i.posthog.com) |
PostHog acts as our processor: they hold the data on our behalf and under our instructions, and they do not sell it or use it for their own advertising. Their own privacy notice is at posthog.com/privacy. Because their servers are in the United States, data reaching them leaves the UK and EEA; the transfer relies on their standard contractual clauses.
PostHog derives an approximate location, country and city, from the IP address your device connects from. The app itself never asks for or reads your location, and a city-level guess from an IP is all that is ever produced. Beyond PostHog there are no other processors, no data-sharing arrangements, and no other network requests of any kind: no cloud sync, no accounts, no over-the-air content, and no remote configuration.
6. Permissions
The app never asks you for a runtime permission. It does not use your camera, photos, microphone, location, contacts, calendar, or health data, and it does not send push notifications. When you share a screenshot into the app, the image is read on the device and is not uploaded anywhere.
On Android, the operating system lists a small number of permissions that come as standard with the framework the app is built on. These are declared by the framework, not used by any feature of Wick.
7. Device backups
This is one case where your quotes may exist somewhere other than your phone without you doing anything, and it's worth stating plainly because it isn't obvious.
If you have your operating system's own backup feature enabled, your device may include this app's local data in that backup, whether that is Google's Android Backup or an encrypted device backup on iOS. This is performed by the operating system under your own settings and your own account with Google or Apple. We do not operate it, cannot access it, and are not sent a copy.
If you would rather your quotes were never included, you can turn off backup for this app in your device's system settings.
8. Deleting your data
You can delete any individual quote or collection from inside the app at any time. Deleting a collection also deletes the quotes inside it, and any widget that pointed at it falls back to a placeholder.
To remove everything, delete the app. Because all of your content is held in the app's own private storage, uninstalling Wick removes it from your device permanently. There is no "erase everything" button inside the app yet.
Before you do, note that the app can export your quotes and collections to a file from Settings, and import that file back later, onto a new phone or after a reinstall. We never receive a copy and cannot restore anything for you, so if it matters to you, export it.
For the anonymous analytics described in §2: because it is not tied to any identity, we generally cannot locate "your" records to delete on request. If you email us with enough detail to identify a device, we will delete what we can find.
9. Children
Wick is suitable for general audiences. It contains no advertising, no social features, no chat, and no user-to-user contact. We collect no personal data from anyone, including children, and the anonymous analytics described above are not used to build a profile of any person.
10. Your legal rights
Privacy laws including the UK and EU GDPR, and the California Consumer Privacy Act, give you rights over personal data a company holds about you: to access it, correct it, delete it, port it, or object to its use.
We hold no data that identifies you. There is no account, no email, no name, and nothing you have written. The analytics in §2 are anonymous and are not linked to any identity; where that data is nonetheless treated as personal data, we rely on our legitimate interest in understanding how the app is used and in fixing crashes, and you may object to that use by writing to us.
If you email us with a question, we will of course have your email address for as long as it takes to reply. We use it only to answer you, and we don't add you to anything.
11. Changes to this policy, and how to reach us
If the app ever gains a feature that changes any of the above, such as an optional sync, a second processor, or anything that sends something new, this policy will be updated before that version ships, and the date at the top will change. We won't quietly start collecting something under an old policy.
Questions about anything here are welcome, and you don't need a formal reason to ask. Write to [email protected].