Privacy, in plain language.
This policy explains how Wiseley collects, uses, stores, and protects your personal information on our website and apps, and the rights you have under laws such as the GDPR in the EU and UK and the CCPA/CPRA in California. Optional website analytics remain off unless you explicitly allow them.
Last updated: October 8, 2026
Who is responsible
Wiseley is operated by Traivy Limited (“Wiseley,” “we,” or “us”), which is the data controller for the personal data described here. Privacy questions and requests can be sent to privacy@wiseley.app. For general help, write to support@wiseley.app.
Information we collect
Information you give us.
- Account and profile details, such as your email address, display name, avatar, preferred language, and the learning topics you pick. If you sign up with a password, we store it only in hashed form.
- Sign-in details. You can sign in with an email code or link, a password, Sign in with Apple, or Google. From Apple or Google we receive your name, email address (Apple may provide a private relay address), and an account identifier. Using sign-in with an external service is optional.
- Guest use. If you start without an account, we create a temporary account identifier so your progress can be saved and later linked to a full account.
- Learning activity you choose to save, including your library, progress, listening and reading history, highlights, ratings, downloads, quiz attempts, and challenge state.
- Referral activity, such as an invite-a-friend code you share and whether it led to a sign-up.
- Support messages, correction requests, feedback, and survey answers, and our replies.
Purchase information. When you subscribe, we receive your plan, billing period, subscription status, and transaction identifiers from the provider that processed the payment (Apple, Google, or Stripe on the web). Payment providers handle your card or wallet details. Wiseley does not store or have access to full card numbers or security codes.
Information collected automatically.
- Technical details such as your IP address, device type and identifiers, operating system, app or browser version, language setting, and the date and time of requests, used to run and secure the service.
- Playback and download activity needed to resume where you left off and work offline.
- Crash and error reports from release builds of the mobile apps. We use Firebase Crashlytics and Sentry for this and remove sensitive details from the reports where practical.
- Anonymous usage and performance data from the mobile apps (Firebase Analytics and Performance Monitoring) only after you turn it on under Profile → Privacy.
- Website usage events only after you allow optional analytics. The website sends no optional analytics request before that choice. See the cookie notice.
- A push-notification token, only after you enable notifications. Device motion is used on your device to tilt book covers and is not sent to us.
What we do not collect. The Wiseley app does not request your location, contacts, camera, or microphone. We do not intentionally collect sensitive categories of data such as health information, biometric identifiers, political opinions, or religious beliefs. Please do not put them in free-text messages to us.
Why we use it, and our legal bases
We use personal data to:
- Create and maintain your account, keep your library and progress in sync across devices, and deliver the content you ask for. Basis: performance of a contract.
- Manage subscriptions, purchases, and entitlements, prevent fraud, and meet tax and accounting duties. Basis: contract and legal obligation.
- Personalize recommendations and your learning plan from the topics and activity you give us. Basis: contract and legitimate interests.
- Answer support requests and handle privacy requests. Basis: contract, legal obligation, and legitimate interests.
- Keep the service secure, diagnose problems, and improve reliability and design. Basis: legitimate interests.
- Measure website and app usage through optional analytics, and send notifications you have turned on. Basis: your consent, which you can withdraw at any time.
We do not sell, rent, or lease your personal data. Service providers act only on our instructions and under privacy and security obligations.
Cookies and similar technologies
The website uses necessary storage for sign-in and for remembering your privacy choice. Optional analytics storage stays off until you allow it. The cookie notice lists the specific items. We do not respond to Do Not Track signals because there is no consistent standard for them.
Service providers and links
We share data with providers that help us run Wiseley, only as needed for the purpose shown:
- Cloudflare: website delivery and file storage.
- Stripe: web payment processing.
- Apple and Google: app distribution, in-app purchases, and sign-in.
- Firebase (Google): optional app analytics and performance, crash reporting, and push notifications.
- Sentry: error monitoring for the apps.
- Google Tag Manager and Google Analytics: website analytics, only after you allow them.
- Email delivery and hosting providers that send sign-in codes and account messages and store our data.
Wiseley may link to third-party sites. We do not control their data practices, so please review their policies.
International transfers
Your information may be processed in countries outside your own, including the European Union and the United States, where our providers operate. When we transfer personal data out of the EEA or UK, we rely on safeguards such as the European Commission’s Standard Contractual Clauses, adequacy decisions where they apply, and additional technical and organizational measures where needed.
How long we keep data
- Account and learning data: kept while your account is active.
- Deleted accounts: when you delete your account, we sign you out everywhere and mark it for deletion. You can recover it for up to 365 days. After that, the account and its learning data are permanently deleted from our active systems automatically.
- Payment and tax records: kept for as long as tax, accounting, or other law requires, typically several years.
- Support messages: kept only as long as needed to resolve the request and handle any follow-up or dispute.
- Analytics choice on the website: remembered for up to twelve months.
We may keep limited data longer where required by law or to protect against legal claims, and we anonymize or aggregate retained data where feasible.
Your rights and choices
If you are in the EU, EEA, or UK, you can ask us to give you access to and a copy of your data, correct it, delete it, restrict or object to its processing, and send it to you in a portable format. You can withdraw consent at any time, and you can complain to your local data-protection authority.
If you are in the United States, depending on your state (for example California, Virginia, or Colorado), you may have the right to know what categories of personal data we collect and why, access or correct your data, delete it, and opt out of its sale. We do not sell your personal data. We will not discriminate against you for exercising these rights.
To exercise your rights:
- In the app: edit your profile and preferences, switch app analytics on or off under Profile → Privacy, or delete your account under Edit profile → Delete account.
- On the website: change your analytics choice with the “Analytics preferences” control.
- By email: write to privacy@wiseley.app. You can also ask us to delete your account at support@wiseley.app.
We respond within the time required by law, typically 30 days under the GDPR and 45 days under the CCPA. We may need to verify your identity first.
Children’s privacy
Wiseley is not intended for children under 13, or under 16 where local law sets a higher age, such as in the EU. We do not knowingly collect data from them. If you believe a child has given us personal data, contact privacy@wiseley.app and we will delete it.
Security
We protect personal data with safeguards appropriate to its sensitivity: traffic is encrypted with HTTPS/TLS, passwords are stored only in hashed form, access to personal data is limited to people and systems that need it, and signed-in sessions are tied to your account. No internet service can promise absolute security. If you believe your account has been compromised, contact privacy@wiseley.app immediately.
Changes to this policy
We may update this policy as our practices, technology, or legal requirements change. We will post the new “Last updated” date here and, for material changes, notify you by email or in the app where required. Continued use after a change takes effect means the updated policy applies, except where the law requires fresh consent.
Contact
Traivy Limited, operating Wiseley. Privacy requests: privacy@wiseley.app. General support: support@wiseley.app. Website: wiseley.app.
Related notices
Read the cookie notice for browser storage details and the terms of use for the rules that apply when using Wiseley.