Privacy Policy
Last updated: July 2026
Wombow (the app) respects your privacy. This policy explains what we collect, why, and what control you have over it.
What we collect
Automatically, while you use Wombow
- Device identifier — an anonymous UUID generated the first time you launch the app, stored only in your iOS Keychain. It is NOT linked to your Apple ID unless you explicitly sign in with Apple.
- Camera frames — while a session is active, a JPEG image is captured every 2 seconds and sent to our servers. Frames are processed by the upstream vision model and dropped; we do NOT store the images themselves.
- Photos you attach in chat — if you choose to attach photos (from your library or camera) to a chat message, they are sent with that message to the cloud model you picked, processed for that one reply, and dropped. We do NOT store them. Attaching is always your explicit action; on-device models never receive photos.
- Voice transcripts — when you speak, iOS transcribes on-device using SFSpeechRecognizer. The transcribed text (not the raw audio) is sent with the next frame so the AI can respond.
- Chat messages — text you type or speak in Chat mode is sent to the AI provider you select so it can generate a reply. If you choose an on-device model, that conversation runs entirely on your phone and is not sent anywhere.
- Usage metadata — game preset, daily minute counter, subscription tier. Used for rate limiting and aggregated analytics.
- Ambient sound classification (opt-in only) — when you enable "Suggest a mode" in Settings, while the Home screen is visible Wombow runs Apple's on-device sound classifier on the microphone input to detect whether a TV, sports broadcast, or movie is nearby. The classification runs ENTIRELY on your device with Apple's bundled model — no audio bytes, waveforms, or spectrograms leave the phone, and the suggestion is not logged anywhere. Default is OFF.
If you sign in with Apple
- The opaque Apple user ID. We use it only to let your subscription survive device reinstalls.
- Your email address only if you choose to share it.
If you purchase a subscription
- Apple tells us your subscription product ID, transaction ID, and expiration date. Payment itself is handled by Apple — we never see your card number.
Third parties
- Third-party AI providers (via OpenRouter) — to generate Wombow's replies, your camera frames, voice transcripts, chat messages, and attached photos are sent through OpenRouter's API to a third-party AI model: Google Gemini for live screen commentary, and — in Chat mode — the model you pick (Google Gemini, OpenAI GPT, or Anthropic Claude). These providers process the data to return a reply and do not retain it to train their models. On-device chat models run locally and send nothing to any provider. Before any of this happens, the app asks for your explicit consent.
- Upstash Redis — stores your daily usage counter, subscription entitlement, and recent conversation history (last 16 turns, 7-day TTL).
- Sentry — crash and error reports. Reports do NOT include camera frames, photos, or voice transcripts; screenshots and view hierarchies are disabled.
- Apple — for Sign in with Apple, subscription billing, and App Store services.
What stays on this device
Some features store data locally on your iPhone only — it is never uploaded, and deleting the app deletes it:
- Chat history — your saved chat conversations (the drawer in Chat) live in the app's local database on this device.
- Notebook — session keepsakes, highlights, and recaps are stored locally; you can export or delete them from the app.
- On-device model chats — conversations with a downloaded on-device model never leave your phone at all, and are saved only into the same local chat history.
Your rights
- Ask what we have by emailing privacy@wombow.com.
- Ask for deletion by emailing privacy@wombow.com. We erase your Redis entries and the device ID regenerates on next launch.
- Opt out of crash reports in Settings.
Children
Wombow is not directed at children under 13. Do not use if you are under 13.