Privacy

1Who we are

Wheel of Consequences is made by Enaayah (ENAAYAH Software Development and Services Private Limited, the seller named on the App Store). In this policy, "we" and "us" mean Enaayah.

Questions about privacy: contact@enaayah.com

2What stays on your phone

Everything you put in the app is kept on your iPhone or iPad, and in your own backup of it if you have backups on:

• your first name, your wheels, your actions, consequences and treats, and the cards you agreed;
• your history, and any notes and photos you keep with it;
• your reminders, and the crystals, wishes and stickers of the extras if you switch them on.

We do not receive any of it. You choose how long history is kept in Settings › Backups and your data, except history copied from the earlier version (see Moving from the earlier version). Tellings are not part of history: Partner wheels and tellings says how long they stay.

Things made only when you ask

A backup file (locked with a passphrase you choose), a page of your agreed cards to print, a summary of your history, an action pack, and pictures of your sticker book. Each goes only where you choose. The app adds pictures to Photos only when you tap Save to Photos in the sticker book, or Save Image when you share the Post about it picture. A backup holds your wheels, cards and history. It never holds a telling or its photo, and restoring one replaces everything on the phone, tellings included. When you add a photo to a telling, the app receives only the one you take or pick; it never looks through your photo library.

The Lock Screen and widgets

Names and card words show there only if you choose. Otherwise they show only that a card is running and when it ends.

3Partner wheels and tellings

A partner wheel is the same wheel on two phones. To share it, you send your side as a small file through the share sheet, with an app you choose, such as Messages, WhatsApp, AirDrop or Mail.

A partner wheel's file holds

• your two first names, the wheel's own code number, and when it was sent;
• the actions and cards, with your answer to each ("agree" or "I see it differently").

It holds no history and no proof.

A telling

"Slipped" or "Spotted something good" tells your partner about one thing that happened. It holds:

• your two first names, the wheel's code number, the action, when it happened, and when it was sent;
• a few words, up to 140 letters, if you add them;
• a photo, if you add one. Every face the phone finds is blurred on your phone before the photo is kept, and the photo is saved again in a way that drops its location and other hidden details. If the phone cannot check for faces, the photo is not kept.

The answer that goes back holds what the wheel picked (or the treat found), or "That's not what happened" with a few words if the person adds them. It never holds the photo. The person it is about sees the proof first and answers on their own phone.

Where these files go

• Nothing is sent by the app on its own. A file goes only when one of you sends it.
• We never see these files. They travel through the app you choose, under that app's own privacy rules, and a copy stays in that app until you delete it there.
• The files are not locked (not encrypted): anyone who gets one can read it. Send them only to your partner.

When they are deleted

• The copy the app makes for the share sheet is deleted when the share sheet closes (or, if the app was closed first, the next time it opens).
• A telling's photo is deleted from your phone as soon as the telling has been sent. On the phone of the person it is about, it is deleted when their answer is sent.
• In every case a photo is deleted from both phones once 3 days have passed since the telling was made, counted from the same moment on both. Each phone does this when the app starts or comes back to the front, and when the wheel's page is opened. A telling nobody has answered by then lapses on both phones, with no card, and an answer that reaches a lapsed telling late is still shown. A telling you made but never sent lapses the same way.
• The words of a telling and its answer stay on each phone, without the photo, until you leave the wheel or use Delete everything. A "That's not what happened" stays on your wheel page until you say you have talked it over. Each of you does this on your own phone.
• Leaving or removing a wheel, or Delete everything, deletes its tellings too. So does restoring a backup, which replaces everything on the phone.

4Ads

If you have not bought the unlock, the app shows ads from Google AdMob, Google's ad service.

How ads appear

• At most one ad in a page, at the foot of a calm page: a wheel's page, your list of wheels, History, Actions and consequences, and Settings. These are still pictures; an ad with video is never shown there. Each is marked "Ad" and carries Google's own AdChoices mark.
• Never on the wheel, on a card, while you agree, on a partner's answer, or on the first page you see.
• Google is asked to keep ads to its rating for general audiences.

Not based on you

• The app asks Google for non-personalised ads only. These are chosen from the app they appear in and your rough area, not from what you do in other apps or on websites.
• The app never asks to track you. So iOS does not give Google your phone's advertising identifier.
• The app does not give Google your name, your wheels, cards, history, photos, or anything you type.

What Google receives

Google's ad kit runs inside the app. To show ads, count them and stop fraud, it sends Google:

• your IP address, which shows your rough location;
• an identifier for your device that is limited to this app (or to our apps) or to Google's ad kit, not the advertising identifier;
• which ads you saw, and how you used them, such as a tap;
• how the ad kit performs (for example how long it takes to start) and, if it crashes, a crash report;
• basic facts about your device and this app, such as the model, iOS version and language.

Even for non-personalised ads, Google uses an identifier and storage on your phone to limit how often you see the same ad, to count ads in total, and to fight fraud.

Google uses this information under its own rules: How Google uses information from sites or apps that use its services, and the Google Privacy Policy.

How Google protects it, and how long it keeps it

The only code from another company that runs inside the app is Google's ad kit and Google's consent form. Apart from Apple, which handles the purchase (see The one-time purchase), Google is the only company whose servers the app's code contacts. Google receives what is listed above as an independent controller, which means it decides for itself how to use it. Google's Ads Controller-Controller Data Protection Terms, which Google says can apply to AdMob, say that it must follow the data protection law that applies to it. The app gives it only what is listed above. We expect Google to protect that information as its terms say, and as the App Store's rules require, and we would stop using Google's ads if we found it did not.

Google keeps what it receives under its own retention rules. For example, Google says it removes part of the IP address from advertising server logs after 9 months. Its page How Google retains data has the rest. We do not receive this information, so we cannot see or delete it for you; Google's Privacy Policy above explains your choices with Google.

Your consent in the EEA, the UK and Switzerland

There, Google's own consent message appears before any ad is asked for. You can agree or decline. If you decline, Google may show "limited ads", which do not use an identifier on your phone for ads (Google still uses your IP address to deliver them), or no ad at all. To change your answer later: Settings › Privacy choices for ads.

Why we may do this

In the EEA, the UK and Switzerland, ads rely on the answer you give in Google's consent message. Elsewhere, and for what Google does on its own account, Google's policies say what it relies on. Everything else the app does with your information (keeping your wheels on your phone, sending a file when you send it, asking Apple whether you have the unlock) is what you asked the app to do. If you write to us, we use your email address and message to answer you; the law calls that our legitimate interest in helping the people who use the app.

Report an ad

"Report this ad", under every ad, opens your own email app with a message to us that holds the ad's words. Nothing is sent unless you send it. Google's AdChoices mark on the ad also lets you report it to Google.

Installs from an ad

If you install another app from an ad, Apple's own system (SKAdNetwork) may tell the ad network that an ad led to an install, without saying who you are.

No ads at all

With the unlock (bought now, or "Unlock complete app" bought in the earlier version), there are no ads. The app stops asking Google for ads at once, and from then on it does not start Google's ad kit at all.

5The one-time purchase

"Unlock everything" (in the App Store, "Unlock complete app") is a one-time in-app purchase. There is no subscription.

• Apple handles the payment. We never see your name, your Apple Account or your payment details.
• The app asks Apple only whether this Apple Account owns the unlock (or shares it through Family Sharing).
• Apple sends us sales reports with totals, not names.

6No account, no server

You never sign up or sign in. We have no server that keeps your data, and the app's own code sends nothing to us.

If you have chosen in iOS Settings to share analytics with app developers, Apple may send us crash reports and usage figures that do not name you.

Writing to us

Help and feedback opens your own email app, with the app version, iOS version and device model at the end so we can help. Nothing is sent unless you send it. We use your email address and message only to answer you, and keep them only as long as we need to.

7Moving from the earlier version

If you had the 2017 version of Wheel of Consequences, this version copies what it can read, on your phone only: its names (as wheels, never their photos), old history, and the ideas and actions you wrote yourself (never as agreed cards). The old app's own starting lists are not copied. It deletes the old version's file, with the photos kept in it, only when everything in it was copied or was one of those starting lists. If anything could not be copied, the file stays on your phone, unused. The app never sends it, but your phone's own backup may hold it until you use Delete everything, which removes it too, with its photos, if it is still on your phone. History copied from the earlier version is not covered by Keep history: it stays until you remove it in Settings › Backups and your data › Remove history from the earlier app, or use Delete everything. This version also deletes what the earlier version's ad, push and analytics kits left on the phone, and the earlier version's own settings. Nothing is sent anywhere.

8Children

Wheel of Consequences is made for adults. It is not directed at children, and it is not meant for anyone younger than the age rating shown on its App Store page. We do not knowingly collect personal information from children under 13. In fact the app sends us nothing about anyone.

9Deleting your data and your choices

Delete everything

Settings › Backups and your data › Delete everything removes every wheel, card, history, telling, photo, note and setting from the app on this phone. It cannot be undone. The app keeps only a few markers that name no one, such as that the earlier version was already looked at. Deleting the app removes the app's own files too. Backup files and files you sent stay wherever you put them; delete them there. After Delete everything, the ads consent message (where it applies) is asked again.

Ads

Change your ads consent in Settings › Privacy choices for ads (shown in the EEA, the UK and Switzerland). The unlock removes ads altogether.

Your rights

Depending on where you live (for example under the GDPR or the UK GDPR), you have the right to see, correct and delete information about you, and to complain to your data protection authority. We hold none of your app data, so the quickest way to see or delete it is in the app itself. For information Google receives through ads, Google's policy above explains your choices. For anything else, write to contact@enaayah.com.

10Keeping it safe

On your phone, the app's data is protected by iOS, with your passcode and the phone's own encryption. Backups made in the app are locked with your passphrase. Partner files and tellings are not locked: send them only to your partner.

11Changes to this policy

If this policy changes, we update this page and the date at the top. If a change affects what leaves your phone, the app's update notes on the App Store will say so.