Version 2026-01
Privacy Policy
WINK exists because people answer questions honestly. That only works if it is obvious what we store, who sees it, and how you get it back or get rid of it.
What we collect
Account data: name, email address, mobile number, password (hashed by our auth provider), country, city and preferred language. Email and phone are verified because rewards have real value and one verified phone equals one account.
Participation data: your votes, comments, reactions, shares, reward claims, XP, streak and badges.
Product analytics: events such as “voted”, “claimed a reward” or “invite link opened”, with country, city and language — never your exact location, contacts, or device identifiers.
What businesses see
Businesses never receive your identity, email address or phone number. They see aggregated results — counts and percentages by country, city, age band and language — plus anonymous comment text. A result group is only ever shown as a total, never as a list of people.
Why we are allowed to hold it
Contract: to run your account, count your participation and issue rewards. Legitimate interest: to prevent reward farming, fake accounts and abuse. Consent: optional marketing messages, which you can withdraw at any time in your profile.
How long we keep it
Account and participation data stay while your account exists. Verification codes are kept for 10 minutes. Analytics events are retained for 24 months, then aggregated. When you delete your account, personal rows are deleted and past activity is anonymised so platform statistics stay truthful without pointing back at you.
Your rights
Export everything we hold about you as JSON, correct your details, withdraw marketing consent, or delete your account permanently — all from your profile. Deletion is immediate and cannot be undone; unused reward claims are lost with it.
Contact
Privacy questions: privacy@wink.app. Read the Terms of Service too.