Privacy Policy

App: Winnie
Provider: ZANNOU AGBO WHITNEY DERIK MAHUGNON
Contact: support@winnieit.com
Website: https://winnieit.com
Effective date: 12 October 2026

Winnie ("Winnie", "we", "us") is an AI assistant that combines a multi-model chat with six optional life assistants ("agents"): Productivity, Finance, Health, Gym Coach, Travel and Home. This Privacy Policy explains what personal data we collect, why, who we share it with, and the choices and rights you have. We built Winnie to keep sensitive data private by design, and to only ever share your data with an outside service when you turn on the feature that needs it.

By creating an account and using Winnie, you agree to this Privacy Policy.

1. Who we are

The provider and data controller responsible for your personal data is ZANNOU AGBO WHITNEY DERIK MAHUGNON. For any privacy question or request, contact us at support@winnieit.com.

2. Data we collect

Account data. When you register we store your email address, a securely hashed version of your password (we never store the password itself), and optionally your first name, timezone and language. We also store profile "memory" facts you choose to save so Winnie can remember your preferences.

Chat content. Your conversations with Winnie — the messages you send and the assistant's replies — are stored so you can see your history. Photos and files you attach to a chat message are stored with that message so the conversation still makes sense when you scroll back; deleting the conversation deletes them. If you generate images or videos, we store the prompt and a reference to the result, not your other files.

Voice. If you use dictation, the audio you record is sent to a speech-to-text provider, turned into text and not stored — only the resulting text becomes a chat message. If you turn on read-aloud, the text of the reply is sent to a speech provider to generate audio; the audio is played and not kept.

Agent data (only for the agents you turn on).

• Productivity: if you connect Google or Notion, we store an encrypted access token so Winnie can act on your behalf. Your Google calendar events and emails are read live when needed and are not stored on our servers; your tasks, the events you add to Winnie's own calendar (when no Google account is connected) and a minimal action log are stored. When you invite guests to an event, their email addresses are sent to Google Calendar, which emails them the invitation.
• Finance: if you connect a bank through Plaid or Tink, or add data manually, we store account details (including the name you give an account), balances — for a manual account, the balance you enter and its date —, transactions, budgets and detected subscriptions. We never store a plaintext bank account number or card number. A connected bank is synced automatically once a day and when you open the app. Deleting a bank account in Winnie, or deleting your data, also closes Winnie's access to that bank at Plaid or Tink.
• Health: health data is sensitive and only collected with your explicit consent. This may include activity metrics, daily check-ins, medications (encrypted), nutrition entries and — kept strictly separate — menstrual cycle entries. Health photos are never stored. Medication reminders are scheduled on your phone and stay generic on the lock screen (no medication name) unless you choose to show the name.
• Apple Health and Health Connect (only if you connect them): Winnie reads — and never writes — your steps, sleep and sleep stages, resting heart rate, heart rate variability and weight. This is how data from an Apple Watch or another wearable reaches Winnie. You choose which categories to share in the system permission screen and can revoke access at any time in the Health app (iPhone) or in Health Connect (Android). Data read from Apple Health or Health Connect is never used for advertising or marketing, never sold, and never shared with data brokers. To write your weekly health summary and explain a trend, Winnie may send aggregated figures (for example "average 7,200 steps and 6 h 50 of sleep this week") to our AI provider — never raw measurements, and never your name or email.
• Travel: trips you create (destination and dates), bookings you add to them (name, dates, address and booking number — the booking number is encrypted at rest), watched flights, generated itineraries and packing lists (with the weather forecast used to build them), and — only if you enter it — your passport's expiry date (never its number) to remind you before it expires. Destinations are normally the city names you type. If — and only if — you ask for somewhere "near me", the app asks your permission and sends your approximate position (neighbourhood-level, not a precise GPS point) to our place-search provider for that one search. We do not run location tracking, we do not collect your position in the background, and we do not build a location history. Refusing the permission simply falls back to searching by city name.
• Gym Coach: your training profile (goal, level, schedule, available equipment and injuries — treated as health data, used only to keep unsafe exercises out of your plan), your weekly plans, logged workouts and sets (exercise, weight, reps, effort), and your goals. With your health consent, the coach also reads your recent sleep, resting heart rate and heart rate variability to lighten a session on a low-recovery day, and your body weight for strength milestones. If you connect Apple Health or Health Connect, it can import the workouts your watch recorded (type, date, duration, distance, average heart rate) so you don't log them twice.
• Home: your smart-home device list, pantry stock (with use-by dates if you add them), shopping lists and saved recipes. If you connect Apple Home, your iPhone reads your accessories (name, room, current state) and sends that list to Winnie so they appear in the app; commands to them are carried out by your iPhone. If you share a shopping list, anyone with its secret link can view it, tick items and add items — without an account — until you stop sharing it.

Device & technical data. If you enable notifications we store a push token for your device, and we keep the notifications we sent you (the in-app notification feed) for 90 days. We keep minimal logs needed to operate and secure the service.

3. How we use your data

We use your data to provide the assistant and the agents you enable, remember your preferences, send you the notifications and reminders you ask for, secure your account, and improve reliability. We do not sell your personal data.

4. AI processing and third-party services

Winnie relies on trusted third-party services. Data is sent to a given service only when the related feature is active (for example, we only contact your bank's provider if you connect a bank). Each service processes your data under its own privacy terms.

AI model providers (they receive the content of your prompts/conversations to generate a response): Together.ai and, when you select their models in chat, OpenAI, Anthropic, Google, Mistral, xAI, DeepSeek and Perplexity. Image and video generation may use OpenAI, Stability AI, Recraft, Google (Veo), OpenAI (Sora), Runway, Kling, MiniMax and Luma — they receive your prompt and any image you provide.

Speech providers: OpenAI (speech-to-text for dictation) and ElevenLabs (text-to-speech for read-aloud). They receive the audio you dictate, or the text to be spoken, for that request only.

Feature providers: Google (calendar and email); Notion (tasks); Google Flights data via RapidAPI (flight search) and AeroDataBox via RapidAPI (flight status); Google Places (place discovery, place photos, and — only for a "near me" search — your approximate position); OpenWeatherMap (weather); Pexels (recipe images). If bank syncing is enabled for your account, Plaid or Tink (bank connection and financial data); bank syncing is switched off in this release, so finance data is whatever you enter yourself.

Sign-in providers: Google and Apple, if you choose to sign in with them. We receive your email address and, for Apple, the name you agree to share (Apple lets you hide your real address behind a relay address — that works with Winnie).

Platform providers: Railway (hosting of our servers and database, where your account data is stored); Expo (push notification delivery, through Apple Push Notification service on iPhone and Firebase Cloud Messaging on Android); Resend (password-reset emails); PostHog (product analytics, EU-hosted, only if you opt in); Sentry (crash and error monitoring, on both the app and the server — configured to strip out content, amounts and personal identifiers, so a crash report carries the technical fault and an internal account ID, nothing else); Stripe (payment processing, only if you buy something).

4 bis. Booking and affiliate links

When the Travel assistant shows you a flight or a place, the "book" button opens a third-party site (for example Skyscanner or Booking.com). Some of those links are affiliate links: if you book through them, we may earn a commission at no extra cost to you. This never changes the results we show you or their order — we do not rank a result higher because it pays more. Winnie does not take your payment for those bookings and never sees your card details; once you leave the app you are on that company's site, under its own terms and privacy policy.

5. How we protect your data

Passwords are hashed with scrypt. Refresh tokens and password-reset codes are stored only as one-way hashes. Sensitive stored values — your connected-account access tokens (Google, Notion, Plaid) and your medication names and dosages — are encrypted at rest using AES-256-GCM.

6. How long we keep your data

We keep your data while your account is active. Some data expires automatically: activity health metrics are kept for about 90 days, daily check-ins for about 365 days, and the notification feed for 90 days. Everything else — including your conversations, financial transactions, tasks and trips — is kept until you delete it or delete your account. You can delete individual items, purge a whole agent's data, or delete your entire account at any time (see below).

7. Your rights and choices

Depending on where you live, you have the right to access, correct, delete, export (the export button in Me → Privacy gives you all your data in one readable file), restrict or object to the processing of your personal data, and to withdraw consent at any time.

• Delete everything: Me → Privacy → Delete account permanently erases your account and all associated data.
• Delete part: you can purge any single agent's data, delete conversations, or (for health) delete your cycle data on its own.
• Analytics: product analytics are off by default; you choose to opt in, and can opt out anytime. When on, our analytics deliberately strip out content, amounts and names — only the fact that an action happened is recorded, tied to an internal ID, never your email.

EU/EEA & UK (GDPR): you may exercise the rights above and lodge a complaint with your local data protection authority. California (CCPA/CPRA): we do not sell or share your personal information; you may request access or deletion. Other regions: contact us and we will honor the rights available to you.

To exercise any right, email support@winnieit.com or use the in-app Privacy screen.

8. Children

Winnie is not directed to children. You must be at least the age required in your country to form a binding contract (generally 13, or 16 in parts of the EU). We do not knowingly collect data from children below that age.

9. International transfers

Winnie is available worldwide and the providers listed above may process your data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this policy

We may update this Privacy Policy. We will change the effective date above and, for significant changes, notify you in the app. Continued use after an update means you accept the revised policy.

11. Contact

Questions or requests: support@winnieit.com.