Privacy Policy

Effective July 7, 2026

Wardlume was built so that we know almost nothing about you. There are no accounts, no ad networks, and no tracking. Most of what you do in Wardlume never leaves your phone. This page explains, in plain English, the few places where data does move, and exactly where it goes.

1. What stays on your device

Your quiz answers, daily check-ins, streaks, reflections, and anything you set down in the evening release live only on your device. They are never uploaded, synced, or sent to us. We do not operate servers that store this data, so there is no copy of it anywhere else. Private notes from the deeper release are additionally kept in your device's secure storage.

If you delete the app, this data is deleted with it.

2. The Warding Guide (AI conversations)

The one feature that sends your words off the device is the Warding Guide. When you talk with it, the messages in that conversation are sent to our server (a Cloudflare Worker) and passed to our AI provider, Anthropic, which processes the text to generate a reply.

• Conversations are transmitted encrypted (HTTPS/TLS) end to end.
• They are not used to identify you. There are no accounts, so a conversation is not linked to a name, email, or profile.
• They are never sold, and never used for advertising.
• Only the conversation itself crosses the wire, no contacts, no location, no device contents.

Anthropic processes this text as a service provider, under its own privacy commitments.

3. Purchases

Subscriptions are processed by Apple (App Store) or Google (Google Play), together with RevenueCat, our subscription-management partner. Apple or Google handles your payment. We never see your card details. RevenueCat receives your purchase history and device identifiers in order to keep your subscription working across reinstalls, and handles that data under its own privacy policy, as Apple and Google do under theirs.

4. Blessing links

When you send someone a blessing, the blessing text is encoded into the link itself. The link is the message. We don't store it on our servers. Opening a blessing at wardlume.app/b decodes it in the recipient's browser, on their device. If you choose to include your first name, it travels only inside that link, and only because you switched that on.

5. Notifications

Reminders are local notifications, scheduled by the app on your device. There are no push servers and no push tokens. Nothing about your reminders is sent to us.

6. No ads, no tracking

Wardlume contains no advertising, no tracking SDKs, and no third-party analytics. The app keeps a few counters on your device, for example, how many days in a row you have checked in, so it can show you your own patterns. Those counters stay on the device.

7. Deleting your data

Open the You tab and choose Clear my data. This erases everything Wardlume has stored on your device, including secure-storage notes. Because nothing is uploaded, that is the whole job. There is no server-side copy to request or wait on.

Your subscription is separate from your data: manage or cancel it in your App Store or Google Play account settings. Clearing your data does not cancel a subscription.

8. Changes to this policy

We may update this policy as Wardlume grows. When we do, the effective date above changes, and meaningful changes are noted in the app's release notes. Continued use of Wardlume after a change means the updated policy applies.

9. Contact

Questions about privacy reach a human at team@wardlume.com.