This policy explains what wondays handles on your device, how optional Apple services are used, and which settings you can change.

Last updated: November 2, 2026

Scope and core principles

Personal records are stored on your device by default. The local record database is encrypted with SQLCipher. wondays does not operate a file server that uploads and stores your photos or videos, sell personal content, use it for advertising, or operate a server that can read it.

Information you choose to save

This may include notes, photos and video, places, people and pets, music, links, reminders, tags used for organization, and tool records such as spending, expiry dates, and stored belongings.

On-device processing

OCR, photo analysis, people and pet recognition, and search indexing use on-device capabilities where supported. Wondy’s question analysis and search of your records also run on your device. Inputs and results from these features are not sent to a wondays server.

Apple Intelligence and generated content

When supported features use Apple Intelligence, processing takes place on the device where available. Generated wording, summaries, and suggestions are provided as assistance and do not represent wondays’s views, advice, or position. Check important details before relying on them.

Wondy conversations

Wondy answers questions by searching your records on your device, and uses Apple Intelligence by default. Conversation history is stored on your device in encrypted form. You can delete a single message, clear all history, or choose not to save conversations. By default, conversations are not sent to a wondays server or to any external AI service, and wondays has no server that receives your content.

Health data

Health access is optional. When you allow it, wondays reads workouts, steps, distance, sleep, and workout routes from the Health app to show them with your daily records, labeled as coming from Health. wondays does not write to Health and does not send this information to a wondays server. You can change this access at any time in iOS Settings or the Health app.

Pet care

Pet records are stored only on your device by default and enter your own iCloud only if you turn on sync. Photos are chosen with the system picker. Reminders and birthday greetings are local notifications, and declining notifications does not affect use. wondays does not provide veterinary or medical advice. If you record a pet expense in the Household Ledger, it stays on your device.

System permissions

A feature may request access to Photos, Camera, Location, Microphone, Notifications, Calendar, Reminders, Health, Speech Recognition, or Music. Access is requested when the feature needs it and can be changed at any time in iOS Settings.

Apple services

Features you enable may use iCloud or CloudKit, StoreKit, MusicKit, MapKit, Apple Weather, Siri, Spotlight, widgets, and the Share Extension. Apple processes information used by these services under its own terms and privacy policies.

iCloud sync

Sync is optional. When enabled, selected records are stored through your own iCloud account so they can be available on your devices. wondays does not receive the contents of those CloudKit records on its own server.

Links and exchange rates

When you save a link from another app, wondays may request that page, or its provider’s public embed service, to retrieve a title and preview image. When you convert currencies in Expense, a request containing only the two currency codes is sent to an exchange-rate service. Notes and other records are not included in these requests.

Optional: your own AI service

wondays does not depend on any external AI service. You can optionally connect your own in Settings > Wondy: OpenAI, Anthropic Claude, Google Gemini, or your own HTTPS service compatible with the OpenAI or Anthropic API. If you do not add one, no external connection exists. When you add one, wondays first sends a fixed test sentence that contains none of your content, and saves the connection only after the test passes and you confirm. Your API key is stored only in the Keychain on this device. It is not synced, not sent to the wondays developer, and not stored in iCloud, and it is deleted from the device as soon as you disconnect. While a service is connected, your messages, the conversation context, and summaries of the record types you allow in settings are sent directly from your device to the service you chose, and that service’s own policies apply. wondays has no relay server, and the developer cannot see this content. Each record type can be switched on or off separately: ordinary types are allowed by default and sensitive types are off by default. Questions about pets and pet records are never sent to an external service. Wardrobe wording and music search keywords can also use the service, but both are off by default and must be turned on separately. You can disconnect at any time and return to Apple Intelligence. On devices that do not support Apple Intelligence, connecting your own service also lets you use Wondy conversations.

Optional: sharing with other assistants

This feature is off by default and works only if you turn it on and deploy your own relay service. If you do, a read-only copy of the records you tick is sent from the app directly to the relay service in your own Cloudflare account. wondays has no server of its own and does not receive or store this content. Private notes and private tags are never shared. An AI assistant you connect, such as Muse, reads this copy, and its provider may use what it reads under its own terms, for example to improve its AI. You can stop sharing in the app at any time, and the copy in your relay service is deleted when you stop.

Private notes

Content protected with the app’s private-note controls stays hidden until it is unlocked. This is an app-level privacy feature, not a replacement for a separate password manager or an independent backup.

Support messages

When you contact support, wondays receives the message you choose to send and basic diagnostics such as the app version, build, iOS version, and device model. Notes, photos, and CloudKit records are not attached automatically.

Purchases

Apple processes payments through the App Store. wondays receives the product and transaction status needed to activate a purchase, not your full payment-card number.

Storage and deletion

Local records remain until you delete them or remove the app. Records stored in iCloud follow Apple’s storage, recovery, and deletion behavior. Items referenced from the Photos library remain governed by that library.

Your controls

You can revoke permissions in iOS Settings, turn optional sync off, and delete records from within wondays. Removing access may make the related feature unavailable without affecting unrelated features.

Changes to this policy

This policy may be updated when wondays adds or changes a feature. The latest version and its update date will be published in the app and on this page.

Contact

For privacy questions, email support@wondays.space.