Privacy Policy

Effective date: October 2, 2026

1. Who we are

Wren is operated by Matasic Enterprises, LLC ("Wren," "we," "our," or "us"). This Privacy Policy explains how we collect, use, share, and protect information when you use the Wren mobile app, our website at thewrenapp.com, and related services (the "Services").

Wren is a wellness product. Some features are optional and use third-party AI processors. Those features are off unless you turn them on, and Section 4 explains them.

2. Information we collect

• Account information: your email address, how you sign in (email, Apple, or Google), and account settings.
• Profile information: your first name, age and birth date, sex, height, weight, goals, training experience and schedule, injuries, dietary preferences and avoidances, allergies, supplements, sleep and wake times, work type, stress level, and any health conditions you choose to share.
• Training and nutrition logs: workouts, sets, notes, meals, food logs, targets, and supplement intake.
• Daily check-ins: non-cycle check-in answers such as mood, energy, sleep, stress, and water intake.
• Location: if you track a run or walk, Wren records the route as GPS coordinates and times and saves it with that workout. Location access is optional and controlled through your device permissions.
• Apple Health information: if you connect Apple Health, Wren reads heart rate, heart rate variability, sleep, steps, walking and running distance, active energy, and workouts. Raw readings are used on your device. Workout changes that result from them, and whether Apple Health is connected, are saved to your account.
• Calendar information: if you connect a calendar, Wren reads event times to find schedule gaps and conflicts. For Google Calendar, Wren stores your Google account email and an encrypted access token. If you link a workout to a calendar event, Wren saves that event's title, time, and ID with the workout.
• Cycle information: if you enable cycle tracking, Wren stores your tracking preference, cycle type, typical cycle length, last-period start, daily symptoms, period start or end, and spotting in Wren's app storage on your device, not on Wren's servers.
• Content you send to optional AI features: food photos, menu photos, voice recordings and their transcripts, and, for menu recommendations, the nutrition context listed in Section 4. This applies only if you have turned AI features on.
• Safety flags: when you log food by voice, the transcript is also checked for signs of crisis or disordered eating. If one is found, Wren stores a flag with its type, the time, and the app version. The flag does not contain the transcript.
• Consent records: each time you turn AI features on, turn them off, or decline them, we record the choice, the version of the consent text you saw, the date and time, where in the app you made the choice, and the app build. We also record your acceptance of the voice recording notice, on your device and in your account.
• Purchase information: your subscription status, if Wren offers paid features. Payment details are handled by Apple and never reach Wren.
• Usage and diagnostic information: app events tied to your account, such as a screen being viewed or a button being tapped, without the values you enter, and crash diagnostics.
• Website and email information: your name, email address, and any goal you share when you sign up for early access or a download, and basic website analytics.

3. Device-local cycle information

Wren does not upload logged cycle observations to Firebase, analytics providers, Sentry, or any AI processor listed in Section 4. Symptoms and confirmed bleeding may be used on your device to support Today's capacity and recovery guidance.

During beta, estimated cycle phase does not change nutrition targets, Fuel Score, training, Next Best Move, menu ranking, or AI requests. A calendar estimate does not confirm ovulation.

Cycle history does not sync between devices. Reinstalling Wren or clearing app storage removes it. Signing out does not remove it; it remains isolated to the account that created it on that device. Deleting the account removes that account's Wren-managed local cycle information. Device or operating-system backups may include app data under the backup provider's controls.

4. Optional AI features

AI features are off unless you turn them on. Wren asks for your consent before sending anything to an AI processor. Your plan, Today's guidance, tracking, and workout adjustments are rule-based and work without them.

What the AI features do

• Analyze a food photo to estimate what you ate.
• Turn a voice recording into a food log.
• Read a menu photo and suggest options.

Who processes your content

Voice logging

Wren first uses your phone's built-in speech recognition. On iPhone this runs on the device when the device supports it, and otherwise through Apple's speech service. If built-in recognition is unavailable, the recording is sent to OpenAI for transcription.

Nutrition context sent with menu ranking

• Your remaining and target calories and macros for the day, and your goal.
• Whether you worked out today and the workout type.
• Your fiber, sodium, and sugar status for the day.
• A summary of today's food log: food names, meal categories, calories, and protein.
• The meal number and time of day.
• Your dietary approaches, food avoidances, eating habits, and barriers.
• Your estimated energy needs, weight, age, and biological sex.

It does not include your name, email address, account ID, birth date, raw Apple Health readings, or cycle data.

Cycle data and AI

Wren never adds your cycle data to AI requests. Requests that Wren builds exclude cycle observations, cycle day, estimated phase, and cycle-derived Today text. Anything you say in a voice log or show in a photo is sent as you recorded it.

Your consent and control

• Wren asks for consent before your first use of an AI feature.
• You can turn AI features off at any time in Settings, under AI features. Turning them off takes one tap and stops new sends immediately.
• If we change which processors we use, what we send, or why, we will ask for your consent again before sending anything under the new terms.

What Wren keeps

Turning AI features off stops new sends. It does not delete content that was already processed.

• Food and menu photos are not stored on Wren's servers. They are passed to the processor and discarded.
• A voice recording sent for transcription is held in a temporary file and deleted as soon as transcription finishes.
• The voice transcript is saved with the food log it created and removed after 90 days.
• The result of a food photo analysis is saved with that meal until you delete your account.
• Menu scan results are cached on your device.
• Safety flags are kept until you delete your account.
• Wren's server logs record technical details such as timing and status. They do not record photos, audio, transcripts, or AI responses.

What the processors keep

Our settings and agreements with these processors do not allow them to use your content to train their models. Each processor keeps content for a limited time under its own terms:

• OpenAI keeps request content for up to 30 days to monitor for abuse.
• Anthropic keeps request content for a limited period under its commercial data retention policy.
• Google Cloud Vision processes the menu photo in memory and does not store it.

Accuracy

AI results are estimates and can be wrong. Check them before relying on them, and do not use them for medical decisions.

5. How we use information

• Provide and maintain Wren's account, training, nutrition, recovery, and guidance features.
• Provide the optional AI features, only while you have them turned on.
• Keep a record of your consent choices.
• Respond to requests, provide support, and communicate service or beta updates.
• Monitor reliability, diagnose crashes, prevent abuse, and protect the Services.
• Understand coarse product interest and improve the beta without reconstructing a menstrual timeline.
• Comply with applicable law and enforce our terms.

6. Cloud and service providers

We share information with the providers below so they can run parts of the Services for us. Each provider processes information under its own terms and privacy practices.

We do not sell your personal information, and we do not share it for targeted advertising.

7. Product analytics and beta research

Wren's app analytics are stored in Firebase with your account ID. They record events such as a screen being viewed, a button being tapped, or a check-in step being completed. They do not record the values you enter. Analytics events are automatically deleted about 60 days after they are recorded.

For cycle tracking, Wren records three events: whether you enable or disable tracking, one later-return milestone, and one milestone when enough period lengths are logged to show an average. None of them includes per-log cycle events, symptom types, bleeding, spotting, flow, period dates, period lengths, cycle day, or estimated phase.

8. Retention, security, and deletion

We retain account information for as long as needed to provide the Services, meet legal obligations, resolve disputes, and enforce agreements. We use administrative and technical safeguards designed to protect personal data, but no method of storage or transmission is completely secure.

You can delete your account in the app. Tap the profile icon at the top of the Today screen, then tap Delete account. Deleting your account removes:

• Your account and sign-in.
• The information stored under your account in Firebase, including your profile, logs, check-ins, routes, consent records, safety flags, and app events.
• Your subscription record at RevenueCat and your Google Calendar connection.
• Most Wren-managed information on your device, including cycle information for that account. Some app preferences and cached results can remain until you delete the app.

Deleting your account does not remove:

• Content already sent to AI processors, which they keep under their own terms as described in Section 4.
• Your website email sign-up. Use the unsubscribe link or email us to remove it.
• An active App Store subscription. Cancel it in your App Store account settings.

Backups follow their normal retention and access controls. Wren does not promise selective deletion from immutable backups before their normal expiration.

9. Your choices and rights

• Turn AI features on or off in Settings, under AI features.
• Enable or disable optional permissions and cycle tracking.
• Access or update your account and profile information.
• Delete your account and associated Wren-managed information in the app.
• Request a copy of your data by emailing us. An in-app export is not available yet.
• Opt out of marketing emails through the unsubscribe link.
• Exercise any other privacy rights that apply where you live by contacting us.

We respond to privacy requests within 30 days. We may need to verify your identity before acting on a request.

10. Children's privacy

Wren is for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18.

If someone enters an age under 18 at sign-up, Wren stops them from continuing. If we learn that we hold personal information from someone under 18, we delete it.

11. Updates to this policy

We may update this Privacy Policy to reflect product or legal changes. Updates will be posted here with a revised effective date. If a change affects what the AI features send, who receives it, or why, we will ask for your consent again in the app before it applies to you.

12. Contact

For privacy questions or requests, email [email protected].