Wizzo Privacy Policy
How Wizzo Labs collects, uses, protects, and gives you control over your data.
Privacy at a Glance
Data Encryption
Data is encrypted in transit and protected at rest by managed infrastructure controls
Minimal Collection
We only collect what's necessary for the service
Your Control
You can export or delete your data anytime
1. Information We Collect
Personal Information
When you create an account with Wizzo, we collect:
- Account Information: Name, email address, and profile information
- Authentication Data: Hashed passwords when password auth is used, session tokens, and related security records
- Profile Preferences: Theme settings, notification preferences, and AI behavior settings
Usage Data
We automatically collect information about how you use Wizzo:
- Quest Data: Your goals, quests, achievements, and progress tracking
- AI Interactions: Conversations with the AI mentor stored with your account, plus aggregated or deidentified signals used to improve reliability and product quality
- App Usage: Features used, time spent, and interaction patterns
- Device Information: Browser type, operating system, and limited network or region signals used for security, reliability, and abuse prevention
What We Don't Collect
- Personal financial account numbers, payment card data, or similar financial credentials beyond what you choose to share in quests
- Precise geolocation data beyond general geographic region
- Biometric identifiers or regulated health records. Wizzo is not designed for medical record storage, though you control what goals or notes you enter.
- Data from third-party services without your explicit consent
2. How We Use Your Information
Service Provision
To provide, maintain, and improve Wizzo's core functionality including quest management, achievement tracking, and AI mentoring.
Personalization
To customize your experience, provide relevant AI suggestions, and adapt the interface to your preferences.
Communication
To send you important updates about the service, respond to your inquiries, and provide customer support.
Analytics and Improvement
To analyze usage patterns, identify bugs, and develop new features that enhance your experience.
Security
To protect against fraud, abuse, and security threats, and to ensure the integrity of our service.
3. Data Sharing and Disclosure
We Do NOT Sell Your Data
We never sell, rent, or trade your personal information to third parties for marketing purposes.
Limited Sharing
We may share your information only in these limited circumstances:
- With your explicit consent
- To comply with legal obligations or court orders
- To protect our rights, property, or safety, or that of our users
- With service providers who assist in operating our platform (under strict confidentiality agreements)
Aggregated or Deidentified Data
We may share aggregated or deidentified data for research purposes or to improve our service. We do not intend for these summaries to identify individual users.
4. Data Security
Encryption
Data is encrypted in transit using current TLS standards and protected at rest through our managed hosting and database providers where supported and configured.
Access Controls
We implement strict access controls and regularly audit who can access your data.
Security Reviews
We use security reviews, dependency checks, access reviews, and operational audits to identify and address vulnerabilities.
Incident Response
If a data incident affects personal information, we will investigate, take steps to secure the service, and notify affected users or regulators as required by applicable law.
5. Your Rights and Choices
Access Your Data
You can view and download all your data at any time through the Export feature in your account settings.
Update Your Information
You can update your profile information, preferences, and settings at any time through your account.
Delete Your Account
You can delete your account from Settings after confirming your email. Active application records covered by the deletion flow are removed or deidentified; limited provider backups, security logs, and legally required records may remain for their normal retention windows.
Opt-Out of Communications
You can unsubscribe from marketing emails while still receiving important service updates.
Data Portability
You can export your account data as a JSON archive from Settings -> Security & Privacy.
6. Data Retention
Active Accounts
We retain account data while your account remains active. After account closure or deletion, retention depends on the requested action, legal obligations, provider backup lifecycle, and operational security needs.
Deleted Data
When you delete quests or other records, Wizzo removes them from active application views. Account deletion removes covered active application records through the documented deletion flow; provider backups and logs expire on their configured lifecycles.
Analytics Data
Aggregated or deidentified analytics may be retained for product, security, and reliability analysis. Specific retention periods are governed by our operational policies and legal requirements.
7. Cookies and Tracking
Essential Cookies
We use necessary cookies for authentication, security, and basic functionality. These cannot be disabled.
Optional Analytics
Optional Google Analytics 4 and Vercel Web Analytics measurements help us understand acquisition and aggregate site usage. These tools only run after you allow them in the cookie banner or in Settings -> Security & Privacy. Wizzo excludes email addresses, names, message text, quest content, document content, and URL query strings from these measurements. Global Privacy Control and Do Not Track signals keep optional analytics off even if a prior preference allowed it.
No Third-Party Tracking
We do not use advertising cookies or send optional analytics events for cross-site advertising. Google and Vercel process only the limited, consented measurements described above.
8. Children's Privacy
Wizzo is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we discover that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
We will notify you of any material changes by:
- Posting the updated policy on this page
- Sending you an email notification
- Displaying a notice in the app
Your continued use of Wizzo after any changes constitutes acceptance of the updated Privacy Policy.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Data Protection Contact
For privacy-related concerns or data subject requests, you can also contact our data protection contact at dpo@gowizzo.io
© 2026 Wizzo Labs, Inc. All rights reserved.
This Privacy Policy is effective as of June 2025 and was last updated on May 24, 2026.
See also our Terms of Service.