Website & app · Last updated 14 July 2026 · Version v1.2
This notice explains how your personal data is handled both when you use the Wynna website (the waitlist email form, and any later pre-order checkout) and when you use the Wynna app.
The sections below cover the website first — the waitlist email form and any later pre-order checkout. The Wynna app is covered in its own section below: in short, the app is built to keep your and your child's information on your own device.
Correspondence address: available on request — email the address above.
If you have any question about your data or this notice, email [email protected].
2. What we collect — and what we don't
If you join the waitlist
Your email address — only the email you type into the form.
A consent record — the date and time you ticked the consent box and the version of this notice you agreed to, so we can show your sign-up was genuine.
A source tag — a short label (e.g. "reddit", "mumsnet", "direct") noting roughly where you arrived from, so we can tell which channels work. It is not used to identify you.
Anonymous visit counting (no cookies, no IP stored)
This website counts page visits so we can see how many people viewed it. To do this we create a daily, salted, one-way hash that:
does not use cookies;
never stores your IP address in any readable form;
changes every day and cannot be linked back to you, or across days.
Because it cannot identify you, we treat this as anonymous statistics, not personal data. The Wynna app sends none of this — the counting only happens on this website.
Page heatmaps, during this testing period only
While we are testing this page, we also use PostHog (hosted in the EU) to see which parts of the page get attention, so we can improve it. This runs in a cookie-free mode: it does not set a cookie, does not use your IP address, and does not record a video or replay of your visit. Any text you type — including into the email field — is never captured. It only tells us in aggregate where on the page people click, scroll and pause.
This is temporary instrumentation for the validation period. We will remove it once we've learned what we need to.
We do not collect any information about your child during this validation period. We do not sell your data or share it for anyone else's marketing.
3. Why we use your data, and our lawful basis
What
Why
Lawful basis (UK GDPR)
Your waitlist email
To send you one email when Wynna launches
Consent — Art 6(1)(a). You ticked the box; you can withdraw any time.
Your consent record
To prove your sign-up was valid (PECR / UK GDPR)
Our legitimate interest in keeping lawful records
Source tag (anonymous label)
To understand which channels brought visitors
Legitimate interests — Art 6(1)(f), measuring a marketing test
The launch email is marketing by email, which under the UK Privacy and Electronic Communications Regulations (PECR) needs your opt-in consent. That is why the form has a tick box and we do not email you unless you tick it.
4. We only email you when you ask us to
We send one email — when Wynna is ready to launch.
Every email has an unsubscribe option. Use it and we stop, and delete or suppress your address.
You can withdraw consent at any time by emailing [email protected]. Withdrawing is as easy as giving consent, and does not affect anything done before you withdrew.
5. Who else processes your data
We use trusted suppliers ("processors") who handle data on our instructions only. They do not use your data for their own purposes.
Cloudflare — runs this website and stores the waitlist email in a database (Cloudflare Pages, Workers and D1).
PostHog — EU-hosted (Frankfurt), used only during this testing period for cookie-free page heatmaps. See section 2.
An email-delivery provider — used only to send the single launch email. We will name the provider here before that email is sent.
International transfers: some processing by Cloudflare may take place outside the UK (including the United States). Those transfers are covered by the provider's data-processing agreement using the UK International Data Transfer Addendum (IDTA), the UK-approved safeguard for transfers abroad. PostHog's EU region keeps data in Frankfurt, Germany, covered by the UK's EU adequacy decision — no additional safeguard is needed for that transfer.
We never sell or share your email for anyone else's marketing. The only parties that touch it are the providers above that run our sign-up and launch email.
6. How long we keep your data
Waitlist email: kept until the launch email is sent, then deleted within 6 months of launch — or immediately if you unsubscribe or ask us to delete it, whichever comes first.
Consent record: kept alongside the email for the same period, as proof of lawful consent.
Anonymous visit counts: retained as aggregate numbers only; they contain no personal data.
Page heatmaps (PostHog): aggregate, cookie-free interaction data, kept for the duration of this testing period and removed once we've finished reviewing it.
If Wynna does not launch, we will delete waitlist data on the same basis.
7. Your rights
Under UK GDPR you have the right to: be informed (this notice); access the data we hold about you; rectify it if it is wrong; erase it ("be forgotten"); restrict or object to processing; withdraw consent to the launch email at any time; and data portability where it applies.
To exercise any of these, email [email protected]. We will respond within one month. There is normally no charge.
8. Complaints — the ICO
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK regulator:
The Wynna app is built to keep your and your child's information on your own device. It is not an online service: there is no account, no Wynna server, and no way for the app to send your information to us or to anyone else. This section explains, plainly, what that means.
The app cannot connect to the internet
No network access — the app has no INTERNET permission, so it cannot reach the network at all. It has no way to send your or your child's information to Wynna or anyone else.
No account, no sign-in — you do not create an account or sign in. There is no Wynna server holding your data, because none exists.
Everything stays on your device
On-device storage — your notes, photos, and your child's development record live in a private database on your own device, readable only by the app.
No tracking, analytics, or adverts — the app ships no analytics, crash-reporting, or advertising code. Nothing about how you use it is measured or sent anywhere.
Android backup to your own Google account: if you have Android's own backup switched on, Android may include Wynna's data in your device's automatic backup to your own private Google Drive. This is a feature of your phone, controlled by you in your Android settings — the data goes to your Google account, not to Wynna, and Wynna never reads or writes that backup. You can turn it off in your phone's backup settings.
You stay in control
Delete anything, any time — you can delete any note, any photo, or your child's whole record from inside the app whenever you like.
Your own backups — Wynna's built-in backup-and-restore keeps a file only where you choose to save it, on your own device or storage.
10. Changes to this notice
If we change how we use your data, we will update this notice and its version number, and — where the change is significant — tell you before it takes effect.