Privacy Policy

Effective 9 November 2026. Wubb is owned and operated by Catalina Secrieru. Contact: soft.apps.contact@proton.me.

What Wubb does

Wubb turns spoken or typed requests into calendar events, reminders, alarms, timers, notes, shopping lists and map destinations. You choose what to submit. Wubb does not require an account.

Voice, text and AI processing

After your consent, submitted recordings, request text, clarification answers, relevant item details and request context (such as language, time zone and date) are sent securely to Wubb’s backend and OpenAI to transcribe speech and interpret your request. They are not sent until you choose to use those features. Do not include information you do not want processed. Wubb does not use your requests to train its own AI models.

Information on your iPhone

Your notes, shopping progress, request history, preferences and saved destinations are stored locally by Wubb. Wubb does not provide account-based cloud sync for this local library. When you allow Apple Calendar or Reminders integration, selected items are also handled by those Apple services and may sync according to your Apple account settings.

Server retention and security

Uploaded audio is normally removed after transcription and is eligible for automatic cleanup after 24 hours. A bucket lifecycle is a further cleanup safeguard. Temporary capture content is eligible for automatic deletion after seven days. Cleanup is periodic, not an instantaneous guarantee. Deleting a request queues removal of its temporary server copy; if offline, that queue runs after reconnection.

A random identifier assigned to this app installation and an independently generated secret protect access to requests without a login. The secret stays in iPhone Keychain and is transmitted only over HTTPS to authenticate with Wubb’s backend. The server stores a hash of this secret. This persistent app-installation identifier, and its hashed analytics form, can associate requests and activity from the same installation. It is a device-level identifier for this app, not an advertising ID or a hardware identifier; it does not identify you by name.

After request content is removed, the server retains limited metadata: the installation identifier, credential hashes, capture IDs, request hashes and timestamps. These records support authentication, duplicate-request prevention and security; they do not include recordings, request text or interpreted item details. This metadata currently has no automatic expiry. To ask about it or request its removal, email soft.apps.contact@proton.me. Support email and feedback do not automatically identify your installation, so we may need more information, such as a capture ID from a request’s support draft, to locate the relevant records. Never send your private device credential.

On the Firebase backend, short-lived hashed network counters limit abusive device registrations. They are not joined to request content and are eligible for expiry after one day.

Content-free service analytics

App versions using Firebase send limited technical events to help the owner understand reliability and feature usage: sessions, onboarding, recording length, voice/text input type, entry point, permission states, feature categories, app/iOS versions, offline recovery, processing states, action types and operations, device-reported execution outcomes, safe error codes, network and processing performance measurements (including upload, queue and AI-stage durations), and provider-reported token usage. Analytics exclude recordings, transcripts, clarification answers, item titles or contents, addresses, native item identifiers and device credentials. A hashed random installation identifier counts installations, not people. Missing execution reports remain unknown, and a successful report does not establish alert delivery or external completion.

The server may estimate country from the request’s trusted network address using a local DB-IP Country Lite database. The address is used temporarily for this lookup and is not stored in analytics or sent to a location API. This is a network estimate: VPNs and proxies can change it; unavailable estimates are Unknown. Language and time-zone preferences are reported separately and are not treated as physical location. Country data is provided by DB-IP under CC BY 4.0.

Individual content-free analytics events and recent request summaries are eligible for cleanup after seven days. Duplicate-event markers expire after 91 days. Daily growth aggregates and pseudonymous installation, first-seen, activity and country history are kept until the owner clears them. The owner can clear recent analytics details or reset all analytics history from the private dashboard. These controls do not delete app requests, local data, device credentials or Apple items. Cleanup runs periodically. The analytics dashboard is private to the verified owner email; it does not expose request content. OpenAI costs shown there are estimates only when explicit model rates are configured, not billing records.

Permissions and alerts

Microphone, Calendar, Reminders, alarm and notification access are requested for the features you choose. You can change permissions in iPhone Settings. Local notification times and content are scheduled on your device; Wubb does not use a remote push notification service. iOS settings, Focus, device state and notification capacity can affect delivery.

Support

When you send support email, the name, message and any diagnostics or attachments you choose to include are received at our support address and used to answer your request. Do not include sensitive information unnecessarily. Email handling is subject to the email providers involved. We do not sell personal information, display advertising or track you across other apps and websites.

Your choices

You can review and delete local history and individual items, revoke AI consent, change Apple service permissions, or stop using the app. Removing local history does not itself remove events or reminders you already created in Apple services. Use their item controls to edit or remove those items. For data access or deletion questions, contact support. Wubb is not directed to children under 13.

Service providers and changes

Wubb 1.0.1 uses Google Cloud/Firebase for new requests and the disclosed service analytics; OpenAI provides transcription and request interpretation. Wubb 1.0 continues using Cloudflare. Requests already started on Cloudflare stay connected to that service while they finish, recover or are removed, including after an update to 1.0.1. Existing requests are not silently moved to another provider. Version 1.0.1 asks for the updated Firebase and OpenAI processing choice before submitting new requests. These providers may process data in countries outside your country under their own applicable service and privacy terms. See Firebase privacy, Cloudflare privacy and OpenAI privacy. This policy will be updated if Wubb’s processing changes.