Wrong.
Privacy Policy
We try to collect as little as possible. Here's what we actually keep, and why.
Last updated May 17, 2026
What we collect
We collect the information you provide directly and a small amount of technical information needed to operate the Service. We do not buy or sell personal data.
Account data
When you sign up, we store your name, your email address, and a one-way hashed password. Your password is never stored in plain text and cannot be recovered from the hash. We also store the date your account was created.
Predictions and reflections
We store the predictions you submit (your YES/NO answer and confidence) and any reflection text you optionally write at the end of a daily round. These are tied to your account so we can show you your history, compute your stats, and aggregate crowd statistics on each question.
Analytics and cookies
We use a single httpOnly cookie to keep you signed in. We do not use third-party advertising trackers. We may use basic, privacy-respecting analytics (such as aggregated page-view counts) to understand how the Service is used. Those analytics do not identify individual users.
How we use your data
We use your data to:
- operate your account and keep you signed in
- show you your predictions, history, and stats
- show crowd statistics after you've answered a question
- send transactional emails (e.g., account-related notices)
- investigate abuse and enforce our Terms and Community Guidelines
We do not sell your data.
Third-party services
We rely on a small number of infrastructure providers to operate the Service — primarily a hosting provider and a managed database. These providers process data on our behalf under their own privacy and security terms. We pick providers that meet reasonable industry standards.
Data retention
We retain your account data and predictions for as long as your account is active. Deletion is immediate when you use the in-app Delete account flow — the account row and every cascading record (predictions, reasoning tags, reflections, journal entries) are removed in a single database transaction. Email-based deletion requests are completed within a reasonable timeframe, typically a few business days after ownership verification.
We may retain short-term server logs for security and abuse-prevention purposes as required by our infrastructure providers. These logs are not organized around user identity and are rotated out under those providers’ retention policies.
Deletion and access requests
You can delete your account from inside the app at any time. Go to You → Account and use the Delete account button under Danger zone. Deletion is immediate.
If you can’t sign in, request deletion by emailing contact@wrong-app.com from the address associated with your Wrong. account (so we can verify ownership). The public /delete-account page describes both paths and exactly what is removed.
For a copy of your data, email us at contact@wrong-app.com. We respond within a reasonable timeframe.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the “last updated” date at the top of this page and, where reasonable, notify you in the app.
Contact
Privacy questions, deletion requests, or data access requests? Reach us at contact@wrong-app.com.