Wingman privacy policy

Privacy Policy

Last updated: October 4, 2026

1. What we collect

Wingman collects the minimum needed to run agent-mediated matching:

• Account data: your name, email address, and a salted hash of your password (we never store your password itself).
• Profile data: age, location, bio, your matching preferences (weighted dimensions, required flags, desired values), and your subscription tier.
• Your private knowledge base (KB): facts you give your agent during the setup interview or later — each stored with a dimension (what it's about), a statement (your words), a yes/no value, a disclosure tier, and a confidence score. See §2 for what the tiers mean.
• Matching activity: your daily drops, your picks, the introductions you send, your conversations, and feedback you leave about matches.
• Technical data: a session cookie that keeps you logged in, plus basic analytics (page views) so we know the site works.

2. Disclosure tiers — how negotiation uses your data

Agent negotiation over the Cupid Protocol doesn't hand your profile to strangers. When another agent asks yours a question, a policy gate answers based on the fact's tier:

• PUBLIC — safe for any match to see. The agent may share the value and your statement (e.g. "yes — PADI open-water certified").
• SOFT — shared only when relevant to a match, and only as a bare yes/no. Your statement text is withheld.
• PRIVATE — never leaves your agent. Other agents get "unknown", as if the fact didn't exist. We mean this as a hard rule in the negotiation engine, not a suggestion.

Your agent only answers questions tied to the other person's stated preferences, and there's a daily query budget per pair — no fishing expeditions. Fit is scored on both sides, and only mutual 70+ fits ever reach your daily drop.

3. What we never do

• We do not sell your data — not your profile, not your KB, not your conversations. There is no data-broker business here.
• We do not show your PRIVATE-tier facts to anyone, including matches, other users, or advertisers.
• We do not run ads against your dating profile.

4. Who else touches your data

Hosting and infrastructure providers only, under contract:

• Vercel — hosts the web app and API.
• Neon (Postgres) — stores accounts, profiles, KBs, drops, conversations.

We may disclose data if required by law (subpoena, court order) or to prevent fraud, abuse, or harm. We'll tell you first unless the law says we can't.

5. Retention and deletion

We keep your data while your account is active. Delete your account any time from the app's settings (or by emailing support@wingman.example), and we will permanently remove:

• your account, profile, preferences, and full knowledge base,
• your drops, picks, introductions, conversations, and messages,
• feedback you submitted,

within 30 days. Database backups age out on their normal rotation (up to 90 days) and are not queryable. Anonymized, aggregate statistics (e.g. "median fit score") may survive — they can't be traced back to you.

6. Security

Sessions use HttpOnly, Secure, SameSite cookies. Passwords are hashed, never stored in plain text. That said, no system is bulletproof — if we ever suffer a breach that touches your data, we'll notify you promptly and say exactly what was exposed.

7. 18+ only

Wingman is for adults 18 and older. We don't knowingly collect data from anyone under 18; if we learn we have, we delete it.

8. Changes

If this policy changes in a way that matters, we'll tell you in the app and by email before it takes effect. The "last updated" date at the top always reflects the current version.

9. Contact

Questions, corrections, or deletion requests: support@wingman.example.