Well SaidInformation we collect
Account information. When you create or use an account, we collect your name, email address, and authentication identifiers. Password credentials are processed by Firebase Authentication, and Sign in with Apple is processed by Apple. Well Said does not store your plaintext password.
Card content. We collect the information you enter to create, edit, save, and share a card, including recipient names, relationships, occasions, tones, prompts, personal details, generated messages, artwork, and card status. If you share a card, we create a private link that allows the recipient to view it.
Recipient profiles and occasions. If you use the Well Said+ planner, we store the recipient names, relationships, personalization notes, preferred tones, important dates, and reminder preferences you choose to save. This information is used to populate future cards and keep your occasion calendar available across sessions.
Group cards. If you organize or contribute to a group card, we collect contributor names entered for invitation tracking, whether a named invitation link was opened, submitted messages, the organizer’s approval decisions, and identifiers needed to connect invitations and contributions to the private group card. Contributors do not need a Well Said account. Pending contributions and invitation tracking are visible only to the organizer, and messages are not shown to the recipient unless the organizer approves them.
Purchase information. Apple processes App Store payments. We receive product identifiers, signed transaction identifiers, subscription and renewal status, and an account-linked purchase token so we can verify purchases and deliver card balances. We do not receive or store your full payment-card number.
Support and technical information. If you contact support, we receive the information in your message. Our hosting and security providers may process limited request and diagnostic data, such as timestamps, device or browser details, IP address, and error information, to operate, secure, and troubleshoot the service.
How information is collected
We collect information you provide in the app or website, information generated when you create or share a card, transaction information supplied by Apple, and limited technical information generated when your device communicates with our service. Recipient dates and reminder preferences are stored with your account; the corresponding reminder notifications are scheduled and controlled on your device.
How we use information
We use information to authenticate your account; create, store, edit, display, and share cards; personalize card messages and artwork; process and restore purchases; deliver subscription renewals without duplicate fulfillment; provide support; prevent fraud and abuse; maintain security; troubleshoot problems; comply with law; and improve the reliability of Well Said.
AI processing
Well Said uses OpenAI services to generate card messages and artwork. Information you include in card prompts or personal details may be sent to these services to produce the card you request. Avoid entering highly sensitive information, and review each generated card before saving or sharing it.
Service providers and disclosure
We use service providers to operate Well Said, including Apple for sign-in and App Store purchases; Google Firebase for authentication and database services; Google Cloud for artwork storage; OpenAI for card generation; and hosting and infrastructure providers such as Vercel. These providers process information only as needed to perform services for us. We require providers handling personal information for Well Said to use it only for the requested services and maintain protections consistent with this policy and applicable law.
We may also disclose information when required by law, to protect the rights and safety of users or the service, or as part of a merger, acquisition, financing, or sale of assets. We do not sell or rent personal information, and Well Said does not use personal information for cross-app tracking or third-party advertising.
Private card links
A shared card can be opened by someone who has its complete private link. You are responsible for choosing recipients and protecting that link. If a link is shared with the wrong person, contact support so we can help restrict access.
Retention and deletion
We retain account and card information while your account is active and as needed to provide the service. You can delete individual cards in the app. You can delete your account from Profile or follow our account deletion instructions; we aim to complete verified deletion requests within 30 days. Deletion removes or de-identifies account and saved-card data from active systems, subject to limited retention in backups and for legal, transaction, fraud-prevention, security, and dispute-resolution obligations.
Your choices and consent
You can update your name, delete cards, delete your account, or contact us to request access to or correction of your information. You can control notification permission in your device settings and stop optional collection by not entering optional card details. You may revoke Sign in with Apple access through your Apple ID settings. Additional privacy rights may apply depending on where you live.
Security
We use administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security.
Children
Well Said is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can delete it.
Changes to this policy
We may update this policy as Well Said changes. We will post the revised policy on this page and update the effective date. Material changes may also be communicated in the app or by another appropriate method.
Contact
Questions, privacy requests, and deletion requests can be sent to support@wellsaid.cards.