Privacy Policy

Effective October 16, 2026

Wrapped is an iPhone app that helps you put on tefillin every day. It's made by Jacob Rothenberg, an independent developer in Ontario, Canada ("Wrapped", "we", "us"). This policy explains what we collect, why, who we share it with, and the choices you have.

1. What we collect

Your account

When you sign in with Apple or Google, we receive your email address (or an Apple private relay address, if you choose Hide My Email), your name if you choose to share it, and an account ID.

Your practice and history

• Your settings: your custom (nusach), whether you live in Israel or outside it, whether you wear tefillin on Chol HaMoed, your time zone, and your display name.
• Your history: the days you wrapped, used a streak freeze or missed; your streaks, goals (including the optional note about why a goal matters to you), gems and streak freezes.

Because this describes religious practice, we treat it as sensitive information and use it only to run the app for you.

Scan photos

When you scan, your photo is sent over an encrypted connection to our server, which passes it to OpenAI to check whether tefillin are being worn. We do not store the photo. We keep the result: pass or fail, whether the head and arm tefillin were visible, a confidence score, a one-sentence description of what the AI saw, and a tip for the next try. OpenAI processes the photo under its API terms: it does not use it to train its models, and it may keep it for up to 30 days to monitor for abuse before deleting it.

Purchases

When you buy gems, Apple processes the payment and sends us a signed record of the transaction: its ID, the product, price, currency, storefront and date. We never see your payment details.

Email preference

Whether you want emails from us. You can change this in the app's Settings.

What stays on your phone

• Location. Used only on your device to calculate sunrise, sunset, the times of the day and the direction to Jerusalem. To show your city's name, your iPhone looks it up using Apple's location services. We never receive your location.
• App lock. You choose the apps to lock in Apple's Screen Time picker. Wrapped only gets anonymous tokens for them, which stay on your device. We never learn which apps you picked.
• Reminders are scheduled on your phone.
• Camera. Used only for the live scan.

2. How we use it

• To run your account, streak, goals and history.
• To check scans and record your wraps.
• To apply streak freezes automatically on days you miss.
• To credit gem purchases and handle refunds.
• To send emails about your account: a welcome, streak updates and purchase receipts. You can turn these off.
• To answer your support requests.
• To keep the service secure and prevent abuse, for example by limiting scans per day.

We do not use your information for advertising, sell it, or share it with data brokers. The app contains no analytics or advertising SDKs.

3. Who we share it with

We use these service providers to run Wrapped. They process information on our behalf:

• Supabase hosts our database and server.
• OpenAI checks scan photos.
• Resend sends our emails.
• Apple provides Sign in with Apple, in-app purchases and app distribution. Apple's privacy policy applies to your use of its services.
• Google provides Google sign-in, if you use it. Google's privacy policy applies.

We may also disclose information when the law requires it. If Wrapped is ever transferred to a new owner, your information would be transferred with it and remain covered by this policy.

Our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for these transfers.

4. How long we keep it

We keep your information while you have an account. When you delete your account in the app (Today → Settings → Account → Delete account), we permanently delete your account and its data, including your history, scan results, goals, gems and freezes. If you signed in with Apple, we also revoke Wrapped's access to your Apple ID.

Purchase records are kept without any link to you, as needed for refunds, tax and accounting. Copies in our providers' backups are removed as those backups expire.

5. Your choices and rights

• Delete your account at any time from the app.
• Turn off emails in the app's Settings.
• Turn camera, location, notifications and Screen Time access on or off in iOS Settings. The daily scan needs the camera.

Depending on where you live, including the European Union, the United Kingdom, California and Canada, you may have the right to access, correct, delete or receive a copy of your information, and to object to or restrict some processing. Email support@wrapped.party and we'll respond within the time the law requires. You can also complain to your local data protection authority; in Canada, that's the Office of the Privacy Commissioner of Canada.

6. Children

Wrapped is not directed to children under 13, and we don't knowingly collect their information. If you believe a child under 13 has given us information, contact us and we'll delete it.

7. Security

We use encrypted connections, keep each account's data accessible only to that account, and store your sign-in securely in the iPhone Keychain. No system is perfectly secure, but we work to protect your information.

8. Changes

If we change this policy, we'll post the new version here and update the date above. For significant changes, we'll let you know in the app or by email.

9. Contact

Questions or requests: support@wrapped.party