This Privacy Policy (the “Policy”) describes the categories of personal information that WILCO LLC collects through the WILCO application, website, and related services (collectively, the “Service”), the purposes for which that information is processed, the parties with whom it is shared, and the rights available to you with respect to it.
This Policy is incorporated into and forms part of the Terms of Service. Capitalized terms not defined here have the meanings given to them there.
Data Controller
The Service is operated by WILCO LLC, an Ohio limited liability company (“WILCO,” “we,” “us,” or “our”). WILCO LLC is the data controller responsible for the personal information described in this Policy and determines the purposes and means of its processing. Inquiries and requests relating to this Policy may be directed to support@wilco.today.
When you authenticate through Google or Apple, WILCO receives from that provider the identifying information associated with your account, which may include your name, email address, and profile image. Apple users who elect to conceal their address are identified by the relay address Apple supplies. WILCO additionally processes the content you create within the Service, including habits, schedules, day notes, obligations, settings and preferences, park visits, custom adventures, and missions. WILCO does not request, and does not seek to collect, payment card details, government-issued identifiers, or clinical health records.
WILCO processes personal information for two purposes only: to synchronize your data across the devices on which you authenticate, and to render the Service personal to you. WILCO does not sell or rent personal information, and does not process it for advertising or behavioral profiling.
Personal information is stored in Supabase, a cloud database and authentication provider, and is cached locally on your device in your browser’s localStorage so that the Service remains responsive and available offline. The local cache is cleared when you sign out or clear your browser data. WILCO maintains administrative and technical safeguards appropriate to the nature of the information processed, but no method of transmission or storage is entirely secure, and WILCO cannot guarantee absolute security.
WILCO engages the following processors, each of which handles personal information on WILCO’s behalf and under its own privacy terms: Google LLC and Apple Inc. (authentication); Supabase, Inc. (database and authentication); Vercel Inc. (hosting and content delivery); OpenAI, L.L.C. (the language model underlying the Roger feature, as described in Section 5); and Stripe, Inc. (payment processing, as described in Section 6). WILCO also links to affiliate merchants; those links are outbound redirects only, and no personal information is transmitted to affiliate partners by WILCO. The operation of those links is described in the Affiliate Disclosure.
The Roger coaching feature is powered by a large language model provided by OpenAI. When you submit a message to Roger, that message and the current conversation are transmitted to OpenAI’s API for processing, and the response is returned to you in real time. WILCO does not retain Roger conversations on its servers or on your device; a transcript exists only for the duration of your session and is discarded when the Service is reloaded or closed. Under OpenAI’s API terms, data submitted through the API is not used to train its models. Roger receives only the messages you submit and the context necessary to respond to them, and is not provided your authentication credentials or payment information. Further detail is available in OpenAI’s API data policy. You should not submit sensitive personal, financial, or medical information to Roger.
Subscription payments are processed by Stripe, Inc. Payment card and financial account details are transmitted directly to Stripe and are neither received nor stored by WILCO. WILCO retains only the subscription status and identifiers necessary to determine your entitlement to premium features and to provide access to the Stripe billing portal. Stripe processes that information as an independent controller under its own privacy policy.
WILCO stores preference keys in your browser’s localStorage, and authentication tokens are held in cookies set by Supabase’s server-side authentication. These technologies are strictly necessary to maintain your session and preserve your settings. WILCO does not employ advertising cookies or third-party tracking technologies.
Personal information is retained for as long as your account remains active. Upon a verified request for account deletion, the associated data is deleted, except where retention is required to comply with a legal obligation, resolve a dispute, or enforce an agreement. Residual copies may persist in routine backups for a commercially reasonable period before being overwritten.
You may request access to the personal information WILCO holds about you, the rectification of inaccurate information, and the deletion of your account and its contents. Requests should be submitted to support@wilco.today. WILCO may take reasonable steps to verify your identity before acting on a request.
Residents of California have the right, under the California Consumer Privacy Act as amended, to know the categories and specific pieces of personal information collected about them, the purposes for which it is used, and the categories of third parties to whom it is disclosed; to request deletion of that information; to request correction of inaccurate information; and not to be subjected to discriminatory treatment for exercising these rights. WILCO does not sell or share personal information as those terms are defined by that statute, and has not done so in the preceding twelve months. Requests may be submitted to support@wilco.today.
Where the General Data Protection Regulation or the UK GDPR applies, WILCO processes personal information on the legal bases of performance of a contract with you, your consent where consent is sought, and WILCO’s legitimate interests in operating and securing the Service. You have the right of access, rectification, erasure, restriction of processing, objection to processing, and data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Personal information may be transferred to and processed in the United States by the providers identified in Section 4. You have the right to lodge a complaint with your national supervisory authority. Requests may be submitted to support@wilco.today.
The Service is not directed to, and is not intended for use by, individuals under the age of thirteen (13), and WILCO does not knowingly collect personal information from such individuals. If WILCO becomes aware that it has collected personal information from a child under thirteen, that information will be deleted. A parent or guardian who believes a child has provided personal information to WILCO should contact support@wilco.today.
WILCO may amend this Policy from time to time. The amended Policy will be posted on this page together with a revised effective date. Your continued use of the Service following the posting of an amended Policy constitutes your acceptance of it.
Inquiries regarding this Policy may be directed to WILCO LLC at support@wilco.today.
September 2, 2026
WILCO