1. Who we are
Winka is a desktop reminder application and software product operated by Julia Daniele Cruz Augusto, an Australian sole trader, ABN 16 949 337 258, trading as Norange. References to “Winka”, “we”, “us” or “our” mean the legal operator of Winka.
We handle personal information in accordance with privacy laws that apply to us. We also use the Australian Privacy Principles as a practical benchmark for how Winka manages personal information, even where a particular obligation may not apply to every activity.
2. Information we collect
The information we collect depends on how you use Winka. It may include account information such as your name, email address, account identifier, locale and account status; reminder content such as titles, notes, dates, times, status, categories, recurrence settings and images you choose to add; trial, plan and subscription metadata; support correspondence; and technical, security or diagnostic information needed to operate and protect the service.
Reminder content is controlled by you and may contain personal or sensitive information if you choose to enter it. Winka is not designed as a secure vault for highly sensitive information. You should avoid storing passwords, payment-card details, government identification numbers, or highly sensitive health, legal or financial information in reminders.
3. How we collect and hold information
We generally collect information directly from you when you create an account, use Winka, add or change reminder content, verify your email, contact support or use paid features. Some account, security and technical information is generated automatically by the systems used to operate Winka.
Winka uses cloud infrastructure to support account authentication, storage and synchronisation. Our current Supabase project is configured in the Sydney, Australia region. Other providers involved in website hosting, transactional email, payments or analytics may process information in other locations depending on the provider and production configuration.
4. How we use your information
We use personal information to provide and operate Winka; authenticate and secure accounts; store and synchronise reminders; provide plan features and trial access; send transactional account and verification messages; provide support; prevent abuse and investigate security issues; administer subscriptions where paid plans are active; comply with legal obligations; and understand website or product usage where optional analytics are enabled.
We do not sell your personal information. We do not use your private reminder content for third-party advertising.
5. Service providers
We use service providers where reasonably necessary to operate Winka. Depending on the production features that are active, these may include Supabase for authentication, database and cloud services; Resend for transactional email; Hostinger for website or server hosting; Stripe for payment processing when paid subscriptions are active; and analytics providers where analytics are enabled.
These providers may process personal information on our behalf or, in some cases such as payment processing, under their own privacy terms. We update this policy when material changes to our use of providers affect how personal information is handled.
6. Payments
When paid Winka subscriptions are available, payment-card details are intended to be collected and processed by Stripe rather than stored directly by Winka. Winka may receive limited billing information such as customer identifiers, subscription status, billing interval, country, payment status and renewal information needed to manage paid access.
7. Cookies and website analytics
Winka may use essential cookies or similar technologies for secure account sessions, authentication and service operation. These are necessary for account functionality.
If optional website analytics are enabled, they may collect limited information about website usage, devices and browsers to help us understand and improve the site. Analytics is not used to collect reminder content, passwords, authentication tokens, names or email addresses. At launch, Winka intends to keep optional analytics disabled until the visitor has affirmatively consented.
8. Data retention and account deletion
We retain personal information only for as long as it is reasonably needed to provide Winka, maintain account and security records, meet legal or accounting obligations, resolve disputes and protect the service.
You may request deletion of your Winka account and associated personal information by contacting support@winkareminder.com. After we verify a valid request, we aim to delete or de-identify personal information from active production systems without undue delay and ordinarily within 30 days, subject to information we must retain for legal, accounting, fraud-prevention, security or dispute-resolution purposes. Deleted information may remain temporarily in protected backups until those backups are overwritten or expire under the applicable backup cycle. Backups are not intended to be used to restore a deleted account into active production except where necessary for legitimate disaster recovery.
9. Security
We use reasonable technical and organisational measures designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These measures include access controls and security rules around account and application data. We review security controls as Winka changes.
No internet-connected service can guarantee absolute security. You are responsible for keeping your Winka password and the devices on which you use Winka secure.
10. Data breaches and security incidents
If we become aware of suspected unauthorised access, disclosure or loss of personal information, we will take steps appropriate to the incident. Our response process is based on four stages: contain the incident, assess what happened and the risk of harm, notify where appropriate or legally required, and review the incident so that we can reduce the risk of it happening again.
We will act to limit further exposure, investigate the information and people affected, preserve relevant evidence, assess the likelihood and seriousness of harm, and take reasonable remediation steps. Where useful to protect affected users, we may recommend actions such as changing passwords, watching for suspicious activity or taking other account-security steps.
If the Australian Notifiable Data Breaches Scheme applies to Winka and an incident is an eligible data breach, we will notify the Office of the Australian Information Commissioner and affected individuals as required by law. A notification may describe what happened, the kinds of information involved and practical steps people should take. Where the NDB Scheme does not require notification, we may still contact affected users where doing so is appropriate to reduce risk or harm.
11. Access and correction
You may contact us to request access to personal information we hold about you or to ask us to correct inaccurate or out-of-date information. We may need to verify your identity before providing access or making certain changes. Some account information may also be available directly through Winka as account features are developed.
12. International processing and transfers
Winka is operated from Australia and may be used by people in other countries. Some service providers or their subprocessors may process personal information outside Australia or outside the country where you live.
Where applicable law requires safeguards for international transfers, we will use appropriate contractual, organisational or other lawful transfer mechanisms and will keep this policy updated with material information about the locations and providers involved where it is practicable to do so.
13. European Economic Area and United Kingdom
If the EU GDPR or UK GDPR applies to our processing of your personal data, you may have rights including access, correction, deletion, restriction, portability and objection, and the right to withdraw consent where processing is based on consent. You may also have the right to complain to the data-protection authority in the country where you live, work or where an alleged infringement occurred.
Depending on the processing activity, our legal bases may include performing our contract with you, complying with legal obligations, our legitimate interests in operating and protecting Winka where those interests are not overridden by your rights, and consent where consent is required.
Before Winka intentionally targets the EEA or United Kingdom at scale, we will assess whether we are required to appoint an EU representative or UK representative and will publish the relevant contact details if required.
14. Brazil
If Brazil’s Lei Geral de Proteção de Dados Pessoais (LGPD) applies to our processing, you may have rights provided by the LGPD, including rights relating to confirmation and access, correction, deletion or anonymisation where applicable, information about sharing, portability where applicable, and withdrawal of consent where consent is the legal basis.
Requests can be made through support@winkareminder.com. We may need to verify your identity and may retain information where a lawful exception or retention obligation applies.
15. Canada
Where Canadian private-sector privacy law applies, we handle personal information in line with applicable accountability, consent, limiting-use, safeguards, openness and access principles. You may request access to or correction of personal information we hold about you and may raise a privacy complaint through support@winkareminder.com.
Canadian privacy requirements can vary by province. We will apply the federal or provincial framework that applies to the relevant processing activity.
16. United States
Privacy rights in the United States vary by state and may depend on legal thresholds such as business size, revenue or processing volume. If an applicable state privacy law gives you rights relating to access, correction, deletion, portability or opt-out, we will provide the process required by that law.
Winka does not sell personal information. Winka does not use private reminder content for third-party advertising. If our practices or applicable legal thresholds change, we will update this policy and any required opt-out mechanisms.
17. Privacy complaints
If you believe Winka has mishandled your personal information, contact support@winkareminder.com and describe your concern. We will review the complaint, may ask for information needed to investigate it, and will respond with the outcome or next steps as appropriate.
Where the Australian Privacy Act applies and you are not satisfied with our response, you may also have the right to raise the matter with the Office of the Australian Information Commissioner at oaic.gov.au.
18. Changes to this policy
We may update this Privacy Policy when Winka, our service providers, our legal obligations or our information-handling practices change. The “Last updated” date shows when the policy was most recently revised. If a change materially affects how we handle existing users’ personal information, we will provide additional notice where appropriate.
19. Contact us
For privacy questions, access or correction requests, account-deletion requests, complaints or concerns about a possible security incident involving your Winka information, contact support@winkareminder.com.