Privacy policy · Last updated 11 November 2026
Your photos stay on your phone.
Wildcard is an app made by Born Witchy, Inc. (“Born Witchy”, “we”). This policy says what the app does with your information, in plain words. The short version: the reading happens on your phone, your photos are never uploaded, and you can delete your account and everything we keep at any time.
Your photos
Wildcard reads your photos on the phone itself. It uses Apple’s on-device intelligence to choose a card and write a line. The photos are never uploaded to us or to anyone else.
If you allow it, Wildcard looks through your photo library on the phone to choose candidates for your daily card. Photos it passes over are never stored or sent anywhere. The picture on each card in your deck is kept on your phone only.
What we keep for your account
When you sign in, we keep a small record so your deck is there when you reinstall or change phones:
- Your sign-in. Sign in with Apple gives us an identifier and, if you share it, an email address, which can be Apple’s private relay address. We never see your Apple password.
- Your profile. The username you choose, the birthday you enter, and which card is yours.
- Your deck. For each card: the card’s name, its line, the date the photo was taken, the photo’s size, an on-phone reference to the photo, and when the card was made. Not the photo itself.
- Your settings, such as the time your daily card arrives.
Longer readings you open inside the app are kept on your phone only.
The early access list
If you give us your email address on this website, we keep it, with the date, to tell you when Wildcard is ready for you. We use it for nothing else and never share or sell it. Every email we send has a way to stop them, or write to wildcard@bornwitchy.co and we will remove your address.
Crash reports
If the app crashes or something goes wrong, it sends a technical report to Sentry, a service that helps us find and fix bugs. These reports contain the error and the device model and system version. They are set up to contain no personal details, no photos, no lines from your cards and no screenshots.
What we do not do
- We do not sell your information or share it for advertising.
- We do not use advertising or analytics trackers in the app.
- We do not upload your photos.
Who handles your data for us
We store your account on Supabase (our database) and run our server on Vercel, both in the United States. Crash reports go to Sentry. Sign-in is handled by Apple. These companies process the information only to provide their service to us.
How long we keep it
We keep your account and deck for as long as you have an account. When you delete your account, we delete your profile, your deck and your settings from our database, and we tell Apple to stop your sign-in with Wildcard. Crash reports are kept by Sentry for a limited period and then removed.
Deleting your account
In the app, open the You tab, then Settings, then delete your account. You can also write to us at wildcard@bornwitchy.co and we will delete it for you.
Your rights
You can ask to see, correct or delete the information we hold about you, or ask us to stop processing it, by writing to wildcard@bornwitchy.co. If you live in California, the European Union, the United Kingdom or another place with privacy laws that give you further rights, we will honour them.
Children
Wildcard is not meant for children under 13, and we do not knowingly collect information from them. If you believe a child has an account, write to us and we will delete it.
Changes
If we change this policy, we will update the date at the top and, for meaningful changes, tell you in the app.
Contact
Born Witchy, Inc. · wildcard@bornwitchy.co