wanna
Privacy policy
Last updated
wanna lets you post something you want to do, get matched with people who want to do it too, and arrange to meet. This policy explains what that means for your data.
Peltr AB is the data controller. If you are under 18, there is a section written for you further down.
What we collect
Your account. Your email address, so you can sign in. wanna sends a one-time code by email; there is no password. You can also sign in with Apple or with Google, in which case we receive the identifier that service gives us.
Your date of birth. Required, because wanna keeps under-18s and adults separate. It is stored encrypted and is never shown to other users. Where Apple or Google share an age signal with the app, we use that as well.
What you post and who you do it with. The activities you post, your responses to other people’s posts, your friends, the groups you join, and the messages you exchange in a match chat.
Your location, at the moment you act. When you post, join or accept an activity, we record where you were at that moment. We do not track you in the background, and we record nothing between those moments. Other users never see your position: they see an approximate distance band, recalculated no more often than once a day, and results are never ordered by distance.
Technical data. Sign-in sessions per device, and crash reports when the app or our servers fail.
Reports. If someone reports you, or you report someone, we copy the relevant messages, profile details and activity into the report so it can be reviewed.
Why we collect it
Your account, posts, matches and messages are processed to provide the service you signed up for. Location is processed to match you with people near you, which is the function of the app. Date of birth is processed to keep age groups separate, which is a safety measure. Reports and crash data are processed to keep the service safe and working.
For users aged 13–15, processing additionally relies on a guardian’s consent, as described below.
If you are under 18
wanna is open from age 13. Some things work differently for you, and they are not optional:
- You are only ever matched with other under-18s. You will not be matched with, befriended by, or put in a chat with an adult. This is enforced in our database, not only in the app.
- If you are 13, 14 or 15, a parent or guardian has to say yes first. We ask you for their email address or mobile number and send them a page explaining what wanna is and what they are agreeing to. Your account does not work until they approve it.
- Your guardian can change their mind at any time. If they withdraw consent, your account is suspended straight away and your data is deleted on the normal 30-day schedule.
- Your guardian cannot read your messages. They can withdraw consent, and they can see whether you have nearby browsing switched on. They cannot see what you say in a chat.
- We do not profile you for advertising. wanna carries no advertising at all, for anybody.
When you turn 18 your account moves to the adult group. Friendships you already have are kept but produce no new matches, and chats finish their normal 14-day life.
Where it is stored, and who processes it
All personal data is stored in Sweden, in Amazon Web Services’ eu-north-1
(Stockholm) region, and does not leave the EU in normal operation. Peltr AB is the
controller; the following act as processors on our instructions:
| Processor | What it handles |
|---|---|
| Amazon Web Services | Hosting, database, sign-in infrastructure, logs |
| Amazon SES | Sign-in codes, guardian consent messages, account notices by email |
| Twilio | Guardian consent and account messages by SMS |
| Expo Push Service | Delivery of push notifications; holds the push token for your device |
| Sentry | Crash reports from the app and our servers |
Signing in with Apple or Google involves those companies as independent controllers for that step.
How long we keep it
- Location is deleted after 30 days.
- Messages in a match chat stay readable for 14 days after the activity’s time window, then are deleted.
- Expired activities and their responder lists are kept for 30 days.
- Reports are kept for 12 months, so repeated behaviour can be recognised.
- Server logs are kept for 30 days.
- Your account and posts are kept until you delete them, or until you ask us to delete your account.
- When you ask us to delete your account, it is fully removed within 30 days.
- A record that guardian consent was given survives account deletion, with the guardian’s contact details hashed and the child’s profile gone, so that we can show consent was held. We keep that record for three years.
Third parties and advertising
wanna contains no advertising, no advertising SDKs, no analytics SDKs and no third-party trackers. We do not sell your data and we do not share it for marketing.
The only third parties that receive your data are the processors named in the table above, each acting on our instructions for the purpose listed, plus Apple or Google if you choose to sign in that way.
Security
Data is encrypted in transit using TLS 1.2 or later, and at rest. Your date of birth and any guardian contact details are additionally encrypted under a separate key. Each installation of the app is a separate session that can be revoked.
Your rights
Under the GDPR you have the right to access the data we hold about you, to correct it, to have it deleted, to receive a copy in a portable format, and to object to or restrict our processing of it. Where processing relies on consent, you may withdraw that consent at any time.
To exercise any of these, email us at the address below.
You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), which supervises data protection in Sweden.
Deleting your account
Email contact@peltr.se and we will delete your account, your posts, your messages and your location history within 30 days. A guardian who gave consent for a 13–15 year old can withdraw it at any time from the link they were sent, which has the same effect.
Contact
Peltr AB, Gothenburg, Sweden — contact@peltr.se
Changes to this policy
If how we handle your data changes, this policy will be updated before the change takes effect, and the date at the top of this page will change.