Privacy Policy

Effective date: 6 June 2026

Last updated: 20 July 2026

Wren (“Wren,” “we,” “us,” or “our”) is an AI tarot-reading and reflection app operated by Orogénica Limited, a company registered in New Zealand (NZBN 94-29053678041). This policy explains what personal information Wren collects, how we use and share it, and the choices and rights you have.

A note on what Wren holds

Wren is built around personal, often sensitive reflection — the questions you bring, what you confess, your emotional state, and how you understand yourself. We treat that content as sensitive and have designed the app to keep it private (for example, our diagnostic tooling masks all on-screen text and never logs the content of your readings or conversations — see Security). Please still avoid sharing information you would not want stored, and never use Wren in an emergency — it is not a crisis, medical, or mental-health service.

1. Information we collect

Information you give us

• Account information — your email address and sign-in credentials. If you sign in with Google or Apple, we receive your email from them. If you create an account with an email address and password, you provide your email directly; your password is handled by our authentication provider (Google Firebase) and stored only in hashed form — we never see or store it in plain text. If you use “Sign in with Apple,” we receive the identifier Apple provides and, if you allow it, your email.
• Profile and identity details — a display name, and the optional details you choose to share during onboarding or in Settings: pronouns, gender identity, life stage, spiritual background, what brought you to Wren, and how you’re feeling. You can skip these.
• Date of birth (optional) — if you choose to provide it, we use it to derive your astrological sun sign. You can skip this.
• Your content — the messages and questions you send to Wren, your tarot reading sessions and Wren’s responses, written reflections and journal entries, and your moon-ritual intentions and reflections.
• Bug reports — if you send a report from inside the app, the message you write, plus the technical context described below. Because this message is free text, it may contain whatever you choose to type, including sensitive details. We do not attach the content of your readings, conversations, or reflections to a bug report — that content is stripped before the report is saved or sent — and the bug-report message itself is encrypted at rest.
• Waitlist sign-up (website) — if you join the waitlist on our website, your email address, which we use only to email you about Wren’s launch. You can unsubscribe or ask us to remove it at any time.

Information collected automatically

• Device and app information — app version and build number, device model, operating system version, platform (iOS/Android), and your device’s time zone.
• Usage information — in-app navigation and interaction events used to understand how features are used and to diagnose problems.
• Diagnostics — crash and error reports. When the app encounters an error, we may also capture a short reconstruction of the on-screen layout and your taps leading up to it. In these recordings all text and images are masked (blurred) — the content of your readings, conversations, and reflections is never captured. Nothing is recorded during normal use.
• Identifiers — your account identifier (a Firebase user ID) and, incident to ordinary network requests, your IP address.

Information we derive

• “Life memories” — to make readings feel continuous, Wren derives and stores short summaries of meaningful facts from your sessions. You can delete these by deleting your account.
• Sun sign — derived from your date of birth, if provided.

What we do not collect

We do not collect precise location, your contacts, photos, or advertising identifiers; we do not use third-party advertising; and we do not track you across other companies’ apps or websites. We do not sell your personal information.

2. How we use your information

We use your information to:

• provide, operate, and maintain Wren (create your account, deliver readings and the other features, and remember your preferences);
• personalize Wren’s responses — your questions, reflections, and the profile details you’ve shared are used to tailor what Wren says (see AI processing);
• if you opt in, schedule on-device reminders;
• keep the service reliable and secure — diagnosing crashes and errors, and preventing abuse;
• respond to your bug reports and support requests; and
• comply with legal obligations.

We rely on the following legal bases where the GDPR applies: performance of a contract (providing the app you signed up for), legitimate interests (security, diagnostics, and improving the service), consent (optional profile details and date of birth, which you choose to provide), and legal obligation.

Some of the optional details you may choose to share — such as gender identity and spiritual background — and the personal reflections within your content can reveal sensitive (“special category”) information. Where that information is given additional protection under laws such as the GDPR, we process it only on the basis of your explicit consent, which you give by choosing to provide it; you can withdraw that consent at any time by clearing the relevant details in Settings or by deleting your account, without affecting processing already carried out.

3. AI processing

Wren’s readings and replies are generated using a large language model provided by Anthropic. To generate a response, the content you send and the profile context used to personalize it are transmitted to Anthropic’s API and processed there. Under Anthropic’s commercial API terms, this content is not used to train their models. We send only what is needed to produce your reading.

4. How we share your information

We do not sell your data. We share it only with service providers (“subprocessors”) who help us run Wren, under contracts that limit their use of it to providing their service to us:

We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer (e.g., merger or acquisition), subject to this policy.

5. International data transfers

We are based in New Zealand, and our providers operate in other countries, including the United States. When you use Wren, your information is transferred to and processed in those countries, which may have different data protection laws than yours. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for these transfers. Each provider is bound by a data processing agreement with us, and, consistent with New Zealand’s Privacy Act 2020 (IPP 12), we take reasonable steps to ensure overseas recipients are subject to comparable safeguards.

6. Data retention and deletion

We keep your account and content for as long as your account is active. You can delete your account at any time in Settings → Tend the edges → Delete account, which removes your account and associated content from our systems. Residual copies in our encrypted backups are purged within 30 days. If you have uninstalled the app, you can request deletion by emailing hello@askwren.app or by visiting our data-deletion request page.

Diagnostic and error data is retained for up to 90 days (in Sentry) and is not linked to the content of your readings. Bug reports are retained for up to 90 days so we can investigate and follow up. Some records may be retained longer where required by law.

7. Security

We protect your information with measures including: encryption in transit (HTTPS/TLS); storage of passwords only in hashed form by our authentication provider; access controls and row-level security on our database; restricting data access to the app’s backend functions; masking all text and images in diagnostic recordings; and excluding the content of readings, conversations, and reflections from our logs. No method of transmission or storage is completely secure, but we work to protect your information.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, export (port), or restrict/object to our processing of your personal information, and to withdraw consent. You can edit much of your profile in Settings, delete your account in-app, or contact us at hello@askwren.app to exercise any right. We aim to respond within 30 days. We will not discriminate against you for exercising these rights.

• New Zealand (Privacy Act 2020): you may request access to and correction of your personal information, and may complain to the Office of the Privacy Commissioner.
• EEA / UK (GDPR): you have the rights listed above and may lodge a complaint with your local supervisory authority. You can reach us on data-protection matters at hello@askwren.app.
• California (CCPA/CPRA): you have the rights to know, delete, correct, and opt out of “sharing”/“sale” — we do not sell or share your personal information as those terms are defined. We use the sensitive personal information you provide only to deliver and personalize Wren for you, not for any purpose that would trigger the right to limit its use.

9. Children

Wren is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you live somewhere that sets a higher age of digital consent (for example, parts of the EEA, where it can be up to 16), you must meet that age or have the consent of a parent or legal guardian. If you believe a child under 13 has provided us information, contact us at hello@askwren.app and we will delete it.

10. Changes to this policy

We may update this policy. We’ll revise the “Last updated” date above and, for material changes, give a more prominent notice (such as in-app). Continued use of Wren after an update means you accept the revised policy.

11. Contact us

Orogénica Limited
NZBN 94-29053678041
hello@askwren.app