How We Handle Your Data

Only if you connect Gmail (it's optional). When you do, Wendy reads email subjects, sender names, and a small amount of email body text to spot things like bill confirmations, order updates, and event invitations. Wendy doesn't scroll through your inbox looking for things. She only processes emails that are relevant to helping you.

You can disconnect Gmail at any time via Settings, and Wendy will stop accessing it immediately.

No. Your conversations are private. The messages you send are processed by an AI (Anthropic's Claude) to generate Wendy's responses. No member of the Wendy team reads your conversations unless you contact us for support and specifically share a conversation with us to help diagnose a problem.

When you send a message to Wendy, that message (plus some context about you, like your reminders and preferences) is sent to Anthropic's API. Anthropic's AI model generates a response, which Wendy then shows you.

Think of it like this: Wendy is the service that remembers everything about you, and Anthropic is the engine that understands your question and helps craft the answer. Anthropic sees the content of your messages to generate a response, but does not store them beyond the API call.

No, not without your explicit permission. By default, Anthropic does not train on data sent through their API. We do not sell or license your data for AI training purposes.

If we ever wanted to use your data to improve Wendy specifically (for example, to train a custom version of the AI on things Wendy users ask about), we would ask for your opt-in consent first. That option does not currently exist.

We share your data only with the companies we need to run Wendy. Nobody else.

• Supabase stores your data in their database (hosted on AWS in Europe)
• Anthropic processes your messages to generate AI responses
• Stripe handles payment processing if you subscribe
• Google provides Calendar and Gmail access (only if you connect them)
• ElevenLabs generates Wendy's voice responses (text only, not your messages)
• Vercel and Railway host the Wendy web app and API

We don't sell your data. We don't share it with advertisers. We don't share it with data brokers. We don't use it to target you with ads anywhere.

Yes. A few specifics:

• All data is encrypted in transit (HTTPS/TLS)
• Google and OAuth tokens are encrypted at rest using AES-256-GCM before we store them
• Each user can only see their own data - this is enforced at the database level, not just in the app
• We log security-relevant actions (sign-ins, data access changes) for up to 12 months
• We never store card numbers or payment credentials

You can delete your account at any time via Settings. When you delete your account:

• All your messages, saves, reminders, and preferences are deleted within 30 days
• Your Google integration is disconnected and tokens are removed
• Your payment method token is removed from Stripe
• Billing records are retained for 7 years as required by UK tax law, but contain no conversation or usage data

You can also email hello@meetwendy.co.uk to request immediate deletion rather than waiting for the 30-day cycle.

Yes. Under UK data protection law you have the right to request a copy of everything we hold about you. Email hello@meetwendy.co.uk and we'll send you a structured export (JSON format) within one month. There's no charge for this.

Email us at hello@meetwendy.co.uk. We reply within 2 business days and we're happy to explain anything in more detail.