Privacy Centre

• Account: email, password (stored scrambled by Supabase), name, date of birth. To sign you in, and to apply the rules for students under 18. Guidance sees only an age group, never your date of birth.
• Profile: results, tests, study preferences, budget and funding. So guidance, shortlists and plans fit your situation without asking again.
• Conversations: your messages, the answers, and AI-written summaries of long chats. So a conversation can continue where you left off.
• Programmes and plans: saved programmes, shortlists, application plans and checklist progress. To keep your research and next steps in one place.
• Documents you upload: score reports, marksheets, certificates. To keep them in one place and compare a score report with the score you entered. Stored privately, never sent to an AI service.
• Records: consents (including a parent or guardian's for under-18s), profile change history, security events, guidance usage counts. To run the service safely, enforce fair use and show what you agreed to.

Only the cookies needed to keep you signed in are used. There is no analytics or advertising tracking on Wingmate today.

• Confirmed profile facts (results, tests, details) and saved preferences (countries, subjects, intake, budget) are what Wingmate treats as true about you. You enter or approve them.
• Conversation history is kept so you can continue a chat. It is never treated as confirmed fact.
• AI-written summaries of long conversations keep requests short. They are not profile facts either.
• If you mention something new in a chat, such as a different budget or intake, it becomes a suggestion. It replaces your saved value only if you accept it.

• Website: messages are stored in your account in our database. The guidance chat is opening soon; when it does, messages will be sent to our AI provider to write the answer.
• WhatsApp: not connected yet. Before it opens, this page will explain how Meta's WhatsApp service handles messages.
• Instagram: not connected yet. Before it opens, this page will explain how Meta's Instagram service handles messages.
• Wingmate never matches you across channels by name. Connecting a channel will require you to prove it's yours, and you'll be able to disconnect it here.

Messages are encrypted in transit (HTTPS) between your browser and our services. We do not claim end-to-end encryption: our servers and AI provider must read a message to answer it.

• Supabase: database and sign-in. Your account, profile, conversations, plans, uploaded documents and consent records. Location: India.
• Vercel: hosts the website and runs its server code. Requests as they pass through; short-lived technical logs (we log error codes, not what you type). Location: Server code runs in India; pages are delivered through Vercel's global network.
• Resend: sends account emails (confirmation and password reset). Your email address and the email content. Location: Japan.
• Anthropic: the ai model that writes guidance answers. Your question, recent conversation and only the parts of your profile the answer needs. Never your name, email, phone, city or exact date of birth. Location: United States. Not active yet.

Your database is hosted in India, but some providers above process data outside India, so we don't claim your data stays only in India.

• Wingmate does not use your profile, messages or documents to train AI models.
• When the guidance chat is on, your question and the relevant parts of your profile are sent to Anthropic to write the answer. How long Anthropic keeps API data is set by its commercial terms.
• AI answers can be wrong. Important claims link to the official source so you can check them.

• Profile, conversations, programmes and plans: while your account exists, or until you remove them.
• When you delete your account: removed from our live database immediately. A minimal security record (that an account was deleted, and when) is kept without your details.
• Backups and provider logs: copies can remain until they expire on the provider's normal cycle. We are confirming the exact periods and will publish them here before launch.

• See what Wingmate remembers, and remove single facts, preferences, results or tests.
• Clear your conversation history, saved programmes, shortlists or application plans from the same page.
• Export your data as a JSON file (you'll need to be signed in).
• Delete your account: you confirm with your password, every session is signed out, and your data is removed from our live database.
• Disconnect WhatsApp or Instagram: there is nothing to disconnect yet; once channels can be connected, you'll do it in Account settings.

You must be at least 13. If you are under 18, a parent or guardian must agree to you using Wingmate, and we record their name, email and agreement. We ask for your date of birth only to apply these rules.

For privacy questions and requests, send a message from the Help page while signed in. It goes to the Wingmate team, and you can see what you've sent there.