Account and connection information
Sign in with Apple provides a private account identifier. We store it with your display name, app preferences, friends, invitations, blocks and conversation status to operate your account.
Device information includes push-notification tokens, platform, operating-system version and app version. We use it to connect your devices and deliver invitations. Connection requests expose network information, such as IP addresses, to the services carrying them. Direct connections can also expose your network address to the other participant’s device.
We use transmission times and counters to calculate talk usage. When you make or restore an in-app purchase, we use account, product and transaction identifiers, purchase dates and verified purchase status to determine access. Apple handles payment; we do not receive your payment-card details.
Live audio and Morse
The microphone captures audio while you hold the talk control after it is ready. On supported Apple Watches, Double Tap can keep transmission on until you stop it. You can disable Double Tap in Settings.
Audio travels through our Cloudflare relay or a supported direct connection. Friend conversations still use cloud services to connect the participants. The service does not store speech audio or record conversations.
Relay connections are encrypted in transit. The relay processes audio in memory, so relay audio is not end-to-end encrypted. Morse text and symbols can appear in the app’s conversation transcript; technical diagnostics do not include that content.
Invitations and contact photos
Names you enter or select for invitations stay on the device that creates them. The service receives a generic label. Selected phone numbers go to the Messages composer, not to Wrist Relay servers. A contact label does not verify who opens the link; you confirm the accepting account before becoming friends.
Invitation labels are excluded from backup. They are cleared when you sign out, switch accounts or services, or the invitation leaves your pending list.
You can import a photo from a contact you select. You review it before it appears as a friend’s photo. Optional Contacts access lets the app refresh selected photos. Photos and address-book identifiers are not uploaded to our servers or shared with other people.
Photos are stored in a protected local cache excluded from backup. Your iPhone can send thumbnails to your paired Watch when both apps use the same account. You can remove photos or stop updates in Settings. Signing out clears the local cache. Removing or blocking a friend removes their phone photo; removal of the Watch copy waits for the device update.
Revoking Contacts access clears photos refreshed through that access when the app next checks. A photo you explicitly imported once does not need continuing Contacts access.
Diagnostics and support
Automatic diagnostics help find and fix faults. You can turn automatic sending off under Settings → Help & Support → Diagnostics, or send or export logs yourself.
Diagnostics include technical identifiers, device and app state, connection events, animation timing, counts and signal levels. They exclude speech recordings, Morse content, contact names and credentials. Device history is limited to seven days. Uploads use limited data, including cellular data, and may wait for connectivity or the next app launch.
If you contact support, we receive your email address, message and attachments. A safety report contains the accounts involved, a category, optional description and conversation identifier, and the report time. Do not include recordings, identity documents or unnecessary personal information.
Age and account safety
Wrist Relay is for people age 13 and older. Setup asks you to confirm your age eligibility; it does not independently verify your age or request a birthday or Apple age range. The app remembers your confirmation, and a paired Watch can receive it from the same-account iPhone.
We keep eligibility confirmations and records needed to apply and review account restrictions. If Apple sends a verified app-consent withdrawal, we retain the app receipt identifier and withdrawal or review dates to enforce it. Account setup does not require an app-download receipt.
If we learn that someone is under 13, we restrict access and arrange removal of improperly collected information, subject to legal preservation duties. Account deletion and support remain available. Contact support@wristrelay.com about a child’s information or an incorrect restriction.
Service providers
Cloudflare hosts the website, API, database and audio relay. Apple provides sign-in, push notifications, app distribution and purchase billing. Zoho hosts the support mailbox.
We use information to operate the service, resolve faults, manage purchases and respond to abuse or support requests. We do not sell personal information or use it for advertising.
The public website can use Cloudflare traffic measurements. Invitation and policy pages block analytics scripts. The invitation page does not read the invitation code in the URL fragment.
The usage and availability terms do not authorize additional personal-data collection.
How long information stays
Account information, preferences, friends and account-linked purchase records remain until account deletion. Authentication sessions and inactive device registrations expire after 90 days. Expired invitations are removed within 30 days of expiry.
Server diagnostic reports are kept for up to 30 days; routine diagnostic detail is cleared after seven days. Usage records and safety reports can remain for up to two years.
Completed age and consent review records are kept for 90 days. Unfinished deletion records remain until resolved. Minimal Apple consent-withdrawal records and purchase-notification identifiers can remain after account deletion to enforce withdrawals and prevent duplicate processing; consent records contain no birthday or conversation content.
Apple keeps its own billing records. Support email is separate from app account data; email support@wristrelay.com to request its removal, subject to required retention.
Your choices and deletion
You can change microphone, notification, Local Network and Contacts permissions in system Settings. Features that need a permission may stop working when it is off.
In the app, you can remove friends, block people, clear declined-invitation history, control diagnostics, sign out or delete your account.
Use Settings → Account → Delete account to remove your account and associated server data, except the limited records described above. Deleting the app or account does not cancel an Apple-billed subscription.
Changes and questions
We will update this page and its effective date when the policy changes. For privacy questions or requests, email support@wristrelay.com.