Privacy Policy for Oakwyn
Effective date: August 7, 2026
Last updated: September 21, 2026
Who we are: Monkey Dev Labs LLC ("we," "us," "our"), the company behind Oakwyn (the "app").
Contact: support@oakwyn.app
This policy explains what information the app collects, why, how we store and protect it, and the choices you have. If anything here is unclear, use the contact address above.
Oakwyn has not been released yet. It is being tested only by our own internal team right now, with no external test, waitlist, or signup open to the public. We'll update this page when that changes. Some practices below are specific to that stage and are called out.
1. Who the app is for
The app is built for adults. It is not directed to children and is not intended for anyone under 18. We do not knowingly let children create accounts or use the app.
2. What we collect and why
We collect as little as we can. Here is what we collect, and why.
| What we collect | Example | Why we collect it |
|---|---|---|
| Account email | The email you sign up with, or, if you sign in with Apple, the email address Apple provides (a private relay address if you turn on Hide My Email) | To create and secure your account and to contact you about the alpha |
| Display name (optional) | A name you pick yourself. It does not have to be your real name and you can change it any time. If you never set one, we hold no name for you and a partner just sees a generic word | Shown to a matched partner, if you have one, so they know who they're paired with |
| Your goals and routines ("quests") | The habit or routine you're working on, in your own words | This is the core of the app, and it's your private content. See Section 4; it is treated as your most sensitive data |
| Quest category | A fixed label like "fitness" or "sleep" (a preset choice, not your words) | To organize the experience and understand, in a low-detail way, what kinds of goals people set |
| Game progress | Coins, chambers/floors, rank, and completion history | So the app works and your progress shows correctly |
| Partner matching and invites (only if you use the partner features) | A record that you asked to be matched, who you are or have been paired with and since when, your invite code, and the days you and a partner both showed up | To match you with a partner or a friend when you choose to, and to run the shared co-op game |
| Partner report or block record (only if you report or block a partner) | A record of who reported or blocked whom, and when. It holds no reason, no note, and no words you wrote | So the two of you are never matched again. That happens automatically and it is permanent; the block is the whole of what happens, so nobody is notified and nobody reads these records. It's deleted the moment either account is deleted |
| Usage analytics (optional, off by default) | Records that you opened the app, completed a quest, or dismissed a daily prompt, tagged with the date and a small set of counts and flags about what happened in the app, with nothing that links them back to your account, never the words you wrote | To measure whether the app actually helps people stick with their routine |
| TestFlight data (from Apple) | Crash logs, basic usage stats, and any feedback you send through TestFlight | Apple shares this with us automatically under Apple's own privacy terms, so we can fix bugs during the alpha |
| Sign-in records | The email address on your account, your IP address, and the device and app version, recorded each time you sign in or out | Created automatically when you sign in or out; they are part of keeping accounts secure |
What we do NOT collect: we do not collect your precise location, contacts, photos, health-app or fitness-sensor data, or advertising identifiers. The app itself uses no third-party advertising or cross-app tracking tools of any kind. This website (oakwyn.app, separate from the app) uses Cloudflare Web Analytics, which sets no cookies and no persistent identifier and is never used for advertising or shared with a data broker. The optional daily reminder lives entirely on your phone; no reminder data is sent to us.
Signing in with Apple. Alongside email and password, you can create an account using Sign in with Apple. We ask Apple for your email address and nothing else, not even your name. If you turn on Apple's Hide My Email, we receive a private relay address instead of your real one, and we never see your real address in that case.
3. Usage analytics, and what they never contain
Our usage analytics are first-party only. They are not shared with any advertising network or data broker. They are also optional and off by default: nothing is collected unless you turn them on in Settings.
Two things matter most here:
- Your quest text is never sent to analytics. The words you write for your goals and routines are never placed in the analytics records, not the title, not custom text, nothing you typed. The analytics records do not carry the quest's category either.
- The analytics records carry no account identifier. Each event is tagged with a date and a small set of counts and flags about what happened in the app. Your account ID, your email, and your display name are not in those records, and nothing connects an event back to your account. They do record your partner status at the time, meaning whether you were on your own or paired and how that pairing came about, but never who your partner is.
The counts record that something happened and when: for example the app was opened, a quest was added, or a quest was finished. We use them only to see whether Oakwyn helps people keep a routine and which parts get in the way. We do not sell them and we do not use them for ads.
The app does not show an App Tracking Transparency prompt; there is nothing to ask your permission for.
4. Your quests are private content
No one can see your quest text, not even us. It is encrypted on your device before it is saved and decrypted on your device when you open it, so the words you write never leave your device unencrypted. The key lives in your own Apple keychain, we never receive it, and without it what we store is unreadable.
If you ever lose access to that keychain, no one can recover the words of your past quests. Your account, your progress, your rank, your coins and your partner all survive.
Your goals and routines are the most sensitive thing the app holds. We treat them that way:
- Your quest text is never shown to any other user, including a matched partner (see Section 5).
- Your quest text is never placed in analytics (see Section 3).
The app is a general wellness and habit tool. It is not a medical or clinical service and is not a substitute for professional medical, mental health, or other professional advice.
5. Data sharing, the little we share, and with whom
We do not sell your data. We do not share it for advertising. We share only what is strictly needed to run the app:
- With a matched partner (paired participants only). If you agree to be matched with another participant, that partner can see your display name, the mark you have chosen to wear, whether you completed your quest (there is never a mark against a day you did not), and how far you've progressed in the game (for example your rank, and the zone and floor you've reached). They can also see facts about the pairing itself, such as when the two of you started and how many days you both showed up. Your partner never sees your quest content, not the words, not the category detail, nothing you typed. They never see your email address. They also see how many of today's quests you've completed so far, as a number only, never which ones. Nothing else about your account is shown to them that you did not put on your own card by choosing it. Participants who are not matched share nothing with another user.
- With service providers. Third-party providers store data and send account email on our behalf as service providers and do not use it for their own purposes.
- When required by law. We may disclose information if we are legally required to, for example in response to a valid legal request.
Reporting or blocking a partner is never disclosed to that partner. If you report or block someone you have been matched with, we do not tell them, and no notification, message, or alert reaches them. They have no way to look up or otherwise discover that a report or block exists. If the two of you were still matched, the pairing ends the same way it would if either of you had moved on to a new match; if you had already gone your separate ways, nothing on their side changes at all. Either way, nothing singles them out and nothing points back to you.
If the company is ever sold. Monkey Dev Labs LLC could one day be sold, merged into another company, or have this app taken over by someone else. If that happens, the data described on this page would transfer to the new owner along with the app, because the app cannot run without it. That is not us selling your data, and we will not use a sale as a way around the promise at the top of this section. We would tell participants before their data moves, the same way we promise for a wind-down in Section 6, and you can delete your account yourself at any time before then. We would also require any new owner to keep to this policy for the data they receive until they give you notice of a different one.
6. How long we keep data, and deletion
- During the alpha, we keep your account, quests, and analytics only as long as needed to run and learn from the test.
- You can delete your account yourself, in the app, at any time. Tap the Account pill at the top of the Home screen to open Settings, then tap Account, then Delete account. Deleting your account immediately and permanently removes your account, your quests, and your progress from our active systems; this cannot be undone. The usage counts described in Section 3 are not tied to your account. They carry no name, no email, and no account identifier, so there is nothing in them linked to you to access or delete. Copies that remain briefly in our routine system backups age out automatically on our normal backup schedule. What deleting does not reach. Signing in and out is recorded in a log of account activity. Those records include the email address on your account, your IP address, and the device and app version you signed in from, and deleting your account does not clear them. We are still confirming how long those records are kept, and we would rather tell you that than guess; when we know, we will say so here. If you can't access the app to delete it yourself, or have any deletion questions, use the contact address at the bottom of this page.
- If the alpha or the app ever winds down, we will tell participants directly and give you a chance to delete your data yourself before we take any further action.
7. How we protect data
- Your data is protected so that one user cannot read another user's private data.
- Access to alpha data is limited to the people running the alpha and to the database platform that hosts it. Administrative-level access on that platform can technically reach the same data our own team can — that is true of any hosted database service, not something particular to us.
No system is perfectly secure, and we can't guarantee absolute security, but we work to protect your information and to collect as little as possible. If we ever experience a security incident that affects your data, we will notify affected users.
8. Children
We do not knowingly collect personal information from children. If we learn that we have, we will delete it promptly.
9. Your choices and rights
You can:
- Access the information we hold about you, using the contact address at the bottom of this page.
- Correct information that's wrong.
- Delete your account, your quests, and your progress (Section 6).
- Leave the alpha at any time, with no friction and no penalty.
Depending on where you live, you may have additional legal privacy rights. Contact us and we'll do our best to help.
10. Where data is handled
The app is operated from Texas, United States, and the alpha is intended for participants located in the United States. We are not currently set up to support users in the EU or UK.
11. Changes to this policy
This page has two dates for two different reasons. If we correct something we described imprecisely, but what we actually do with your data hasn't changed, we update "Last updated" only, and the terms you're held to stay the same. If we change what we actually do with your data, we update "Effective date," and for a change that matters during the alpha we tell participants directly (for example, by email). Continued use after an "Effective date" update means you accept the updated policy.
12. Contact
Questions, requests, or data deletion: support@oakwyn.app.
Privacy Officer: support@oakwyn.app.
Developer: Monkey Dev Labs LLC.