WiseBar Privacy Policy
Effective Date: October 17, 2026
Version: v2.4
This legal document is provided in English.
Last Updated: October 17, 2026
Welcome to WiseBar (the "Product").
WiseBar is operated by YOUFUN, LLC. (YOUFUN, we, us). This policy explains the information processed by WiseBar and your choices.
Optional permissions and connections are your choice. Health access requires separate authorization; using WiseBar alone does not authorize it.
1. Scope
WiseBar for iPhone, iPad and Apple Watch (the “Apple apps”) is offered by YOUFUN, LLC. Purchases in the Apple apps are made only through Apple In-App Purchase. The Apple apps currently do not include AI features or web-page reading features. Sections 1 to 14 of this Privacy Policy apply to:
- The WiseBar iPhone and iPad apps (iOS/iPadOS) and Apple Watch app (watchOS);
- The WiseBar account services, customer support, and backend APIs at https://api.tutuo.ai used by those apps.
The WiseBar browser extension and website are a separate product. Section 15 sets out additional information that applies only to them; Section 15 does not apply to the iPhone, iPad and Apple Watch apps.
This Privacy Policy does not apply to third-party websites/services/extensions. When you access third-party services through WiseBar, their privacy policies apply.
2. Our Principles
We process information based on the following principles:
- Data minimization: collect only what is necessary;
- Purpose limitation: use data only for purposes described here and reasonably expected by you;
- Security: apply reasonable technical and organizational safeguards;
- Transparency & control: provide clear settings and choices whenever possible.
3. Information We Collect
Information depends on the features you use and the permissions and connections you authorize.
3.1 Information you provide
Account and sign-in
Email, name or username, optional phone number, and account preferences. You can sign in with email and password, Sign in with Apple, Google or Microsoft. For Google or Microsoft sign-in, we receive the account identifier and profile information returned by the provider, such as name, email and profile image where supplied. With Sign in with Apple, we receive a stable Apple user identifier, the email address Apple shares (which may be a private relay address) and your name if you choose to share it. We do not receive your provider password, including your Apple ID password. Section 4 explains what Google user data WiseBar accesses and how it is used.
Your content
Notes, timeline activities, schedule entries, tasks, and feedback you submit.
Purchases (WiseBar Pro)
WiseBar Pro is purchased through Apple In-App Purchase. To bind a purchase to your WiseBar account, the app sends Apple an account token with the purchase. Our server then receives from Apple: transaction and original transaction identifiers, the product purchased, purchase and expiry dates, price and currency, storefront (App Store country or region) and renewal status. This information is linked to your account. We use it to provide and verify WiseBar Pro, prevent fraud and handle refunds and support. We keep it while your account exists and then delete it as described in Section 6.1. Payment card details are handled by Apple and are never received by YOUFUN.
3.2 Information collected automatically
Service records
Data export requests record an IP address and user-agent string.
Device storage
The apps keep settings and cached content on your device; timeline and health information may also be cached on a paired Apple Watch.
Advertising and tracking
The Apple apps do not include third-party advertising or analytics SDKs and do not track you across other companies’ apps or websites for advertising.
3.3 Apple Health
Apple Health (HealthKit): WiseBar asks only for permission to read Sleep and Workouts. After you grant permission, WiseBar reads sleep and workout records, including timestamps, sleep categories, workout type, duration, source, and available energy or distance values. Access is read-only: WiseBar never writes to Apple Health. Imported records are uploaded to your WiseBar account to build your timeline and may be displayed on your paired watch. You can revoke access in iOS Settings > Health (on some versions, Settings > Apps > Health), or in the Health app’s app permissions. Revoking access stops future reads; it does not delete records already imported into WiseBar. We do not sell HealthKit data or use it for advertising or marketing. Apart from processing needed to host your WiseBar account, we do not share imported HealthKit records with another service. The WiseBar Apple apps do not request microphone, speech recognition or location permission.
4. Google user data
This section states what Google user data WiseBar accesses and how WiseBar uses it. WiseBar accesses Google user data only if you sign in with Google, or if you connect Google Calendar or Google Tasks in WiseBar (Google Calendar and Google Tasks sync is a WiseBar Pro feature). If you do neither, WiseBar does not access your Google user data.
4.1 Google user data WiseBar accesses
Google Sign-In (scopes: openid, email, profile)
Your Google account ID, email address, name and profile picture. WiseBar uses them only to create your WiseBar account and sign you in.
Google Calendar (scope: https://www.googleapis.com/auth/calendar)
Your calendar list and your calendar events: title, description, location, start and end time, all-day flag, recurrence and event IDs. WiseBar does not use event attendees.
Google Tasks (scope: https://www.googleapis.com/auth/tasks)
Your task lists and tasks: title, notes, due date, completion status and task IDs.
4.2 How WiseBar uses Google user data
WiseBar uses your Google Calendar and Google Tasks data only to show your Google events and tasks on your WiseBar timeline and to keep them in two-way sync. When you create, edit, complete or delete an event or todo in WiseBar, WiseBar makes the same change in Google. Changes you make in Google appear in WiseBar. WiseBar uses Google Sign-In data only to create your WiseBar account and sign you in. WiseBar uses Google user data only to provide and improve these user-facing features, and for no other purpose.
4.3 Storage and security
Synced events and tasks are stored in your WiseBar account on our servers (Amazon Web Services, United States). Google OAuth tokens are stored encrypted. All transfers of Google user data use TLS encryption.
4.4 Sharing
We do not sell Google user data. We do not share Google user data with third parties, except with our hosting and infrastructure providers as needed to run the service, or when required by law. Google user data is never used for advertising.
4.5 Human access
No one at WiseBar reads your Google user data, except with your explicit consent for support, for security investigations, or to comply with law.
4.6 AI and machine learning
WiseBar does not use Google user data, including data from Google Workspace APIs, to develop, improve or train generalized or non-personalized AI and/or ML models.
4.7 Limited Use
WiseBar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
4.8 Retention, deletion and your control
You can disconnect Google at any time in WiseBar at Settings > Connections > More Connections. WiseBar then deletes the stored Google tokens and stops syncing. Events and tasks that were already synced stay in your WiseBar account until you delete them or delete your account. Deleting your WiseBar account (Settings > Account > Delete Account) deletes all data we store for your account, including synced Google data; backup copies expire as described in Section 6.1. You can also revoke WiseBar's access to your Google account at any time at https://myaccount.google.com/permissions.
5. How We Use Information
We use information to:
- •Provide notes, timeline, calendar/tasks and synchronization;
- •Authenticate your account and save your preferences;
- •Display imported sleep and workouts in your timeline;
- •Provide and verify WiseBar Pro and manage subscription status;
- •Respond to support requests and maintain service security;
- •Carry out the optional connections you authorize (for Google user data, see Section 4).
If we need to use information for purposes not described here, we will notify you in advance and obtain consent where required.
6. Storage and Security
6.1 Where and how long we store data
Our infrastructure is configured for Amazon Web Services (AWS), us-west-1, in the United States. Your information may be transferred to and processed in the United States, outside your country of residence.
Retention (high-level):
- Account content, including imported health records, is stored to provide your account history until deleted. Revoking a device permission alone does not erase uploaded copies.
- You can delete your account in the iPhone or iPad app at Settings > Account > Delete Account, or request deletion by emailing privacy@tutuo.ai (see Section 9). Any legally required retention of billing or security records must be limited to the applicable purpose.
- When your account is deleted, its data is deleted from the production database. Copies may remain in encrypted database backups for up to 30 days (automated backups are kept for 7 days; safety snapshots taken before maintenance are deleted within 30 days) and then expire. Content you delete individually is removed in the same way.
6.2 Security measures
We apply reasonable safeguards, such as:
- HTTPS for the production API;
- Authenticated access and user-specific data queries;
- Device credential storage includes Apple Keychain support.
No system is 100% secure. If a security incident occurs, we will take remediation measures and notify you and regulators where required by law.
7. Sharing, Transfers, and Disclosure
We do not sell your personal information. We only share it in the following cases:
7.1 Service providers (processors)
Depending on features you use, we may use:
- AWS hosts WiseBar’s backend data, including records imported from Apple Health.
- Apple (Sign in with Apple), Google and Microsoft provide sign-in; Google Calendar and Tasks process information when you connect those services (see Section 4).
- Apple processes WiseBar Pro purchases through In-App Purchase.
HealthKit information is subject to the specific limits in Section 3.3. Provider availability and optional connections depend on configuration and your choices.
7.2 Legal and security reasons
We may disclose information to comply with law/court orders/regulatory requests, to protect rights and safety, or to investigate fraud/abuse/attacks.
7.3 Merger, acquisition, or asset transfer
If a merger/acquisition/asset transfer occurs, we may transfer relevant information. The successor must continue to be bound by this policy; if material changes occur, we will notify you and obtain consent where required.
8. Limits on Human Access to User Content
We do not allow personnel to proactively access your content (for example, the notes, tasks and timeline entries in your account) except when:
- You request support involving particular content;
- Access is necessary to investigate security incidents or abuse;
- Access is required by law.
9. Your Rights and Choices
Subject to applicable law, you may request access, correction, export or deletion of your personal information, withdraw consent, restrict or object to processing, and complain to your local data-protection authority. To delete your account in the iPhone or iPad app, go to Settings > Account > Delete Account. This immediately deletes your account data from our servers, including associated health and timeline records, and revokes the Google, Microsoft and Apple authorizations connected to your account. For Sign in with Apple, the app asks you to re-authorize with Apple during deletion so WiseBar can revoke its Apple token; if revocation cannot be completed, the app tells you how to stop using Apple sign-in for WiseBar in iPhone Settings. Some third-party cleanup can complete shortly afterwards, and backup copies expire as described in Section 6.1. If you do not have the app, email privacy@tutuo.ai to request deletion. You can also contact us for a copy/export of your data. Export controls may be available in product settings depending on the release. Uninstalling the app, withdrawing Health permission or deleting your account does not cancel a WiseBar Pro subscription; cancel it in your Apple Account settings (Settings > [your name] > Subscriptions).
Privacy and deletion requests: privacy@tutuo.ai. Support: support@tutuo.ai.
10. Cross-Border Transfers (if applicable)
WiseBar’s AWS region is us-west-1 (United States). Connected-service providers may process data in other countries under their own arrangements. Applicable data-protection rights continue to apply. Contact privacy@tutuo.ai for information about transfer safeguards.
11. Children's Privacy
WiseBar is not intended for children under 13 (or other age as required by local law). If we learn we have collected personal information from a minor, we will delete or anonymize it promptly.
12. Third-Party Links and Services
WiseBar may include links/integrations with third-party services (such as sign-in, Apple In-App Purchase, and Google Calendar and Google Tasks). Those third parties process information under their own policies; we recommend reviewing them.
13. Updates to This Policy
We may update this policy. Material changes will be communicated by reasonable means, and we will seek fresh consent where required.
14. Contact Us
Operator: YOUFUN, LLC. (WiseBar team)
Privacy email: privacy@tutuo.ai
Support email: support@tutuo.ai
Contact: https://www.tutuo.ai/en/contact/
15. WiseBar browser extension and website (separate product — does not apply to the iPhone, iPad and Apple Watch apps)
This section applies only to the WiseBar Chrome extension and to features offered on the WiseBar website, where available. It does not apply to the WiseBar apps for iPhone, iPad and Apple Watch, which do not include these features. Sections 1 to 14 also apply to the extension and website, together with the additional information below.
Additional content you provide
In the extension, your content may also include highlights, annotations, page links, and AI prompts and conversations.
Pages and annotations
The extension processes page information for the reading, annotation and AI features you use. Page URLs, titles, selected text, highlights and notes help organize your reading content.
AI requests
When you use AI, your prompts and relevant context, including selected page content or transcripts you submit, are sent through WiseBar to the configured AI service to generate a response. WiseBar also stores AI query and conversation records. We record AI usage for account limits and usage accounting.
AI service providers
AI services supported by WiseBar include OpenAI, Anthropic (Claude), and configured custom endpoints. The service used depends on your model/account configuration. Requests carry prompts and relevant context to generate responses. We make no promise here about a provider’s training or retention practices.
Browsing history and tracking
We do not collect or sell your browsing history for advertising purposes. Some features (e.g., "History/Timeline") may store visited page metadata (URL/title) locally; whether it is synced depends on your login/sync settings. We aim to use privacy-friendly defaults (for example, new users have browsing tracking disabled by default).
Extension permissions
The extension requests broad site access (e.g., "all sites") so it can work on the pages you choose to use it on. We do not use this permission to build an advertising profile or sell browsing history; we process page data only as needed to provide the features you trigger.
Billing (extension and web)
Where web or extension billing is offered, payments are processed by Stripe and we receive subscription and transaction identifiers and status. Stripe is not used in the Apple apps. Payment card details are handled by the payment processor and are not received by YOUFUN.
Uses, human access and transfers
For the extension and website, we also use information to provide reading, annotation and requested AI responses, and to account for AI usage. The limits on human access in Section 8 also cover annotated page content and AI inputs. AI providers may process data in other countries under their own arrangements.