Privacy Policy for Willy

Last Updated: 2026-08-28

This Privacy Policy describes how Frostskull AB ("we", "our", or "us") collects, uses, and shares information in connection with Willy (the "App"), a private self-improvement application for iOS and Android. We know the App covers a sensitive, personal topic, and we've built it to collect as little as possible.

1. Data we collect

Account data

Creating an account requires only an email address, provided either directly (email/password) or through Google Sign-In or Sign in with Apple. We do not receive or store your Google or Apple account password.

Profile data

  • Name
  • Age

App usage data

  • Your onboarding quiz answers
  • Your assigned program and day-by-day exercise progress
  • Login, exercise, and no-porn streaks, and achievement/badge progress
  • Which articles in the educational library you've read

Subscription data

Your subscription status is managed through RevenueCat, which receives a customer identifier and purchase/renewal events to activate your entitlements. Payments are processed entirely by the Apple App Store or Google Play — we never receive or store your payment card details.

2. What we do not collect

The App does not access your location, camera, microphone, photo library, or contacts, and does not collect an advertising identifier. We do not use any analytics or tracking SDK of any kind.

3. Notifications

Reminder notifications are generated and scheduled locally on your device. There is no push notification service involved, so no device push token is collected or stored by us.

4. How we use data

  • To authenticate you and operate your account.
  • To assign and track your personalized program.
  • To maintain your streaks, achievements, and article read status.
  • To sync your progress across your devices via secure cloud backup.
  • To manage your subscription entitlements.

5. Third-party services and sub-processors

We rely on the following third-party services. Each processes data under its own privacy policy:

Supabase

Provides our backend database and authentication. Your account, profile, and app usage data is stored and synced through Supabase (hosted Postgres + Auth) so your progress survives a reinstall or device change.

RevenueCat

Manages in-app subscriptions; receives a customer identifier and purchase events to activate your subscription entitlements.

Google Sign-In & Sign in with Apple

Used to authenticate you if you choose to sign in with these providers.

Apple App Store & Google Play

Process all subscription payments and hold your billing and entitlement records.

That is the complete list of third parties involved in running the App. We do not sell your personal data. We may disclose information when required by law or valid legal process, and user data may be transferred as part of a merger, acquisition, or asset sale, subject to applicable legal protections.

6. Data stored on your device

The App caches your program and progress data locally in an on-device database so it remains available offline. This local cache is cleared when you delete your account or uninstall the App.

7. Data retention

  • Account and app usage data is retained for the life of your account and removed when your account is deleted (see Section 9).
  • Subscription and entitlement records are retained by RevenueCat and the App Store/Play Store according to their own policies.

8. Your choices & rights

  • Notifications: You can turn local reminders off in the App or your device settings at any time.
  • Account deletion: You can request full deletion of your account and associated data (see Section 9).
  • GDPR / CCPA rights: Depending on where you live, you may have the right to access, correct, export, or erase your personal data, and to object to or restrict certain processing. Contact us at the address below to exercise these rights.

9. Account and data deletion

You can delete your account at any time from Settings → Account → Delete Account in the App. This permanently removes your profile, program progress, streaks, and achievement data from Supabase and clears local data from your device. Deleting your account does not cancel an active subscription — see our Account Deletion page for details, or email us at info@frostskull.com.

10. Children's privacy

The App is intended for adult users aged 18 and older. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will take appropriate action.

11. International data transfers

Your data is processed and stored by the third-party providers listed above, which may operate infrastructure outside your country of residence. By using the App you consent to these transfers in accordance with this policy and the providers' respective terms.

12. Security

We apply industry-standard measures to protect your data, including access controls that scope data to your account. However, no method of electronic storage or transmission is 100% secure.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notice or an updated "Last Updated" date. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

14. Contact

For privacy questions, data requests, or concerns, contact us at: info@frostskull.com

Frostskull AB
Martingalgatan 8
18374 TÄBY
Sweden