Privacy Policy

Effective October 18, 2026

Wrapped is an iPhone app that helps you put on tefillin every day. It's made by Jacob Rothenberg, an independent developer in Ontario, Canada ("Wrapped", "we", "us"). This policy explains what we collect, why, who we share it with, and the choices you have.

1. What we collect

Your account

When you sign in with Apple or Google, we receive your email address (or an Apple private relay address, if you choose Hide My Email), your name if you choose to share it, and an account ID.

Your practice and history

• Your settings: your custom (nusach), whether you live in Israel or outside it, whether you wear tefillin on Chol HaMoed, your time zone, and your display name.
• Your history: the days you wrapped, used a streak freeze or missed; your streaks, goals (including the optional note about why a goal matters to you), gems, streak freezes and giveaway entries.

Because this describes religious practice, we treat it as sensitive information and use it only to run the app for you.

Scan photos

When you scan, your photo is sent over an encrypted connection to our server, which passes it to OpenAI to check whether tefillin are being worn. We do not store the photo. We keep the result: pass or fail, whether the head and arm tefillin were visible, a confidence score, a one-sentence description of what the AI saw, and a tip for the next try. OpenAI processes the photo under its API terms: it does not use it to train its models, and it may keep it for up to 30 days to monitor for abuse before deleting it.

Prizes and gift shop orders

If you claim a giveaway prize or get an item from the gift shop, we collect your name, shipping address and, if you give it, a phone number for the courier. If a giveaway winner is under the age of majority, we collect their parent's or guardian's name instead, and send the prize to them. We use this only to send it, and delete the name, street address, postal code and phone number 90 days after it's sent. Wrapped has no purchases, so we never handle payment details.

Email preference

Whether you want emails from us. You can change this in the app's Settings.

What stays on your phone

• Location. Used only on your device to calculate sunrise, sunset, the times of the day and the direction to Jerusalem. To show your city's name, your iPhone looks it up using Apple's location services. We never receive your location.
• App lock. You choose the apps to lock in Apple's Screen Time picker. Wrapped only gets anonymous tokens for them, which stay on your device. We never learn which apps you picked.
• Reminders are scheduled on your phone.
• Camera. Used only for the live scan.

2. How we use it

• To run your account, streak, goals and history.
• To check scans and record your wraps.
• To apply streak freezes automatically on days you miss.
• To run the Shop: record giveaway entries, draw winners, and send prizes and gift shop items.
• To send emails about your account: a welcome, streak updates, and a note if you win a giveaway. You can turn these off in Settings (a win still shows in the app). Emails about a prize or order you've claimed or placed are always sent.
• To answer your support requests.
• To keep the service secure and prevent abuse, for example by limiting scans per day.

We do not use your information for advertising, sell it, or share it with data brokers. The app contains no analytics or advertising SDKs.

3. Who we share it with

We use these service providers to run Wrapped. They process information on our behalf:

• Supabase hosts our database and server.
• OpenAI checks scan photos.
• Resend sends our emails.
• Apple provides Sign in with Apple and app distribution. Apple's privacy policy applies to your use of its services.
• Google provides Google sign-in, if you use it. Google's privacy policy applies.
• Shipping carriers, and the charities that donate and send some prizes, receive the name, address and phone number needed to deliver a prize or gift shop item.

We may also disclose information when the law requires it. If Wrapped is ever transferred to a new owner, your information would be transferred with it and remain covered by this policy.

Our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for these transfers.

4. How long we keep it

We keep your information while you have an account. When you delete your account in the app (Today → Settings → Account → Delete account), we permanently delete your account and its data, including your history, scan results, goals, gems, freezes, giveaway entries and gift shop orders. If you signed in with Apple, we also revoke Wrapped's access to your Apple ID.

Copies in our providers' backups are removed as those backups expire.

5. Your choices and rights

• Delete your account at any time from the app.
• Turn off emails in the app's Settings.
• Turn camera, location, notifications and Screen Time access on or off in iOS Settings. The daily scan needs the camera.

Depending on where you live, including the European Union, the United Kingdom, California and Canada, you may have the right to access, correct, delete or receive a copy of your information, and to object to or restrict some processing. Email [email protected] and we'll respond within the time the law requires. You can also complain to your local data protection authority; in Canada, that's the Office of the Privacy Commissioner of Canada.

6. Children

Wrapped is not directed to children under 13, and we don't knowingly collect their information. If you believe a child under 13 has given us information, contact us and we'll delete it.

7. Security

We use encrypted connections, keep each account's data accessible only to that account, and store your sign-in securely in the iPhone Keychain. No system is perfectly secure, but we work to protect your information.

8. Changes

If we change this policy, we'll post the new version here and update the date above. For significant changes, we'll let you know in the app or by email.

9. Contact

Questions or requests: [email protected]