Privacy Policy

Woggli is published by Teddy Code LLC, a limited liability company registered in the State of New Mexico, United States. Teddy Code LLC is the controller of the personal data described here. For any question about this policy, or to exercise any of the rights in section 12, write to contact@teddy-code.com.

To create an account we ask for an email address, a password, a username and your date of birth. If you sign up with Google instead, we receive your email address and basic profile information from Google, and no password ever reaches us.

Your profile can also hold anything else you choose to fill in:

• a display name, a photo, a cover image and a short bio;
• the country you are in and the scout country, group and years you want to show;
• the languages you speak and the colours of your neckerchief;
• contact details you want other scouts to have, such as an email address, a phone number or an Instagram or Facebook handle.

Everything in that list is optional. Section 5 explains who can see it, which is the part that matters most.

Using the app creates records we have to store for it to work at all:

• the posts you publish, their photos, captions and hashtags;
• your likes, comments, saved posts and the collections you organise;
• who you follow, who follows you, and the friendships that follow from both;
• the messages you send in chat, with the time they were sent and read;
• the shipments you open, including the carrier, tracking number, dates, the pieces included and any document you attach to them;
• reports you file and blocks you apply;
• the moment you accepted these documents and the community rules;
• a push notification token, if you allow notifications, so we can reach your device.

We also keep an internal, append-only log of significant actions (a shipment changing state, a moderation decision, an account sanction). It exists so a dispute between two scouts can be resolved against a record instead of against memory.

Some things are worth stating as absences, because you cannot verify them from the outside:

• We never read your device location. Woggli has no location permission and no geolocation code. The "Near me" filter works purely from the country you chose to put on your profile.
• We do not use analytics, crash reporting or attribution SDKs, so nothing measures how you move through the app.
• We do not show advertising and we do not have advertising identifiers.
• We do not read your contacts, your photo library beyond the images you pick, your calendar, your microphone or your call history.
• We do not sell your personal data, and we do not share it with data brokers or advertisers. There is no category of data we sell or share for behavioural advertising under US state privacy laws.

Woggli is a public community. Every profile is public: there is no private mode, and that is a deliberate product decision, not a setting we forgot. Anyone using the app can see your username, display name, photo, bio, country, scout details, the posts you publish and your follower and friend counts.

Contact details are the exception that you control. An email address, phone number or social handle only appears on your profile if you fill it in, and you can remove it at any moment from Edit Profile.

Treat anything you put on a public profile as published. Do not put information there that you would not be comfortable with a stranger reading, and be especially careful with details that identify where a young scout lives or meets.

Photos you upload are stored in Teddy Code LLC private storage, not in a public bucket. The app serves them through signed links that expire, and the storage path is scoped to your own account, which is what keeps one scout from reaching another scout’s files directly.

A signed link that has already been issued can still be opened by whoever holds it until it expires, so a photo that is visible in the app should be treated as a photo that can be copied. Strip anything from an image you do not want shared: an address on a document, a face you have no permission to publish, a badge that identifies a minor’s troop and meeting place.

Chat in Woggli is not end-to-end encrypted. Messages travel over an encrypted connection and are stored in our database so both sides can read the conversation on any device.

We do not read your conversations to profile you or to sell anything. We access message content only in narrow cases: when you report a message, when we investigate a shipment dispute you asked us to look at, or when the law obliges us to.

When two scouts agree on an exchange, Woggli records what was sent, by which carrier, with which tracking number and on which dates. Both scouts see the same record, which is the point: it is the shared, checkable version of the promise.

Woggli never processes payments between users and never asks for card or bank details. Postal addresses are not a field in Woggli: if you exchange an address with another scout, that happens in chat, between the two of you, and it lives in the conversation like any other message.

Where the GDPR or the UK GDPR applies to you, our legal bases are these:

• Performance of a contract, for everything needed to give you the account and the features you asked for: profile, feed, chat, shipments.
• Legitimate interests, for keeping the community safe and the service working: moderation, reports, blocks, sanctions, the audit log, and preventing abuse.
• Consent, for optional things you switch on yourself: push notifications, and any contact detail you choose to publish. You can withdraw it by turning the notification off or clearing the field.
• Legal obligation, when we have to keep or hand over information to comply with the law.

We keep the list of companies involved as short as we can. Today it is:

• Supabase, which hosts the database, authentication, file storage and the functions behind the app;
• Google, if and only if you choose to sign in with Google;
• Expo, which delivers push notifications to your device if you allow them;
• Amazon Web Services, as the underlying infrastructure our hosting runs on.

These are processors acting on our instructions, not partners we sell data to. We may also disclose information where the law requires it, or where it is necessary to protect someone — in particular a minor — from serious harm.

Our servers are located in the United States. If you use Woggli from the European Economic Area, the United Kingdom or elsewhere, your information is transferred there and processed under the Standard Contractual Clauses adopted by the European Commission, which our hosting providers incorporate into their terms.

We keep your account data for as long as your account exists. When an account is deleted, we remove your profile, your posts and their photos. We keep, for a limited period, the minimum needed to close open matters: records of reports and sanctions so a banned account cannot simply come back, and shipment records that the other scout still has an interest in. Messages you sent stay visible to the person who received them, the way a letter does.

Depending on where you live, you have some or all of these rights: to know what we hold about you, to get a copy of it, to correct it, to have it deleted, to restrict or object to how we use it, and to complain to your data protection authority. California residents additionally have the right not to be discriminated against for exercising them.

Most of these you can exercise yourself and immediately: Edit Profile corrects or clears anything on your profile, and you can delete your own posts, comments and photos at any time. For anything else, write to contact@teddy-code.com from the address on your account and we will answer within 30 days.

You can delete your account yourself, from the app: Settings, Danger zone, Delete my account. You confirm by typing your own username, and it happens immediately — there is no waiting period and nothing to request from us.

Deleting removes your profile, your posts and their photos, your comments, your likes, your saved pieces, your collections and everyone you follow, and it closes your login for good.

Two things survive, for the reasons given in section 11. The shipments you took part in stay, because the scout on the other side has a legitimate interest in that record; your name disappears from them and is replaced by a deleted account. And messages you already sent stay in the other person’s conversation, the way a letter does. If you have an exchange in progress, tell the other scout before you delete: it closes the conversation you were using to arrange it.

If you would rather we did it for you, write to contact@teddy-code.com from the address on your account and we will, within 30 days.

Woggli is not for children under 13, and we do not knowingly collect personal data from them. If you are between 13 and the age of digital consent where you live (16 in several European countries), use Woggli with the knowledge of a parent, guardian or scout leader.

If you believe a child under 13 has an account, or that any scout is being put at risk on Woggli, use the in-app report button or write to contact@teddy-code.com and we will act quickly. Deliberately endangering a minor is the one thing that gets an account permanently banned on the first offence and referred to the authorities with the evidence.

If we change something material — a new kind of data, a new company handling it, a new purpose — we update the effective date at the top and tell you in the app before the change takes effect. Minor corrections of wording we simply publish.

Teddy Code LLC, New Mexico, United States. Questions, requests and complaints about this policy: contact@teddy-code.com.