1. Who we are
Winka is a desktop reminder application operated by JULIA DANIELE CRUZ AUGUSTO, an Australian sole trader, ABN 16 949 337 258, trading as Norange.
In this Privacy Policy, “Winka”, “we”, “us” and “our” refer to that operator.
This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal information when you use the Winka application, website, account services, billing features, support channels and related services.
For privacy enquiries or requests, contact:
2. Scope
This Privacy Policy applies to personal information processed through:
- the Winka desktop application;
- winkareminder.com and related Winka web pages;
- Winka accounts and authentication;
- cloud synchronization;
- subscription and billing services;
- transactional email;
- support communications;
- software-update infrastructure;
- optional website analytics where enabled.
This policy does not apply to third-party websites or services that you choose to access independently from Winka.
3. Age requirement
Winka is intended for people aged 18 years and over.
Winka is a general-purpose productivity application and is not directed to children.
By creating or using a Winka account, you confirm that you are at least 18 years old.
Winka does not currently require users to submit a date of birth or government identification as part of ordinary registration, and we do not claim to operate a comprehensive age-verification system.
If we become aware that an account belongs to a person who does not meet Winka’s minimum age requirement, we may restrict or close the account and take appropriate steps concerning the associated information.
4. Information we collect
Depending on how you use Winka, we may process the following categories of information.
Account information
This may include:
- name;
- email address;
- account identifier;
- account creation and update timestamps;
- verification status;
- account, plan and trial information;
- locale or country-related information where available.
Authentication systems may also process technical session information such as IP addresses, user agents, sign-in events and security metadata.
Reminder information
Winka processes the information you choose to enter into reminders, which may include:
- titles;
- notes;
- dates and times;
- recurrence settings;
- categories and tags;
- priority or status;
- reminder history;
- snooze and reschedule information;
- other reminder-related settings.
Because this information is entered by you, reminder content may contain personal or sensitive information.
Winka does not require you to place sensitive health, financial, legal or similar information into reminders.
Images
If you attach an image through the Winka desktop application, Winka may create a processed copy for use with your reminder.
The normal desktop image-processing flow converts supported images to WebP, limits image dimensions and removes certain embedded metadata from the processed copy.
Your original source file is not intentionally modified by that processing.
Processed reminder images may be stored locally and synchronized to Winka’s private cloud storage.
Billing information
If you purchase or manage a paid subscription, we may process information such as:
- Stripe customer identifiers;
- subscription identifiers;
- selected plan;
- billing interval;
- currency;
- subscription status;
- renewal or cancellation information;
- related payment-event metadata.
Payment-card details are entered into Stripe’s payment interface rather than a Winka-hosted card form.
Winka stores billing and subscription metadata, but does not store full payment-card numbers or CVC values.
Technical information
We may process technical information necessary to operate, secure and maintain Winka, including:
- IP address;
- browser or application user agent;
- application version;
- request and response metadata;
- error information;
- authentication/session metadata;
- internal or pseudonymous identifiers;
- software-update request information.
The desktop application uses a persistent installation identifier that is sent with software-update requests.
Website hosting and pricing localisation
Hostinger hosts the Winka website and processes technical request information. Observed access logs include timestamps, IP addresses, requested paths and query strings, device or browser information, country, response sizes and response times.
For anonymous pricing localisation, Winka may send your public IP address from its server to IPInfo and use the returned country code. The pricing service does not itself store visitor IP addresses; hosting and provider logs are separate.
Support and feedback
If you email support@winkareminder.com, we process your email address and the correspondence you choose to send. The website does not currently collect or store support form submissions.
Winka uses Tally for external feedback forms. If you submit feedback through those forms, Tally processes the information you provide.
5. Information stored on your device
Winka is a desktop application and stores information locally so that reminders and related functionality can operate reliably.
Local information may include:
- reminders;
- reminder history;
- categories;
- preferences;
- synchronization queues;
- processed images;
- widget state;
- account-related application state.
Most reminder content stored locally is not encrypted by Winka at the application level.
Selected desktop authentication and access credentials use operating-system-backed protection where supported. This does not encrypt the complete local reminder database, image folder or logs.
Winka does not claim that reminder content is end-to-end encrypted.
Local backup, temporary or recovery files may also exist as part of normal application operation.
6. Cloud synchronization
When Winka synchronization is used, information may also be stored in Winka’s cloud infrastructure.
This may include:
- reminder content;
- schedules;
- categories and tags;
- recurrence information;
- reminder events and history;
- reminder images;
- account and access information.
Local and cloud copies may exist at the same time.
Synchronizing information to the cloud does not necessarily remove the corresponding information from your device.
Winka’s cloud systems use authentication and access controls intended to restrict ordinary users to their own account information.
However, Winka reminder content is not end-to-end encrypted. Authorised personnel or service providers may technically be able to access stored information where reasonably necessary for security, support, maintenance, legal compliance or service operation.
7. How we use information
We may use personal information to:
- create and manage Winka accounts;
- authenticate users;
- verify email addresses;
- provide reminders and synchronization;
- store and retrieve reminder images;
- provide plan and subscription functionality;
- process or manage billing;
- provide customer support;
- send service-related communications;
- detect abuse, fraud or security issues;
- diagnose technical problems;
- operate software updates;
- maintain and improve service reliability;
- comply with legal obligations;
- establish, exercise or defend legal rights.
Winka does not currently use reminder content for targeted advertising or advertising profiling.
8. Legal bases where GDPR or UK GDPR applies
Where applicable data-protection law requires a legal basis for processing, Winka may rely on:
Contract — where processing is necessary to create your account and provide Winka’s services.
Legitimate interests — where processing is reasonably necessary to secure, operate, troubleshoot or improve Winka, provided those interests are not overridden by your rights.
Consent — for optional activities where applicable law requires consent, such as certain analytics technologies.
Legal obligations — where information must be processed or retained to comply with tax, financial, regulatory, fraud-prevention or other legal requirements.
9. Cookies, local storage and analytics
The Winka website manages authentication and session credentials through HttpOnly cookies, which browser scripts cannot read. Essential session cookies are separate from optional analytics.
Browser local storage holds preferences such as locale and analytics-consent status.
Winka uses optional Google Analytics to understand website usage and improve the service.
Website-controlled Google Analytics loads only after you consent and only on https://winkareminder.com. It is disabled on the staging website. Advertising signals and advertising consent remain disabled.
Winka does not intentionally send account identifiers, names, email addresses, passwords, reminder content or verification tokens to Google Analytics. Account and email-verification pages are excluded from analytics.
Third-party analytics services may process technical information such as browser information, device information, referrer information and IP-derived data depending on their configuration.
10. Software updates
The Winka desktop application may automatically check whether a newer version of the software is available.
Update infrastructure may receive information such as:
- IP address;
- user agent;
- Winka version;
- requested release information;
- a random persistent installation identifier.
Update infrastructure is separate from your Winka reminder content and account data.
11. Service providers
Winka uses third-party service providers to operate parts of the service.
These may include:
Supabase — authentication, database, cloud storage and backend infrastructure.
Hostinger — website hosting, access logs and backups.
IPInfo — country lookup for anonymous pricing localisation.
Resend — certain transactional emails, including Winka email-verification messages.
Stripe — payment processing and subscription-management services where paid billing is used.
Google Analytics — optional website analytics where enabled.
Tally — external feedback forms used by Winka.
Content-delivery infrastructure — including external CDN services where used by the website.
Software-update infrastructure — including GitHub-related release infrastructure used by the desktop application.
Email infrastructure — for Winka support and service communications.
These providers may process personal information according to their respective services, terms and applicable data-processing arrangements.
12. International processing and transfers
Winka is operated from Australia but uses service providers that may operate or process information in multiple countries.
Winka does not promise that its services, support operations, payment processing, email delivery, backups or service providers operate exclusively in Australia.
Personal information may therefore be processed in Australia and other countries where Winka’s service providers or their subprocessors operate.
Where applicable law requires safeguards for international transfers, Winka will use appropriate lawful transfer mechanisms.
13. Retention
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:
- provide Winka;
- maintain accounts and subscriptions;
- operate synchronization;
- provide support;
- maintain security;
- comply with legal obligations;
- resolve disputes;
- establish or defend legal rights.
Different categories of information may have different retention periods.
Completed or cancelled reminder information may remain as part of reminder history.
Local information may remain on a device after logout.
Provider logs, backups, payment records and email-delivery records may also be retained according to operational or legal requirements.
Provider-controlled logs and backups may follow provider-specific retention and restoration processes. Website backups may exclude some files, and deletion does not immediately remove information from every backup. No fixed access-log or backup retention period has been verified.
We do not currently make a blanket public promise that all personal information or backup copies are deleted within a fixed number of days.
14. Account deletion and deletion requests
Self-service account deletion is not currently available. You may request account closure or deletion of personal information by contacting:
We will process valid requests in accordance with applicable law.
Signing out, uninstalling Winka and deleting an account are different operations. Signing out or uninstalling the application does not itself request account deletion.
Certain information may need to be retained where required or permitted by law, including some billing, accounting, security, fraud-prevention or dispute-related records.
Account deletion does not necessarily mean that every copy disappears instantly from every system.
For example, some information may remain temporarily in backups, service-provider records or logs where legally or operationally permitted.
Information stored locally on a device may also require local cleanup, particularly if the device is offline or no longer connected to the account.
15. Your privacy rights
Depending on where you live and which law applies, you may have rights relating to your personal information.
These may include rights to:
- obtain information about processing;
- request access to personal information;
- request correction;
- request deletion;
- restrict or object to certain processing;
- withdraw consent where processing relies on consent;
- request portability where applicable;
- object to certain automated processing;
- complain to a privacy or data-protection authority.
Some rights are subject to legal exceptions.
We may need to verify your identity before acting on certain requests.
Requests can be sent to:
16. Regional privacy rights
Australia
Where the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles apply to Winka, we will handle personal information and privacy requests in accordance with those requirements.
This includes applicable requirements concerning transparency, access, correction, security and overseas disclosures.
European Union and European Economic Area
Where the GDPR applies, you may have rights including access, rectification, erasure, restriction, portability and objection, as well as the right to complain to an applicable supervisory authority.
Where processing relies on consent, you may withdraw that consent without affecting the lawfulness of processing performed before withdrawal.
United Kingdom
Where UK data-protection law applies, you may have rights including access, correction, erasure, restriction, portability and objection, as well as the right to complain to the UK Information Commissioner.
United States
Privacy rights in the United States vary by state.
Where an applicable state privacy law applies to Winka, eligible users may exercise the rights provided by that law.
For example, where the California Consumer Privacy Act applies, qualifying consumers may have rights to know, access, correct and request deletion of certain personal information, subject to legal exceptions.
Brazil
Where Brazil’s LGPD applies, users may have rights including confirmation of processing, access, correction, deletion or anonymisation in certain circumstances, information about sharing, portability and withdrawal of consent where applicable.
Other jurisdictions
Users in jurisdictions including Canada, New Zealand, India, Mexico and Switzerland may have additional privacy rights under applicable local law.
Winka will respond to valid requests in accordance with the law that applies to the request.
17. Sensitive information
Winka is a general-purpose reminder application.
We do not require users to provide sensitive personal information such as:
- health information;
- biometric information;
- religious beliefs;
- political opinions;
- sexual information;
- criminal-record information;
- highly sensitive financial or legal information.
However, because users control reminder content and images, you may choose to place sensitive information into Winka.
You should consider the sensitivity of information before including it in reminders.
Reminder content is not end-to-end encrypted and reminders may be visible on your screen when they appear.
This may also expose reminder information to people physically near your device or during screen sharing.
18. Security
Winka uses technical and organisational measures designed to reduce the risk of unauthorised access, loss, misuse or disclosure.
These measures may include:
- authenticated access;
- database access controls;
- private cloud image storage;
- HTTPS communications;
- operating-system-backed protection for certain stored authentication credentials;
- service-side access restrictions and security controls.
No internet-connected service or software system can guarantee absolute security.
Winka takes steps to limit sensitive email-verification information appearing in infrastructure logs. Hosting providers may still process technical request information as described above.
If you believe you have identified a privacy or security issue, contact:
Please do not send passwords, authentication tokens, secret keys or similar credentials by email.
19. Automated decision-making
Winka does not currently use solely automated processing to make decisions about users that produce legal or similarly significant effects.
If this changes materially, we will update this Privacy Policy and provide any notices or rights required by applicable law.
20. Changes to this Privacy Policy
We may update this Privacy Policy when Winka’s features, providers, legal obligations or information-handling practices change.
The “Last updated” date at the top of this policy indicates when it was most recently revised.
Where applicable law requires additional notice or consent for a material change, we will provide it.
21. Contact and complaints
For privacy questions, requests or complaints:
Operator:
JULIA DANIELE CRUZ AUGUSTO
Australian sole trader
ABN 16 949 337 258
Trading as Norange
Product: Winka
Where applicable, you may also have the right to complain to the privacy or data-protection authority in your jurisdiction.
END