Privacy policy
Effective 26 August 2026 · Applies to the Rewild app and this website
The short version: Rewild collects what it needs to run — your sign-in identity, the entries you log, your subscription status, and the small amount of technical data any app needs to talk to its servers. No ads, no advertising trackers, no third-party analytics, no selling or renting your data. Ever.
1. Who we are
Rewild is operated by IntenseLife AG, Mühlebachstrasse 25, 8008 Zürich, Switzerland ("we", "us"). We are the controller of the personal data described in this policy. You can reach us at office@intenselife.ch.
2. What we collect, and why
Your account
You sign in to Rewild with your Google or Apple account. We never see or store your password — Google or Apple handles authentication in a window of their own. From the sign-in we receive an account identifier and, depending on what you share with the provider, your email address, your name and your profile picture.
Apple lets you hide your email address; if you choose that, we receive Apple's private relay address instead of your real one, and Rewild works normally with it. One thing to know: a relay address can never match a Google account, so if you later sign in with the other provider you get a separate Rewild account rather than the same one.
Why: to create your account and keep your entries attached to it.
The entries you log
Rewild's purpose is logging your days across three pillars: meals (such as breakfast or a snack), movement (such as a short walk or strength work), and mind (such as last night's sleep or quiet minutes) — what you logged, the day it belongs to, and when it happened. Entries are saved on your device first and then synced to your account on our backend.
These entries can reveal information about your lifestyle and wellbeing, so we treat them as sensitive: they are used solely to show you your own history, they are never used for advertising or profiling, and they are never shared with or sold to anyone.
Your subscription
Payment is handled entirely by the app store you bought Rewild from — Apple's App Store or Google Play — and we never see your card or bank details. To know whether your subscription is active, we use RevenueCat (RevenueCat, Inc., USA) as our subscription-management processor. RevenueCat receives the store's purchase receipt, your device model and an approximate region derived from your IP address — and no advertising identifier. Your purchase history is linked to your account identifier so that your subscription follows your account rather than a single device; we declare this linkage in the App Store's App Privacy section when Rewild is listed.
Technical data
When the app or this website talks to our servers, those servers keep standard, short-lived connection records — your IP address, the time of the request, and the app version and platform — to run the service and prevent abuse.
What we deliberately do not collect
- No advertising identifiers, ad networks, or cross-app tracking.
- No third-party analytics or behavioural profiling.
- No contacts, photos, or precise location.
- No payment card details — the store keeps those.
3. Who processes data for us
These providers process data on our behalf and on our instructions, under data processing agreements:
- Supabase, Inc. (USA) — hosts our backend database and authentication service. Your account data and synced entries are stored on Supabase infrastructure in the United States (US East region).
- RevenueCat, Inc. (USA) — manages subscription status, as described above.
- Expo (650 Industries, Inc., USA) — delivers over-the-air app updates. When Rewild starts, it asks Expo's servers whether a newer version of the app exists; that request carries your IP address, device platform and app version, and never your entries or account data.
- Vercel Inc. (USA) — hosts this website and keeps standard, short-lived server logs.
Separately, Apple Inc. and Google LLC act as independent controllers: they process your sign-in — and, for the store you buy through, your payment — under their own privacy policies and for their own purposes. We do not control that processing.
4. International transfers
We are based in Switzerland and the processors named in this policy store data in the United States. Where data leaves Switzerland or the European Economic Area, we rely on recognised safeguards — in particular the EU Standard Contractual Clauses (with the Swiss addendum) and, where a provider is certified, the EU–US and Swiss–US Data Privacy Frameworks.
5. Legal bases
Where the EU GDPR applies, we process your data:
- to perform our contract with you — running your account and sync, and honouring your subscription (Art. 6(1)(b) GDPR) — for your account and subscription data;
- for the entries you log, where they amount to data concerning health, on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give by choosing to log them and can withdraw at any time by deleting your entries or your account;
- for our legitimate interests in keeping the service secure and preventing abuse (Art. 6(1)(f) GDPR);
- with your consent wherever we ask for it separately — which you can withdraw at any time.
Under the Swiss FADP, we process your data lawfully, in good faith and proportionately, and rely on your explicit consent where we process sensitive personal data.
6. How long we keep data
Your account and entries are kept for as long as your account exists. If you ask us to delete your account, we delete your account data and entries from our backend within 30 days, and we ask RevenueCat to delete or anonymise the subscriber record it holds for you — except where a law requires specific records to be kept longer. Purchase records held by Apple or Google follow their own retention. Server connection logs are short-lived and rotate automatically.
7. Your rights
You can ask us for access to your data, a copy of it in a portable format, correction, deletion, or restriction of processing, and you can object to processing based on legitimate interests. Write to office@intenselife.ch and we will respond within 30 days. You can also complain to a supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your local data protection authority.
To delete your account and all synced entries, email us from the address linked to your account.
8. Security
Entries are stored locally on your device under the protections of your phone's operating system, and synced to our backend over encrypted connections (TLS). Access to production data is restricted to the people who need it to operate the service. No method of storage or transmission is perfectly secure, but we design for the failure modes we can control.
9. Children
Rewild is made for adults and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will delete it.
10. This website
This website is a static page. It sets no cookies and runs no analytics or trackers, and its fonts are served from our own host — your visit sends nothing to a third-party font service. Our hosting provider (Vercel Inc., USA) keeps standard, short-lived server logs to run the service, as described above.
11. Changes
When we change this policy, we will update the effective date at the top and, for material changes, tell you in the app before the change takes effect.
12. Contact
IntenseLife AG · Mühlebachstrasse 25, 8008 Zürich, Switzerland · office@intenselife.ch