Last updated: 13 September 2026
Wizard Maker lets you describe an app and have one built for you, then run and share it. This policy explains what we collect while you do that, why we need it, who else sees it, and how to get rid of it.
Wizard Maker ("we", "us") operates the Wizard Maker mobile app, the web app at
app.wizardmaker.com, and the API at api.wizardmaker.com.
We are the data controller for the information described below. Contact
details are at the bottom of this page.
| Data | Why we have it | How long we keep it |
|---|---|---|
| Your Google account details Name, email address, profile picture, and Google's account identifier |
Signing you in. We use Google Sign-In and never see or store your Google password. Your email also identifies you when someone shares an app with you. | Until you delete your account |
| The prompts you write What you type or dictate when describing or changing an app |
Building the app. Your prompt is sent to Anthropic's Claude model, which returns the app's code. | Until you delete the app or your account |
| The apps you create Their code, title, icon and settings |
Storing and running your apps, and sharing them with people you choose. | Until you delete the app or your account |
| Data your apps store Whatever an app you built saves — notes, records, entries, lists |
Making your apps work across devices and between people you share them with. | Until you delete the app or your account |
| Photos and camera captures Images an app you built takes or that you choose from your device |
Only when an app you built uses the camera or photo picker. Images are uploaded to our server and may be sent to Anthropic's vision model to read text out of them. | Until you delete the app or your account |
| Location Your device's coordinates |
Only when an app you built asks for it and you agree to the request we show you first. Coordinates are stored with that app's data. | Until you delete the app or your account |
| A contact you choose Name, phone number and email of one person |
Only when an app you built asks and you pick someone from your address book. We never read your address book — only the single person you select is sent to us. | Until you delete the app or your account |
| Calendar entries Events you add, or events an app reads |
Only when an app you built asks and you approve it. Events an app writes go to your device calendar. Events it reads stay on your device unless the app saves them. | Not stored by us unless an app saves them |
| Voice What you say when you dictate |
Turning speech into text. This happens on your device using the operating system's own speech recogniser. Audio is never sent to our servers. | Not stored |
| Usage counters How many AI calls and tokens you have used this month |
Enforcing the limits on your account. These are counts, not content. | Rolling monthly, plus a lifetime total |
| Reports you file Bug reports, abuse reports, and any screenshots or text you attach |
Fixing problems and reviewing content that breaks our rules. | Up to 2 years. Abuse reports are kept even if you delete your account, with your identity removed. |
| Server logs IP address, timestamp, and which endpoint was called |
Security, abuse prevention and rate limiting. | 30 days |
We do not use advertising or analytics SDKs. The app contains no ad network, no tracking pixel, and no third-party analytics. We do not sell your data, and we do not share it for advertising.
The Wizard Maker app itself does not use your camera, location, contacts or calendar. The apps you build do. That is why, before any of these is used for the first time in an app, we show you a plain-language explanation naming the app that is asking and what happens to the data — before your phone's own permission prompt appears. You can decline, and you can revoke any permission later in your device settings.
An app can only ask for a capability it declared when it was built. An app you made to track recipes cannot suddenly ask for your location.
We will also disclose information where the law requires it, or where it is necessary to investigate a credible threat to someone's safety.
On servers in the United States. If you are in the UK, EEA or Switzerland, your data is transferred there under the UK/EU Standard Contractual Clauses.
You can, at any time:
We answer requests within 30 days. We do not charge for them.
Open Settings → Delete account in the app, or follow the instructions at wizardmaker.com/delete-account. Deletion is immediate and permanent: your profile, every app you own, all of their data, and every image you uploaded are erased. Apps you shared stop working for the people you shared them with.
Two things survive deletion, and only these: abuse reports you filed, with your identity stripped off them, so that deleting an account cannot be used to retract a report; and server logs, which age out within 30 days.
Wizard Maker is not for children under 13, and we do not knowingly collect information from them. Because the platform carries AI-generated and user-generated content, you must confirm you are 13 or older when you sign in. If you believe a child has created an account, email us and we will delete it.
Traffic is encrypted in transit with TLS. Apps you build run in a sandbox with no network access of their own and never see your sign-in token. Access to the production database is restricted to a least-privilege account. No system is perfect; if you find a problem, please tell us at the address below.
If we change this policy materially we will say so in the app before the change takes effect. The date at the top always reflects the current version.
Contact
Privacy questions, data requests and security reports: privacy@wizardmaker.com