WIN Network Privacy Policy

Last updated: August 1, 2026

1. Who We Are

WIN Network (“WIN,” “we,” “our,” or “us”) is operated by Wesley Joseph Co.

This Privacy Policy explains how WIN collects, uses, shares, protects, and retains information when you use the WIN Network mobile application and related WIN services.

Questions or privacy requests may be sent to:

• Email: Hello@wesleyinsider.com
• Contact page: wesleyinsider.com/contact

2. Membership and Subscriptions

WIN offers two customer membership levels.

Free Membership

You can create and use a Free Membership without:

• Purchasing a subscription
• Providing a payment method to WIN
• Starting an Apple free trial
• Opening an Apple purchase sheet

Free Membership is managed through your WIN account.

WIN Membership

WIN Membership is an optional auto-renewable subscription currently offered for $4.99 per month on iOS. Some eligible subscribers may receive an introductory offer made available through Apple.

Apple processes iOS subscription purchases, renewals, cancellations, and payment information. WIN does not receive your full payment-card number.

RevenueCat helps WIN verify Apple receipts, restore purchases, and determine whether paid features should be available. WIN and RevenueCat may process:

• Subscription status
• Product purchased
• Purchase and renewal dates
• Expiration status
• Restore-purchase results
• Apple transaction and receipt identifiers
• The WIN user identifier associated with the entitlement

Deleting your WIN account does not automatically cancel an Apple subscription. Subscriptions must be managed or canceled through your Apple Account settings.

Administrator access is an internal permission and is not granted through a purchase.

3. Information We Collect

Depending on how you use WIN, we may collect the following information.

Account and profile information

This may include:

• Name
• Email address
• Phone number
• Physical or business address
• Company
• Job title
• Biography
• Profile photo
• Cover photo
• Website and social links
• Business information and listings
• General city, state, or business market
• Membership status
• Profile visibility and privacy settings
• Notification preferences
• Account status and internal permission information

Community and communications information

This may include:

• Community posts
• Comments
• Uploaded photos and other post media
• Direct messages
• Business announcements
• Event submissions and registrations
• Connection and introduction activity
• Saved or bookmarked content
• Reports, blocks, and moderation requests

Direct messages are private from ordinary members but are not end-to-end encrypted. Authorized personnel and service providers may access message information when necessary to deliver the service, investigate reports, provide support, protect users, or comply with law.

Business Card Scanner information

When you use the Business Card Scanner, WIN may process:

• A captured business-card image
• OCR text
• OCR confidence and parsing information
• Name
• Job title
• Company
• Email address
• Phone number
• Website
• Physical address
• Social links
• Notes and follow-up information
• Referral information connected with the scanned contact

OCR currently runs through the application’s existing device-based processing path. The current production application does not enable the optional AI card-processing fallback.

Because a business card may contain another person’s information, you should scan and store a card only when you have a lawful and appropriate reason to do so.

Location information

With your permission, WIN may collect precise foreground location long enough to determine your current city, state, or business market.

WIN may use precise or coarse location to:

• Show nearby events
• Prioritize members and businesses in your market
• Support local business discovery
• Suggest a temporary local community when traveling
• Personalize local content
• Measure general market-level product activity

WIN does not continuously track location in the background, use geofencing, publicly display your exact device coordinates, or tell other members that you are traveling.

WIN may store a rounded or generalized home-market location with your profile. Current device location remains separate from the public location you choose to show on your profile.

You may deny or revoke location access through iOS settings. WIN will continue to work using your Home Community, a manually explored city, or global results where supported.

Purchase information

WIN may receive purchase history and subscription-status information from Apple and RevenueCat. WIN does not receive your complete Apple payment credentials or full payment-card number.

Device and notification information

WIN may collect:

• Push-notification token
• OneSignal subscription or device identifier
• Notification permission status
• Device platform and model
• App version
• Delivery and interaction status
• WIN account or member identifier connected with the device
• General city, state, market, membership, or onboarding tags used to deliver relevant WIN notifications

Notification content may include a post, event, message, connection, membership, or community update. Depending on your iOS settings, notification text may be visible on your device’s lock screen.

You can change notification preferences inside WIN and through iOS settings.

Product interaction and search information

WIN may collect information about how the application is used, such as:

• Screens or features opened
• Buttons or actions selected
• Event, post, or profile interactions
• Session and app-version information
• Notification interactions
• General market or coarse-location context
• Search activity

Search text may be sent to WIN’s backend to return results. WIN’s product analytics are designed to record that a search occurred and general query characteristics, such as query length, without storing the raw search phrase as analytics history.

Referral information

If you use a referral or invitation feature, WIN may process:

• Your user identifier
• Referral code
• Recipient email address or phone number
• Invitation status
• Whether a referred person later joins WIN
• Connection or attribution information associated with the referral

You should send referrals only to people you are permitted to contact.

Support and moderation information

When you contact support, submit feedback, report content, or block another member, WIN may collect:

• Contact information
• Support or feedback message
• Report reason and details
• The identifiers of the people or content involved
• A snapshot of reported content
• Relevant image or message information
• Administrative notes
• Actions taken
• Audit and security records

Diagnostics and crash information

WIN and its service providers may process:

• Crash reports
• Update-launch failures
• Network and application errors
• Device and app-version information
• Operational logs
• Update identifiers
• Performance and troubleshooting information

Crash information used for technical diagnosis is not intentionally linked to your WIN profile. Other operational diagnostics may be linked to an account or device when necessary to investigate a problem.

4. How We Use Information

WIN uses information for the following purposes.

App functionality

This includes:

• Creating and authenticating accounts
• Maintaining profiles and business listings
• Delivering posts, comments, and messages
• Managing connections and introductions
• Providing events and registrations
• Scanning and saving business-card contacts
• Enforcing membership access
• Processing subscriptions and restored purchases
• Delivering notifications
• Providing support
• Enforcing privacy and safety controls
• Preventing fraud and abuse

Product personalization

This includes:

• Showing locally relevant events and members
• Personalizing business discovery
• Remembering user preferences
• Prioritizing relevant professional connections
• Showing content based on membership, market, or activity

Analytics

This includes:

• Understanding feature usage
• Measuring product interaction
• Evaluating general market activity
• Measuring subscription and notification performance
• Diagnosing application failures
• Improving reliability and usability

Developer communications and marketing

With the appropriate permissions and subject to applicable law, WIN may use account, referral, device, notification, or membership information to send:

• WIN service announcements
• Membership information
• Community updates
• Referral communications
• Product or event announcements

WIN does not use this information for third-party advertising or cross-app advertising tracking.

Safety, moderation, and legal obligations

WIN may use information to:

• Investigate reports
• Enforce community standards
• Remove or restrict content
• Suspend or deactivate accounts
• Maintain audit records
• Protect members and the service
• Resolve disputes
• Comply with valid legal requests

5. Public and Private Information

Some information is intended to be visible to other WIN members or the public, depending on the feature and your privacy settings.

Potentially visible information includes:

• Name
• Profile and cover photos
• Company and job title
• Biography
• General city or state
• Business listing
• Website or social links you choose to share
• Posts and comments
• Event submissions
• Business announcements
• Uploaded media
• Selected contact information, according to your visibility settings

Media intentionally posted to public or community-facing areas may be delivered through publicly accessible media links. Other people may copy or share content that you make visible.

Private information includes:

• Exact current device location
• Travel status
• Direct messages
• Private business-card images
• Saved scanned-contact details
• Push tokens
• Purchase records
• Operational analytics
• Internal moderation and audit information

Privacy settings control supported profile and contact fields, but no service can guarantee that another person will not copy information you choose to share.

6. Business-Card Image Security

Saved business-card images are stored in a dedicated private Supabase Storage bucket.

Images are stored under an owner-scoped path associated with the authenticated user. The application does not store a permanent public image URL.

When a saved card image must be displayed, WIN creates a short-lived signed URL. The current signed URL expires after approximately 60 seconds and is not stored as the permanent database value.

Storage rules are designed so that:

• Owners can access their own card images
• Other members cannot access an image by guessing its path
• Anonymous users cannot access card images
• Suspended, banned, deleted, or inactive accounts are denied access
• Authorized administrative access uses a restricted, audited server process based on the saved contact record
• Authorized account-deletion processes can remove owner-scoped images

Private card images and references are removed through supported contact or account-cleanup processes where safe and technically possible. If deletion cannot be safely confirmed, information may be retained temporarily for recovery or manual review rather than being deleted ambiguously.

7. Push Notifications

WIN uses OneSignal and Apple Push Notification service to deliver push notifications.

These services may process:

• Push token
• OneSignal device or subscription identifier
• App and device information
• WIN user or member identifier
• Notification preferences
• General membership or market tags
• Notification delivery and interaction information
• Notification title, message, and deep link

Notifications may relate to messages, events, posts, comments, connections, membership, referrals, business activity, or other WIN features.

You can control notification categories inside WIN where available and disable push notifications through iOS settings.

8. Analytics and Tracking

WIN uses first-party product analytics and operational diagnostics to understand how the service is used and to improve reliability.

WIN does not currently:

• Use IDFA
• Include a third-party advertising SDK
• Sell personal information for advertising
• Use personal information for cross-app advertising tracking
• Track users across unrelated companies’ apps or websites for advertising
• Serve behaviorally targeted third-party advertisements

Product analytics may remain linked to a WIN user or member identifier when that is necessary to understand application functionality. Crash data is not intentionally linked to the member’s identity.

9. Service Providers

WIN uses service providers to operate the application. They process information only for the services they provide and under their own contractual and privacy obligations.

Apple

Apple provides:

• App Store distribution
• Sign in with Apple, where used
• In-App Purchases
• Subscription management
• Push-notification delivery
• Device permission controls
• Sign in with Apple authorization revocation for applicable account-deletion requests

RevenueCat

RevenueCat helps validate Apple purchases, restore subscriptions, manage paid-feature entitlements, and remove the WIN-linked RevenueCat customer record when required by an applicable account-deletion request. RevenueCat cleanup does not cancel the underlying Apple subscription.

Supabase

Supabase provides:

• Authentication
• Database hosting
• Private and public file storage
• Realtime services
• Server-side functions
• Access controls and security policies

OneSignal

OneSignal manages push-notification subscriptions, audience tags, delivery, and interaction reporting. Where applicable, WIN also requests removal of the member’s linked OneSignal identity and subscriptions during account deletion.

Expo

Expo provides application updates and related update, launch, and error diagnostics.

Resend and Twilio

WIN may use Resend for email invitations and non-sensitive account-deletion completion confirmations, and Twilio for SMS invitations or referral messages.

Google

Google may process authentication information if you intentionally choose an available Google sign-in option. WIN does not currently use Google Analytics in the production mobile application.

Apple and these providers may process information according to their own privacy policies. Their retention practices may differ from WIN’s.

10. Moderation and Community Safety

Members may report posts, comments, messages, images, or profiles and may block other members.

A report may include:

• Reporter and reported-member identifiers
• Reason and supporting details
• A snapshot of the reported content
• Associated image or message information
• Relevant technical metadata

WIN may review reported content and private-message snapshots submitted through the reporting process. Authorized administrators may remove or restrict content, suspend or terminate accounts, preserve evidence, and maintain audit records.

Some automated controls may reject obvious abusive or spam-like content. These controls do not replace human review and cannot identify every harmful interaction.

Moderation, security, and audit records may be retained after content is removed when necessary for safety, fraud prevention, dispute resolution, legal compliance, or system integrity.

11. Data Retention

WIN does not apply one fixed retention period to every type of information.

Information is generally retained:

• While your account remains active
• While needed to provide a feature you use
• While content or a saved contact remains in WIN
• As needed for security, moderation, fraud prevention, legal compliance, disputes, transactions, and system integrity
• Until deleted, de-identified, or no longer reasonably needed

Removed posts or moderated content may be hidden rather than immediately erased. Reports, content snapshots, administrative notes, and audit records may remain after the related content or account is no longer visible.

Some shared or relational records may need to remain to protect another member’s conversation, community content, event, moderation record, audit trail, or other relationship. In those cases, WIN deletes personal information or irreversibly anonymizes, redacts, or reassigns the retained record to a non-personal system tombstone so that it no longer points to the deleted personal profile.

Service-provider logs, caches, and backups may retain copies until they are overwritten or removed through the provider’s normal lifecycle.

After verified account-deletion completion, WIN may retain only the minimum non-identifying operational records reasonably required for deletion receipts, irreversible tombstone hashes, provider verification evidence, stage and retry journals, completion-email delivery status, security, fraud prevention, legal obligations, audit integrity, or dispute resolution. The completed deletion request is sanitized so that it does not retain the original authentication or member identifiers.

WIN does not promise a fixed deletion or backup-removal timeline that is not technically implemented.

12. Account Deletion

You can request account deletion in WIN through:

Profile → gear icon → Profile Menu → APP → Account Settings → Delete Account → Request deletion

A deletion request is durable and duplicate-safe. When WIN accepts the request, it:

• Records the request and its processing status
• Deactivates and hides the profile
• Removes the profile from supported directories, search, discovery, networking, recommendations, and matching surfaces
• Disables associated push delivery
• Blocks ordinary server-side app access, including access attempted with a stale or newly created session
• Signs the member out
• Creates an administrative audit record

The profile remains hidden and ordinary access remains blocked while deletion is pending, retrying, or in restricted administrative review. A provider or cleanup failure does not reactivate the account.

Deletion then continues through a secure, idempotent background process. Depending on the services linked to the account, WIN:

• Removes the linked OneSignal push identity and subscriptions
• Removes the WIN-linked RevenueCat customer record and verifies the result
• Revokes Sign in with Apple authorization for an applicable Apple-linked account
• Deletes and verifies owner-scoped files in Supabase Storage, including private business-card images, avatars, profile covers, post images, and other owned uploads
• Deletes or processes profile data, contact information, preferences, push-device records, scanned contacts, OCR data, connections, blocks, reactions, saved items, event registrations, analytics identifiers, and other account-owned database records where technically and legally appropriate
• Permanently deletes the original Supabase Auth user as the last destructive deletion step, only after the required provider, Storage, database, and verification stages succeed

Not every provider applies to every account. For example, an email-and-password account may have no Apple authorization to revoke, and an account without a linked push identity may require no OneSignal identity removal. RevenueCat cleanup does not cancel the underlying Apple subscription.

If deleting a record would damage another member’s conversation, community content, event, moderation record, audit trail, or other relationship, WIN may delete the record, irreversibly anonymize or redact it, or reassign it to a non-personal system tombstone. Any retained shared record must no longer point to the deleted personal profile.

Required provider results, Storage cleanup, database cleanup, Supabase Auth deletion, and final absence checks are verified before the request is marked complete. Failed stages are safely retried or moved to restricted administrative review, and the request is not marked complete while required verification remains outstanding.

After verified completion, WIN may use Resend to send a non-sensitive completion email when a verified address is available. WIN does not promise a fixed completion or backup-removal deadline that is not technically guaranteed.

As described in Data Retention, WIN may retain minimum non-identifying operational records needed for deletion receipts, tombstone hashes, provider evidence, stage and retry history, completion-email delivery status, security, fraud prevention, legal obligations, audit integrity, and dispute resolution.

Deleting your WIN account does not cancel an Apple subscription. You must manage or cancel the subscription separately through your Apple Account settings.

You may contact Hello@wesleyinsider.com regarding a pending deletion request.

13. Your Choices and Rights

Depending on where you live, you may have rights to request:

• Access to personal information
• Correction of inaccurate information
• Deletion
• Restriction of processing
• Objection to certain uses
• A portable copy of eligible information

WIN may need to verify your identity before completing a request. Some requests may be limited or denied where permitted by law, including when information must be retained for security, moderation, legal, transactional, or system-integrity reasons.

Inside WIN, you can also:

• Review and update profile information
• Manage supported contact-visibility settings
• Change notification preferences
• Block or unblock members
• Remove supported content
• Unregister from events
• Request account deletion
• Revoke camera, photo, location, or notification permission through iOS
• Manage an Apple subscription through Apple Account settings

WIN does not currently provide a fully automated self-service data-export tool. Contact us to make an applicable access or portability request.

14. Security

WIN uses safeguards designed to protect personal information, including:

• Account authentication
• Database row-level access controls
• Owner-scoped private card-image storage
• Short-lived signed image URLs
• Restricted administrative functions
• Administrative audit records
• HTTPS and service-provider security controls
• Privacy and blocking rules

No online service can guarantee perfect security. You should protect your login credentials and report suspected unauthorized access promptly.

15. International Data Processing

WIN is operated in the United States. Its production database and service providers may process information in the United States or other countries where they operate.

Privacy laws in those locations may differ from the laws where you live. WIN and its service providers use appropriate safeguards where required by applicable law.

16. Children’s Privacy

WIN is a professional business community and is not directed to children under 13.

If you believe a child has provided personal information contrary to applicable law, contact Hello@wesleyinsider.com.

17. Changes to This Policy

WIN may update this Privacy Policy when the application, service providers, legal requirements, or privacy practices change.

The updated policy will display a revised “Last updated” date. If a change materially affects how personal information is used, WIN may provide additional notice inside the application or through available contact information.

18. Contact Us

For privacy questions, rights requests, account-deletion questions, or concerns about information appearing in WIN:

Wesley Joseph Co.
Email: Hello@wesleyinsider.com
Contact: wesleyinsider.com/contact