WillowWisp Privacy Policy

Effective Date: September 3, 2026 · Last Updated: September 3, 2026

Arbito LLC ("we," "us," or "our") operates the WillowWisp mobile application and associated services (collectively, the "Service"). WillowWisp is a focus / Pomodoro-timer application within the Arbito ecosystem in which you tend one small companion, Willow the Whisp, by completing focus sessions.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using WillowWisp, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information (via Arbito)

WillowWisp uses Arbito, our centralized authentication platform, for sign-in. When you sign in, the following information is received from your Arbito account via OAuth:

Your Arbito account ID (a unique identifier)
Email address
Display name

We do not manage passwords, biometrics, or sign-in credentials ourselves — that is handled entirely by Arbito. For details on how your account data is managed, please also review the Arbito Account Privacy Policy.

1.2 Focus Session Data

WillowWisp's server stores the data needed to run and validate your focus sessions:

Sessions: Start and end times, planned and actual duration, a tag/category you assign, and optional intention text you write for the session.
Streaks: Your current and best daily streak, computed against your device's time zone.
Companion state: Willow's growth stage, accrued care, and journey progress.
Economy/ledger data: Your Lumen balance and transaction history (mints from completed sessions, spends in the in-app shop), and records of shop items you've purchased or equipped.

Session timing is validated server-side before any Lumen is minted — we never mint currency based solely on what the app reports.

1.3 Push Notification Token

If you opt in to notifications, we store a Firebase Cloud Messaging (FCM) device token so we can deliver reminders. Reminder notifications are off by default — you must explicitly enable them in Settings. You can also configure quiet hours during which reminders will not be sent. Your token is cleared when you sign out.

1.4 iOS Screen Time Data (Family Controls)

On iOS, WillowWisp optionally uses Apple's Family Controls, DeviceActivity, and ManagedSettings frameworks to offer session shields and all-day open limits for apps you choose to be protected from.

Your chosen apps stay on your device. The list of apps/categories you select (a FamilyActivitySelection) and your open-limit settings are stored only on your device, in a local App Group container shared between the WillowWisp app and its system extensions. This data never leaves your phone, and WillowWisp's servers cannot see which apps you selected.
Only a daily count is sent to our server. When you resist opening a shielded app, a daily count of resisted opens is synced to our server so Willow's companion care can advance. No app names, categories, or usage timestamps are included — just a number.
Resisted-open counts never mint Lumen currency; they only advance a small, capped amount of companion care.

1.5 Android Screen-Time Data

On Android, WillowWisp uses the Usage Access permission (PACKAGE_USAGE_STATS) on-device to detect the foreground app for the open-limits feature, and the Display Over Other Apps permission to show the friction interstitial. As on iOS:

No list of installed apps and no usage/app-activity data is uploaded to our servers.
Only the same daily count of resisted opens is sent to the server, to advance companion care.

1.6 Crash Diagnostics

WillowWisp includes the Sentry crash-reporting SDK, but it is disabled (no DSN configured) in this release — no crash or diagnostic data is currently sent to Sentry. A future version of the app may enable crash reporting to help us fix bugs; if we do, we will update this Privacy Policy first.

2. How We Use Your Information

We use the collected information to:

Run focus sessions: Start, validate, and complete sessions, and maintain your streak.
Power the companion economy: Mint Lumen on validated session completion, maintain Willow's growth stage and care, and process shop purchases.
Provide screen-time friction: Advance companion care from resisted opens, subject to daily caps.
Deliver notifications: Send opt-in reminders, respecting your quiet hours.
Improve the Service: Diagnose and fix bugs and develop new features.
Ensure security: Authenticate users via Arbito and maintain service integrity.
Communicate with you: Respond to support inquiries.

WillowWisp does not display advertisements and does not use third-party analytics.

3. How We Share Your Information

We do not sell your personal information, and we do not use third-party advertising or analytics services. We may share your information in the following circumstances:

Within the Arbito Ecosystem: Your identity is verified against your Arbito account, and your Lumen balance is reflected in your Arbito wallet.
Service Providers: We share data with vendors who perform services on our behalf, including hosting (Railway) and push notifications (Firebase Cloud Messaging, only if you opt in).
Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.
With Your Consent: We may share information when you provide explicit consent.

4. Data Retention

Account data: Retained until you request account deletion.
Session, streak, companion, and ledger data: Retained for the lifetime of your account.
Push token: Retained until you disable notifications or sign out, whichever comes first.
iOS/Android selected-app and open-limit settings: Never transmitted to us, so we hold none. They remain on your device until you change them or delete the app.

When you delete your account, we delete your WillowWisp data within 30 days, except where retention is required by law.

5. Data Security

All data is transmitted over HTTPS/TLS encryption.
Authentication is handled via Arbito using JWTs verified against Arbito's published keys — WillowWisp never stores your password.
Lumen mints and spends go through a server-side ledger with idempotency protection and server-enforced daily caps.
Service-to-service communication is authenticated with internal API keys.

No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 All Users

Access: View your session history, streak, companion state, and Lumen balance within the app.
Notifications: Reminders are off by default; enable, disable, or set quiet hours in Settings at any time.
Screen-time friction: Turn session shields and open limits off at any time in Settings — the change takes effect immediately.
Delete account: Go to Settings → Delete account in the app. This removes your WillowWisp data, then removes your Arbito account per the Arbito Account Privacy Policy. You can also request deletion by emailing support@arbito.co.
Export: Request a copy of your data by contacting support.

6.2 European Economic Area (EEA) Residents — GDPR Rights

If you are located in the EEA, you have additional rights under the GDPR:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data.
Right to Restrict Processing: Request limitation of data processing.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Withdraw consent at any time.

Legal Basis for Processing: We process your data based on: (a) your consent, (b) the necessity to perform our contract with you, (c) compliance with legal obligations, and (d) our legitimate interests (security, service improvement).

To exercise your rights, contact support@arbito.co. We will respond within 30 days.

6.3 California Residents — CCPA Rights

Right to Know: Request disclosure of personal information collected.
Right to Delete: Request deletion of your personal information.
Right to Opt-Out of Sale: We do not sell personal information.
Right to Non-Discrimination: We will not discriminate for exercising your rights.

7. Children's Privacy

WillowWisp is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal data from a child under 13, we will promptly delete it. Contact us at support@arbito.co if you believe a child has provided personal information.

8. Third-Party Services

Service	Purpose	Privacy Policy
Arbito	Authentication & identity	Arbito Account Privacy Policy
Apple (Family Controls / DeviceActivity / ManagedSettings)	On-device screen-time friction (iOS)	Apple Privacy Policy
Google (Firebase Cloud Messaging)	Opt-in push notifications	Firebase Privacy
Google Sign-In	OAuth authentication (via Arbito)	Google Privacy Policy
Apple Sign-In	OAuth authentication (via Arbito)	Apple Privacy Policy
Railway	Server hosting	Railway Privacy Policy

WillowWisp does not display advertisements and does not use any third-party analytics service.

9. International Data Transfers

Your information may be transferred to and maintained on servers outside your country of residence. For EEA, UK, or Swiss residents, we ensure appropriate safeguards like Standard Contractual Clauses are in place.

10. Push Notifications

Reminder notifications are opt-in and off by default. If you enable them, you can also set quiet hours in Settings during which no reminders will be sent. You can disable push notifications at any time in the app or your device settings.

11. Local Data Storage

WillowWisp stores some data locally on your device, including authentication tokens (in platform-secure storage — Keychain on iOS, EncryptedSharedPreferences on Android) and, on iOS and Android, your selected apps and open-limit configuration for the screen-time friction feature, which is never transmitted to our servers. Uninstalling the app removes all locally stored data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time — for example, if we enable crash reporting in a future release. We will notify you of material changes by posting the new policy within the app or sending a notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

Email: support@arbito.co
Mailing Address: Arbito LLC, 212 N. 2nd St. Ste 100, Richmond, KY 40475
Website: https://arbito.co

For GDPR-related inquiries, you may also lodge a complaint with your local data protection authority.