The short version
- You start with just your email address, or by continuing with Google. There is no password, and we ask for nothing else until you order.
- We collect what we need to print and deliver your order — and nothing for advertising.
- We share your order details with the companies that print, ship and take payment for it, and no one else. We never sell your data.
- You can delete your account at any time from the app: Profile → Delete account.
What we collect
A random device key
The first time you open the app, our server gives your phone a random key so it can recognise the phone and keep it signed in. We store only a one-way hash of it. It is not tied to your phone’s hardware IDs or advertising ID.
Your designs and photos
The text, artwork and layouts you create, and any photos you add to a design. The app only sees photos you pick yourself through your phone’s photo picker — it never browses your gallery. Photos are uploaded to our servers so we can render a proof and a print file.
Your email
When you first open the app, you enter your email address. It becomes your account, so your designs, cart and orders stay yours and can follow you to another phone. We send it a six-digit code to confirm it’s really yours; we keep only a hash of the code, and it expires after ten minutes.
If you continue with Google
Instead of a code, you can sign in with Google. Google then tells us your email address, your name and the link to your profile picture. We don’t receive your Google password, and we get no access to anything else in your Google account.
Order and delivery details
When you order: your name, delivery address, email, and phone number if you give one; what you ordered; and its payment and shipping status. If you save an address to your address book, we keep it for next time.
Payment
Payment is handled by PayPal on PayPal’s own page. We never see or store your card or bank details — PayPal tells us only whether the payment succeeded, with its reference number.
Notification token, if you turn updates on
If you switch on order updates, we store the push token your phone gives us so we can tell you when an order is confirmed, shipped or delivered, or write to you about your order. If you also switch on Offers & news, we may send occasional notifications about new designs and offers; it is off unless you turn it on. Turn either off in Profile or in your phone’s settings.
Anonymous usage and crash reports
The app tells our own server when something breaks (the error and where in the app it happened) and when you reach a step of ordering — opening the editor, adding to cart, starting checkout — so we can see where people get stuck. These reports carry a random number the app makes up when it is installed, the app version and “android” or “ios”. They do not include your email, your device key, your designs or your order, so they can’t be linked to you or your account. They go to our server only, never to an analytics company.
Reports you send
If you report a design in the app, we record which design, the reason you chose and anything you wrote, with a shortened code for your phone so one phone can’t flood us with reports.
Server logs
Like any website, our servers record technical details of each request — IP address, time, the page or endpoint asked for — to keep the service running and secure.
What we don’t collect
The app does not request your location, contacts, microphone or advertising ID (on Android, those permissions are explicitly blocked in the app), and it does not track you across other apps. It contains no advertising, and no third-party analytics or tracking SDKs.
How we use it
- To save your designs and show you an accurate proof before you buy.
- To take payment, print your order and deliver it.
- To run your account and send your sign-in codes and, if you asked for them, order notifications.
- To understand which customers buy and come back (for example, grouping customers by whether they have ordered), and — only if you turned on Offers & news — to send you offers.
- To review designs sent for printing where needed to prevent infringing, illegal or abusive content.
- To keep the service secure, fix problems, and meet our legal and tax obligations.
We do not use your data for advertising and we do not sell it or share it for others’ marketing.
How long we keep it
- Sign-in codes: ten minutes.
- Server logs: about ten days.
- Anonymous usage and crash reports: 90 days.
- Designs, photos, saved addresses, your email and your Google name and picture: until you delete them or your account.
- Order records: as long as tax and accounting law requires, even after you delete your account — but no longer linked to your email.
Deleting your account
In the app, open Profile and tap Delete account (shown as Delete my data if you never entered an email). It takes effect immediately. If you no longer have the app, email [email protected] from the address on your account and we will delete it for you.
Deleted: your email, name and profile picture link, your address book, every design and photo that is not part of an order, your cart, your notification tokens, and the link to any other phone you signed in on.
Kept: records of orders you placed, with the designs they were printed from, because we are legally required to keep sales records. They are no longer tied to your email.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have the right to access, correct, delete or receive a copy of your personal data, and to object to or restrict how we use it. Most of this you can do in the app; for anything else, email [email protected]. We will answer within 30 days. You can also complain to your local data protection authority.
Security
All traffic between the app and our servers is encrypted with HTTPS. Device keys and sign-in codes are stored only as hashes, and access to our systems is restricted to the people who run Wearlio. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.
Children
Wearlio is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, email [email protected] and we will delete it.
Changes and contact
If we change this policy we will update the date at the top, and tell you in the app if the change is significant. Questions or requests: [email protected].
See also our terms of service and refund policy.