Back
Wheely

Privacy Policy

Last updated: March 25, 2026

At Wheely, we take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it.

1. Who We Are

Wheely is an annual planning tool that helps you visualise your year on interactive sunburst charts. References to "we", "us", or "Wheely" in this policy refer to the service and its operators.

For privacy-related enquiries, contact us at wheely@barelycoder.com.

2. Data We Collect

We collect only what is necessary to provide the service:

  • Email addressUsed to identify your account and deliver sign-in verification codes. We do not collect passwords.
  • Wheel dataThe annual wheels you create — names, descriptions, and year settings.
  • EventsEvent titles, dates, descriptions, and category assignments you add to your wheels.
  • CategoriesLabels and colours you create to organise events (e.g. Deadlines, Milestones, Team Events).
  • PreferencesUI settings such as language, colour theme, and display options.

We do not collect payment information, location data, device identifiers, or any data beyond what you explicitly enter.

3. How We Use Your Data

Your data is used solely to operate Wheely:

  • Authenticate you via email verification codes or Google sign-in
  • Display your wheels, events, and categories within the app
  • Remember your preferences across sessions

We do not use your data for advertising, profiling, or any purpose beyond providing the service you signed up for.

4. Data Storage & Security

All data is stored on Amazon Web Services (AWS) infrastructure located in the EU (Stockholm) region. Data is encrypted in transit (TLS) and at rest.

Authentication is handled via short-lived verification codes sent by email or Google OAuth. We do not store passwords. Session tokens are stored in encrypted, HTTP-only cookies.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for their own purposes. Your data may be processed by the following sub-processors solely to operate the service:

  • Amazon Web ServicesCloud infrastructure, database, and email delivery
  • GoogleOAuth authentication only (if you choose Google sign-in)

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated personal data is permanently removed within 30 days.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your account and all associated data
  • Export your data in a portable format
  • Withdraw consent at any time by deleting your account

To exercise any of these rights, email wheely@barelycoder.com. We will respond within 30 days.

8. Cookies

Wheely uses a single session cookie (wh_session) to keep you signed in. This cookie is HTTP-only, encrypted, and expires after 30 days of inactivity. We do not use tracking cookies or third-party analytics cookies.

9. Children's Privacy

Wheely is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Wheely after changes constitutes acceptance of the revised policy.

Questions about this policy?

Reach us at wheely@barelycoder.com and we'll get back to you.