Privacy policy

Last updated: 2026-11-14

In short: MyWeirds starts with an anonymous account that has no name, no email and no password. Signing in with Apple is optional. The text you type when you add a Weird goes to Anthropic’s AI for checking, without your account identifier. Everything else stays with our hosting provider Supabase, in the EU. No ads, no analytics, no tracking. You can export or delete everything in the app.

1. Who we are and how to reach us

MyWeirds is made by a small studio in Vienna. We are the controller for the personal data processed in the app:

CreaCrate Productions e.U.
Owner: Emad Elzahar
Lotte-Hass-Weg 2/11
1220 Vienna, Austria

For anything about your data, email privacy@creacrate.com. More company details are in our legal notice.

2. What MyWeirds is

MyWeirds is an iOS app for collecting “Weirds”: short descriptions of small things you do that most people don’t, and finding out how rare they are. In Discover you answer “do you do this too?” cards about other people’s Weirds; there are no public profiles, no names, no social feed and no messages.

3. Your account

Anonymous by default

When you open MyWeirds for the first time, the app creates an account for you automatically. It consists of a random account identifier. There is no email, no password and no name. Nothing in it identifies you.

Sign in with Apple, if you want it

Under Me → “Secure my collection” you can link your account to Sign in with Apple, so you can restore your collection on another device. We then receive two things from Apple: your Apple user identifier and an email address. The email address can be Apple’s private relay address; that is your choice in the Apple dialog. Apple also offers your name, but we do not store it.

Securing links your existing anonymous account. Nothing else changes. Apple runs the sign-in itself under its own privacy policy.

Your session

The app keeps its session token in the iOS keychain, on this device only. It is not synced to iCloud and not included in backups. The app also notes in the keychain that you allowed the AI check (section 6). The app uses no cookies.

4. What we store about you

We store the following together with your account identifier:

• Weirds you type in: your original text and its language, a corrected version (spelling and punctuation fixed), an English normalized version made by the AI step (section 6), and a numeric embedding of the text. The embedding is a list of numbers that lets us find similar Weirds.
• Your collection: which Weirds you have, your drafts and your “Saved for tomorrow” list.
• Your Discover answers: yes, no or skip, and an optional reason for a skip.
• Reports you send about a Weird: the reason and up to 500 characters of text. A Weird you reported is not shown to you in Discover again.
• Your score and daily counters: how many Weirds you collected, cards you saw and checks you ran each day. The app has daily limits, and the counters make them work.
• If you secured your collection: your Apple user identifier and email address (section 3).

Our data model also has optional profile fields for a display name and a language. The app does not collect them today.

5. What everyone can see

New Weirds join the shared world

When you add a Weird that does not exist yet, its text becomes a Weird that everyone on MyWeirds can see and collect. Your own phrasing is stored as an alternative phrasing of that Weird. The AI step moderates new content before it is accepted. A Weird is never shown with your identity.

Only counts, never who

Every Weird shows numbers to all users: how many other people have it, what share of all users that is, and how rare it is, estimated from Discover answers. Nobody can see who has a Weird or who answered what.

We use Discover answers only in aggregate, to estimate how common each Weird is. The statistics are recomputed every night from the answers that exist at that moment.

The rights you give us for the Weirds you add, and the rules for what a Weird may contain, are in our Terms of Use.

6. AI processing with Anthropic

What is sent

When you add a Weird, the text you type is sent to the API of Anthropic (Claude models). The models detect the language, turn the text into normalized English, moderate it and compare it with existing Weirds.

Only the text is sent. No account identifier, no email address and no device data.

The app tells you this before your first check and asks you to allow it. Nothing is sent to Anthropic before you do. If you do not allow it, you can still use Discover and collect Weirds there, but you cannot add your own.

Anthropic’s role

Anthropic acts as our processor under its Commercial Terms of Service and the Data Processing Addendum that is part of them. Under these terms, Anthropic may not train its models on the content we send. Because we are based in the EU, our contracting partner is Anthropic Ireland, Limited.

Anthropic is based in the USA, so your text can be processed outside the EU. For this transfer, Anthropic’s Data Processing Addendum includes the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). How long Anthropic keeps API data is set by Anthropic, not by us; see Anthropic’s privacy policy and its commercial terms.

What we keep about AI calls

For each AI call we log the model used, token counts, cost, latency and the outcome. This log contains neither your text nor your account identifier.

So that the same text does not have to be checked twice, we keep a shared cache of the normalization step. It stores a hash of the typed text, the corrected and the English normalized text and its embedding. It has no link to any account. Cache entries expire after 30 days.

7. Where your data lives

Our database, the account system and our server functions run on Supabase. Our Supabase project is in the region eu-north-1 in Stockholm, Sweden, in the EU. The server functions run on Supabase’s edge network. Processing happens primarily in the EU.

Supabase is our processor. Our contracting partner is Supabase Pte. Ltd., Singapore. Supabase uses sub-processors, some of them in the USA. For transfers outside the EU, Supabase’s data processing addendum includes the EU Standard Contractual Clauses.

Supabase keeps infrastructure logs, such as IP address, user agent and request metadata, for a short period under its own rules. See Supabase’s privacy policy.

8. What we do not do

• No analytics, no advertising, no tracking SDKs and no crash reporting.
• No tracking across apps or websites. That is why the app never asks for permission to track you (App Tracking Transparency).
• We do not sell your data. Apart from Apple for Sign in with Apple (section 3), it goes only to our two processors, Anthropic and Supabase.
• No access to your contacts, photos, location, microphone or camera.
• This page sets no cookies, has no analytics and loads nothing from other websites.

9. How long we keep data, and how to delete your account

We keep your account data until you delete your account. There is no automatic deletion after a period of inactivity: an anonymous account stays until it is deleted.

Delete your account in the app

Open Me → “Delete my account”. One step deletes everything tied to your account: your collection, answers, submissions including the text you typed, drafts, counters, score, profile and the account itself. If you secured your collection, you first confirm with your Apple ID, and we revoke the Sign in with Apple authorization at Apple.

What stays, without any link to you

• Weirds and phrasings you created stay in the shared world, without any link to you.
• Reports you sent are kept for moderation. The reference to you and your free text are removed.
• A statistics row records that a deletion happened: the date, whether the account was anonymous or secured, and how many Weirds it had. Nothing in it identifies you.

Your Discover answers leave the statistics entirely at the next nightly run.

Other retention periods

• Normalization cache entries expire after 30 days.
• Statistics history is kept for 90 days.
• Database backups at our hosting provider are deleted within 7 days.

If you lose your phone

If you never secured your collection, nothing identifies you. Then you cannot recover the account, and we cannot either.

10. Export your data

Open Me → “Export my data”. You get a JSON file with everything stored under your account: your collection, the “Saved for tomorrow” list, drafts, submissions, answers, usage counters, score and profile. You can save or share it through the iOS share sheet.

11. Legal bases

• Providing the app and its features: performance of a contract with you (Art. 6(1)(b) GDPR).
• Sign in with Apple: at your request, as part of that contract (Art. 6(1)(b) GDPR).
• Daily limits, abuse prevention, security logs and moderation: our legitimate interest in a fair and safe app (Art. 6(1)(f) GDPR).

No processing relies on consent under the GDPR. That is why there is no consent banner. The question the app asks before your first AI check (section 6) is a notice that Apple’s App Store rules require; the check itself is part of the feature you use when you add a Weird.

12. Your rights

Under the GDPR, you have the right to:

• access your data (Art. 15) and have it corrected (Art. 16),
• have it erased (Art. 17) and its processing restricted (Art. 18),
• data portability (Art. 20),
• object to processing based on our legitimate interest (Art. 21).

You do not need to contact us for the most important ones. “Export my data” covers access and portability, and “Delete my account” covers erasure. For everything else, email privacy@creacrate.com.

You also have the right to complain to a supervisory authority. In Austria, that is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at, dsb.gv.at. You can also contact the authority of the EU country where you live.

13. Children

MyWeirds is not directed at children. It is intended only for users aged 16 and older.

14. Changes to this policy

This policy describes the app as it is today. When the app or the way it handles data changes, we update this page.

15. Last updated

This version was last updated on 2026-11-14.