privacy
wimzi, by Shrub Software LLC. Last updated 28 September 2026.
wimzi is for telling friends where you're about to go. Here is exactly what it knows and what it does with it.
your account
You sign in with Apple. We keep the identifier Apple gives us for this app, the name Apple shares the first time (editable), a handle you can change, a profile picture if you add one, and the time you last opened the app (one timestamp, overwritten each time, used only to count how many people are active). We never see your Apple ID email unless Apple's relay forwards it, and we don't send email.
your location
wimzi reads your location on your phone to work out whether you can get to a ping in time. That calculation happens on the device. Your location is not sent to our servers and nobody, including your friends, sees where you are. So that a notification can tell you whether you'd make it, your phone keeps the last place it saw you in, on the phone itself; it is forgotten when you sign out.
The one exception is on my way. If you turn it on for a ping you're going to, your phone sends your position (rounded to about 50 metres) and your own travel estimate about every 30 seconds to that ping's host and the people who have joined it, and nobody else. This keeps working while your phone is locked, and iOS shows its location indicator the whole time. It stops when you arrive, when you turn it off, when you leave the ping, or when the ping ends. The stored position is deleted when the ping ends and is never kept longer than that.
pings, chat and friends
What you post (the emoji, title, place, time, note, look, optional link), who joined, and what is said in a ping's chat is visible to the host's friends, or only to the invited people if the host narrowed it. Pings and their chats are deleted seven days after the ping ends. Friendships, requests, blocks and invite links are stored so the app works.
An invite link or a shared ping's link counts how many times its page was opened and its buttons tapped: plain totals, with nothing about who opened it. If you join wimzi through someone's link, your account remembers which link it was and whose, so we can tell whether invites work. The App Store button on those pages copies the link, and the app looks for it the first time it opens, so you land with the friend who invited you; iOS asks before the app reads it, and nothing else on your clipboard is read or kept.
notifications
If you allow notifications we store your device's push token so we can tell you when a friend posts, joins, or is on their way. Tokens are removed when you sign out and expire after 90 days. A ping you're going to can sit on your lock screen as a Live Activity; to keep it current we store a token for it too, which goes when the ping does.
what we don't do
- No advertising, no analytics SDKs, no tracking across apps or sites.
- No selling or sharing of data with third parties. The servers run on Amazon Web Services in the United States.
- No reading your contacts.
deleting your account
On the you tab, delete account removes your profile, handle, picture, friendships, blocks, joins, device tokens and any shared position, and revokes the Sign in with Apple grant. Pings you hosted disappear from friends' feeds immediately and are deleted with their chats within seven days. Lines you wrote in other people's chats stay, attributed to "someone".
reports and blocks
You can report any ping or chat line and block any person from the app. Reports are read by a person. Blocks are not announced.