Your people live on your phone.
Wendlo was built for people whose contact lists are sensitive, and the architecture reflects that: no accounts, no analytics, no tracking, no Wendlo server that stores your relationship data.
What stays on your device
Everything, by default. Your contacts, notes, touchpoint history, prayer requests, and conversations are stored on your phone, encrypted at rest. Wendlo has no user accounts, no analytics, no tracking, and no server that stores your relationship data.
Your optional iCloud copy
So a lost phone isn't a lost list, Wendlo can keep one private copy of your data in your own iCloud — inside the app's hidden container, Apple-encrypted, invisible in the Files app, and never on a Wendlo server. It is a copy for you, not a sync service we operate. People you mark as restricted are included in that copy, so it is only as safe as your iCloud account — keep two-factor authentication on. You can turn the copy off at any time in Settings → Your data, and it is deleted from iCloud when you do. Your normal encrypted iPhone backup is a separate, optional path you also control.
What leaves your device — and only when you choose
- Assistant chat. Wendlo's assistant runs on Claude. When you chat, your message and relevant contact context pass through Wendlo's relay to Anthropic, which processes them under API terms (API data is not used to train models). The relay stores nothing — no messages, no replies, no logs; it keeps only an anonymous daily-usage count for fair use. People you mark as restricted are never included — they are stripped out on your phone before anything is sent. Offline, a private on-device assistant answers and nothing leaves your device at all.
- Your calendar (optional). When you book a support appointment, Wendlo can add it to your Apple Calendar — the person's name and the meeting time, nothing else from their file. This access is write-only: Wendlo can add an event, but can never read your calendar. Restricted people are never written to the calendar.
- Card mailing (optional). When you mail a physical card, the recipient's name and address pass through our card service to the print partner (Lob) so the card can be printed and delivered — the same information that appears on any envelope you mail. Our service does not keep a database of your contacts; it stores only an anonymous credit balance.
- Payments (optional). Card credits are purchased through Stripe. We never see or store your payment details.
- Address lookups. To tell local friends from long-distance ones, city names and addresses may be geocoded using Apple's geocoder — except for restricted contacts, whose addresses never leave the device.
What we can see
Almost nothing: an anonymous, random ID with a number of card credits attached, and standard transient server logs. We cannot see your contacts, notes, prayers, or messages.
This website
This site is a static page. It sets no cookies, runs no analytics, and loads nothing from third parties — the fonts are served from this domain, not a font network. Our hosting provider (Vercel) keeps standard, short-lived access logs to operate the service.
Deleting your data
Delete the app, or use Settings → Start over. Because your data lives on your device, deletion is immediate and complete on your side. Turning off the iCloud copy removes it from iCloud as well.
Questions
Email hello@fieldwise-app.com.