Privacy

Updated 20 October 2026

Wilson is a personal planner run by one independent operator. This page says what Wilson keeps, who sees it, and how to delete it. The Android app is the same planner as the website and keeps nothing extra.

What Wilson keeps

• Your account: username, display name, email address, a hashed password (never the password itself), and your authenticator secret if you set one up. If you sign in with Google or Microsoft, Wilson keeps the name and email address they confirm. If you give Wilson your city, he keeps that too.
• Your planner: everything you put in it, including tasks, notes, roles, goals, people, appointments, attachments and your conversations with Wilson.
• Connected calendars: if you connect a Microsoft or Google calendar, Wilson keeps the access it needs to read your events. It changes an event only when you confirm a move.
• Forwarded email: if you forward an email to Wilson, it keeps the message so it can turn it into tasks, and it may reply to say what it did.
• Notifications: if you turn them on, Wilson keeps the address your browser or phone gives it for sending them.
• Usage counts: which screens and features get used, and how much Wilson's AI costs. These are counts, never the words you wrote.

Wilson uses one sign-in cookie. There are no ads, no advertising trackers and no third-party analytics.

Who it is shared with

Wilson never sells your data or shares it for advertising. It goes to other companies only to do what you ask:

• Anthropic runs the Claude AI behind Wilson's coaching. When you talk to Wilson or ask him to plan, the parts of your planner the request needs are sent to Anthropic's API. Before a birthday or anniversary, Wilson sends the person's first name, relation, interests and past gifts, the date and your city, so he can find things to do near you. Your private notes about people are never sent. Anthropic does not train its models on API data.
• Microsoft and Google, only if you sign in with them, connect their calendars or forward email from them.
• Your browser or phone maker's push service (Google for Android and Chrome) delivers notifications. Notifications show only a short line, such as a task title.
• Speech typing uses your device's own speech recognition, which may send audio to its maker (Google on Android). Wilson receives only the words.
• People you share with: if you share a list by link, anyone with that link can see it until you stop sharing.

Where it is kept, and how safely

Wilson's data is stored on the operator's own servers, and all traffic is encrypted in transit (HTTPS). Only the operator can reach the servers. The operator opens an account's data only to restore it, to fix a problem you report, or when the law requires it.

Deleting your data

Delete your account at any time in Profile → Delete account, in the app or on the website. Wilson asks for a code (and your password, if you have one) to confirm that it's really you. It then deletes your account, planner, attachments, forwarded email, shared links, notification addresses and calendar connections straight away. Backups, including the safety copy taken just before deletion, are kept for 7 days, so your data is gone from them within 8 days. Wilson keeps only a one-line record of your username and the date the account was deleted.

You can also delete single items, disconnect a calendar in Profile, or turn notifications off whenever you like. If you can't sign in, email [email protected] from the address on your account to have it deleted.

Children

Wilson is not meant for children under 13 and doesn't knowingly keep their data.

Changes and questions

If this policy changes, this page will show the new date. Send any questions to [email protected].