Last updated 28 October 2026
Wise Leap Technologies, Inc. ("Wise", "we", "us") provides the Wise platform, websites and mobile apps (the "Service"). Our customers are tutors, academies, schools, training teams and other organizations ("Customers") that use Wise to teach, train and run their business.
This policy explains how we handle personal information in two different roles:
| Category | Examples | Source |
|---|---|---|
| Account and contact | Name, email, phone, organization, role, login credentials | You, when you sign up or are invited |
| Billing | Plan, invoices, payment status, tax details. Card details are handled by our payment providers, not stored by us | You and our payment providers |
| Communications | Support requests, feedback and bug reports, survey answers | You |
| Usage and device | IP address, device and browser type, app version, pages and features used, crash and error logs | Automatically, from the Service and websites |
| Cookies and similar technologies | Session, preference, analytics and (with consent) marketing cookies | Automatically; see Section 6 |
| Marketing | Email preferences, campaign interactions, demo requests | You, and our marketing tools |
| Connected accounts | Profile and permissions from services you connect, such as Google or YouTube | The connected service, with your permission |
| Customer Data | Learner and parent records, schedules, attendance, messages, files, session recordings and transcripts, AI Output, payment records | Our Customers and their users (processor role) |
The Service is not designed to collect sensitive data, such as health information or biometric identifiers. Session content may incidentally include such information, and the Customer decides whether to collect it.
For information we control:
| Purpose | Legal basis (UK and EEA) |
|---|---|
| Create and run accounts, provide the Service, process billing | Performance of our contract |
| Provide support and respond to requests | Performance of our contract; legitimate interests |
| Secure the Service, prevent fraud and abuse, monitor logins | Legitimate interests; legal obligation |
| Analyse use and improve the Service, using aggregated or de-identified data where possible | Legitimate interests |
| Send service and account messages | Performance of our contract |
| Send marketing to business contacts, with an opt-out in every message | Legitimate interests, or consent where the law requires it |
| Use non-essential cookies | Consent |
| Comply with law, enforce our terms, handle disputes | Legal obligation; legitimate interests |
We use Customer Data only to provide, secure and support the Service for that Customer, as set out in the DPA. We do not sell personal information. We do not use Customer Data for advertising or for profiling learners.
AI features, such as session summaries and progress reports, are optional and run only when a Customer turns them on. When they do, the session content selected is sent to our AI providers, currently OpenAI and Anthropic, to generate the output. Neither we nor our AI providers use this content to train AI models. Providers may keep it for up to 30 days for abuse monitoring and then delete it. The Customer decides whether to share AI output with learners or parents, and is responsible for reviewing it.
We share personal information only:
We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service and understand how it is used. We use non-essential analytics and marketing cookies only with your consent where the law requires it. On our marketing website, advertising partners may set cookies to show Wise ads on other sites and measure our campaigns. You can accept or reject these in our cookie banner. We never use Customer Data for advertising. You can change your choices at any time in our cookie settings or your browser. Our web product analytics run on our own infrastructure (self-hosted RudderStack and Metabase). Our mobile apps use Google Firebase for push notifications, usage analytics, crash reporting and sign-in. Firebase collects device identifiers, app interactions and crash data, which we use only to operate and improve the apps. App usage analytics run only after you accept our consent banner, which also appears in the apps. Crash reporting is always on because we need it to keep the apps working. You can turn off push notifications in your device settings.
Customer Data is stored in the hosting region set for the Customer's account: the United States or India. Our website and account data is stored in the United States. Some service providers and our support team may access data from other countries, as listed on our subprocessor page.
When we transfer personal information out of the UK, EEA or Switzerland, we use an approved mechanism. These are the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework and its UK Extension where the recipient is certified.
| Information | Retention |
|---|---|
| Account and billing | While the account is active, then 7 years for tax and accounting records |
| Security and usage logs | 12 months |
| Marketing preferences | Until you unsubscribe, then kept as a suppression record |
| Customer Data | As the Customer decides while its account is active. After the account closes: available for export for 30 days, then deleted within a further 30 days |
| Backups | Overwritten on a rolling cycle of up to 35 days |
| Session recordings | While the Customer's paid plan is active, unless the Customer deletes them sooner. Deleted 15 days after a paid plan expires without renewal |
We protect personal information with encryption in transit and at rest, role-based access controls, multi-factor authentication for administrative access, logging, security testing and staff training. Customer data is logically separated. No system is completely secure, so we cannot guarantee absolute security. If a breach affects Customer Data, we will notify the Customer as set out in our DPA.
Wise is built for organizations, and our account holders must be adults. Customers may add children's information to the Service, for example to run classes. When they do, the Customer is responsible for giving notice and obtaining any consent required from parents or guardians. We process that information only on the Customer's behalf. We do not knowingly collect personal information directly from children under 13 for our own purposes. We never use children's data for advertising, marketing or profiling. Parents should contact the child's school or tutor about their child's information. They can also contact us at info@wiseapp.live, and we will help.
If your school, tutor or academy uses Wise, here is what happens to your information:
Depending on where you live, you may have the right to:
To use these rights for information we control, email info@wiseapp.live. We will reply within 30 days, or sooner where the law requires, and may need to verify your identity. If your information is Customer Data, please contact the organization that uses Wise with you. We will pass on requests we receive and help that organization respond. More rights for specific regions are below.
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. AI output is generated for Customers, who are responsible for reviewing it.
You can unsubscribe from our marketing emails at any time using the link in each email, or by emailing marketing@wiseapp.live. We will still send essential service and account messages. Messages that Customers send you through Wise, such as reminders by email, SMS or WhatsApp, are the Customer's responsibility. Contact the Customer to change them.
We may update this policy. We will post the new version with a new effective date, and give advance notice of material changes by email or in the Service.
Wise Leap Technologies, Inc., 355 Bryant Street, Suite 403, San Francisco, CA 94107, USA. Email: info@wiseapp.live.
Wise Leap Technologies, Inc. is the controller of the information described in Section 1. Our legal bases are listed in Section 3. In the UK, we follow the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, as amended by the Data (Use and Access) Act 2025. You can complain to your local data protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk).
This section applies to residents of California and other US states with consumer privacy laws, for information we control.
We handle personal information in line with the Australian Privacy Principles. We may disclose personal information to recipients in the United States, India and the European Economic Area, as described in Sections 5 and 7. To complain about how we handled your information, email info@wiseapp.live. We will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
This section applies to individuals in India, and to digital personal data we process in connection with offering the Service in India. It explains how we comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, as their provisions come into force. Until then, we also follow the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Who can use Wise. Wise is available only to individuals who can form a legally binding contract under the Indian Contract Act, 1872. If you are a minor, meaning under 18, you may use Wise only with the consent and involvement of a parent or lawful guardian. We do not knowingly collect or store a minor's personal data unless their parent or lawful guardian has permitted it. Where a parent or guardian enrols a minor or gives them access to Wise, the parent or guardian authorizes that use and consents to this policy on the minor's behalf. We, or the Customer that enrols the minor, will verify that consent as the DPDP Act requires.
Our role. For individuals in India, the Data Fiduciary under the DPDP Act for the information we control, described in Section 1, is Wise Leap Technologies Private Limited, 451, 17th Cross Service Rd, Muneswara Nagar, Sector 6, HSR Layout, Bengaluru, Karnataka 560102. In this India section, "we" means that company. For Customer Data, the Customer, such as your school, tutor or academy, is the Data Fiduciary and we are its Data Processor. The Customer is then responsible for giving you notice and obtaining consent, including verifiable consent from a parent or guardian for a child. Please send requests about Customer Data to the Customer first.
Consent and legitimate uses. Where we rely on your consent, we will ask for it with a clear notice of the personal data and the purpose. You can withdraw consent at any time, as easily as you gave it, by emailing info@wiseapp.live. Withdrawal does not affect processing that took place before it. We may also process personal data without consent for the legitimate uses the DPDP Act allows, such as where you have voluntarily provided it for a specified purpose, or to comply with law.
Children. We process a child's personal data only with the verifiable consent of a parent or lawful guardian, obtained by us or by the Customer. We do not direct targeted advertising at children. We do not track or monitor their behaviour, except as needed to provide educational services and keep them safe, as the DPDP Rules allow. We do not process children's data in any way likely to harm their well-being.
Your rights. As a Data Principal, you have the right to:
To use these rights, email info@wiseapp.live. The DPDP Act also gives you duties, such as not providing false information and not filing frivolous complaints.
Retention. We keep personal data only while it is needed for the purpose it was collected for, or as the law requires, as set out in Section 8. We then erase it.
Data breaches. If a personal data breach occurs, we will inform affected individuals and the Data Protection Board of India as the DPDP Act requires. For Customer Data, we will notify the Customer as set out in our DPA.
Transfers outside India. Customer Data for accounts hosted in India is stored in India. Some personal data is processed outside India, including in the United States and the European Economic Area, as described in Sections 5 and 7. We will not transfer personal data to any country the Central Government has restricted.
Grievance Officer. If you have any concern about how we handle your personal data, please contact our Grievance Officer. We will address your grievance as soon as possible, and in any event within one month.
If you are not satisfied with our response, you can complain to the Data Protection Board of India.