Privacy Policy

Last updated 14 June 2026

This policy explains how Fwipit Pty Ltd (ABN 21 696 005 795), trading as Wonton (“Wonton”, “we”, “us”), handles personal information. We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Who this covers

This policy covers creators: people who visit our sites and people who sign up to use the Wonton studio. It does not create a relationship with the buyers of apps that creators publish. Buyers do not have Wonton accounts, and we do not collect buyer accounts or buyer identities. What a buyer does inside a published app stays on the buyer’s own device.

What we collect

Waitlist. If you join the waitlist, we collect your email address and the source of the signup.
Account. If you sign up for the studio, we collect your email and basic account identifiers. Sign-in is handled by our authentication provider, Clerk.
Billing. If you subscribe, payment is handled by Lemon Squeezy as merchant of record. Lemon Squeezy collects and holds your payment details. We receive a record of your subscription status and a customer identifier; we do not see or store your full card details.
Your apps. The HTML files and brand details you upload to package into apps.
Analytics. We use PostHog to understand how our sites and studio are used (pages viewed, actions taken, conversion through signup). This may include usage events, approximate location from your IP, and device and browser information.
Technical logs. Our infrastructure provider, Cloudflare, processes standard request data (such as IP address and request metadata) to serve and protect the sites.

Why we use it

To provide and run the service, to let you sign in and manage your apps, to operate your subscription, to understand and improve how the product is used, to communicate with you about the service and your waitlist or account, and to keep the service secure and lawful.

We do not sell your personal information. We share it only with the service providers that help us run Wonton, each acting on our behalf:

Cloudflare (hosting, storage, security, and serving),
Clerk (creator sign-in and account management),
Lemon Squeezy (subscription billing as merchant of record), and
PostHog (product and site analytics).

We may also disclose information where required by law.

Where it is stored

We use Cloudflare’s global network and the providers above, some of which store and process data on servers outside Australia. By using the service you consent to your information being handled in those locations. We take reasonable steps to use providers that protect personal information.

Cookies and analytics

We and our analytics provider use cookies or similar technologies to measure usage and improve the product. You can control cookies through your browser settings. Disabling them may affect parts of the studio.

Security

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Retention

We keep personal information for as long as needed to provide the service and for a reasonable period afterwards, or as required by law. You can ask us to delete your account information.

Your rights

You can ask us to access or correct the personal information we hold about you, or to delete it, by emailing hello@getwonton.com. We will respond within a reasonable time. If you are not satisfied with how we have handled your information, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Children

The service is not directed at children and is intended for use by adults running their own stores.

Changes

We may update this policy. We will post the updated version here with a new date.

Contact

Privacy questions or requests: hello@getwonton.com.