Privacy Policy
Last updated: October 2, 2026
This policy explains what personal information WinguLab ("we", "us") collects when you use wingulab.com, why, and the choices you have. WinguLab is the controller of this information.
1. What we collect
| Information | Examples | Why |
|---|---|---|
| Account details | Username, email address, password (stored only as a secure hash), sign-in method (email or Google) | To create and secure your account and contact you about it |
| Learning and exam activity | Lessons and tasks completed, exam sessions, answers and task results, scores, lab machine sessions | To provide lessons, grade tasks, show results, and enforce trial limits |
| Subscription details | Plan, status, renewal dates, Stripe customer ID | To give you the access you paid for |
| Technical and security data | IP address, browser type, sign-in times, failed sign-ins, activity in lab machines | To keep the service secure, prevent abuse and fraud, and fix problems |
| Messages to us | Emails you send to support | To answer you |
We do not receive or store your payment card number; Stripe collects it directly. We do not sell your personal information and do not use it for advertising.
2. Service providers we use
We share only the information each provider needs to do its job:
- Stripe: payment processing and subscription billing.
- Hetzner: hosting of the website and database (servers in Germany).
- Cloudflare: domain name (DNS) service.
- Google: sending account emails (verification, password reset); "Sign in with Google" if you choose it; and the Gemini AI service, which receives the text of tasks you missed and the related check results to write explanations. We do not send your name or email address to the AI service.
- Lab machines run on WinguLab-operated servers in the United States. They are deleted when your session ends.
Because of this, your information may be processed in the United States, Germany, and other countries where these providers operate.
3. Legal bases (for users in the EU/UK)
We process your information to perform our contract with you (providing the service), for our legitimate interests (security, fraud prevention, improving the service), to meet legal obligations (for example tax records), and with your consent where we ask for it.
4. How long we keep it
- Lab machines: deleted at the end of each session.
- Account, progress and results: kept while your account is open. Deleted within 30 days after you ask us to delete your account.
- Payment and invoice records: kept as long as tax and accounting law requires.
- Security logs: kept for a limited period for security and abuse prevention, then deleted.
5. Your choices and rights
You can ask us to access, correct, export, or delete your personal information, or object to certain processing, by emailing support@wingulab.com from the address on your account. We will respond within 30 days. Depending on where you live (for example the EU, UK, or California) you may have further rights under local law, including the right to complain to a data protection authority. We do not sell or share personal information for targeted advertising.
6. Security
We protect your information with encrypted connections (HTTPS), hashed passwords, access controls, isolated lab machines, and private encrypted links between our servers. No system is perfectly secure, so please use a strong, unique password.
7. Age
WinguLab is for people aged 18 or older. We do not knowingly collect information from anyone younger. If you believe a minor has created an account, contact us and we will delete it.
8. Cookies
We use only a strictly necessary sign-in cookie. See our Cookie Policy.
9. Changes
We may update this policy. If a change is significant we will notify you by email or on the site.
10. Contact
WinguLab · support@wingulab.com · wingulab.com