Privacy Policy

1. Who We Are

Wolk is operated by Marco Carotenuto, an individual developer based in Italy. For privacy-related questions or requests, contact us at privacy@wolk.website.

Wolk is designed for real estate professionals in the United States and Canada. By using the app, you agree to the practices described in this policy.

2. Controller and Processor: Two Different Roles

Wolk plays two distinct roles, and which one applies depends on whose data is involved.

For your own account — your name, email, subscription, the walkthroughs you record — Wolk is the controller, and this policy governs it.

For the people you record in Wolk CRM — your buyers, sellers and leads — your agency is the controller and Wolk is only your processor. We hold that data on your instructions and do nothing else with it. The terms governing that relationship, required by Article 28 of the GDPR, are in the Data Processing Agreement, and the providers involved are listed at Subprocessors.

The practical consequence: the privacy notice those people receive, and the consent they give, are your agency’s responsibility, not ours. Wolk gives you the tools — an append-only consent register that stores the signed form, plus per-contact export and erasure — and a notice template you can adapt.

3. Information We Collect

We collect information that is necessary to run the app. We do not sell your personal information and we do not use it for advertising or cross-app tracking.

What we do not collect

4. How We Use Your Information

We use the information above solely for app functionality:

• Authenticating you and maintaining your account
• Storing and syncing property tours across your team
• Generating listing kits from your transcript and photos
• Sending push notifications when a kit is ready (if you opt in)
• Managing subscriptions and enforcing plan limits (free tier, seat caps)
• Responding to support requests

We do not use your account data for third-party advertising, our own marketing emails, or personalization beyond what the app requires to work. Our website and web app use Google Analytics for aggregate, anonymized product-usage analytics — see Section 4.

5. Third-Party Services

We share data with trusted service providers only as needed to operate Wolk. Each provider processes data under their own privacy policy:

Supabase

Hosts our database, authentication, file storage, and server-side functions. Stores your profile, tours, transcripts, photos, and device tokens. Supabase Privacy Policy

RevenueCat

Manages in-app subscriptions. Receives your organization ID and purchase history from Apple to sync entitlements. RevenueCat Privacy Policy

Anthropic

Processes your walkthrough transcript and property photos to generate listing copy. Data is sent from our Supabase server. The app never contacts Anthropic directly. Anthropic Privacy Policy

Apple

Provides Sign in with Apple, MapKit address autocomplete, App Store payments, and push notification delivery (APNs). Apple Privacy Policy

Google Analytics

We use Google Analytics 4 on wolk.website and app.wolk.website to understand how visitors use our site and web app: pages viewed, approximate location (country/region), device and browser type, and referral source. Google Analytics uses cookies to do this. These cookies are only set after you accept them in the cookie banner; you can decline, and you can change your choice later by clearing your browser cookies or local storage for this site. Your choice and the time you made it are recorded on your device so we can show we asked before setting analytics cookies. Data is processed by Google under its own Privacy Policy. We do not use Google Analytics to build advertising profiles, and we do not share this data with ad networks.

We do not authorize these providers to use your personal information for their own marketing or advertising purposes.

6. Data Retention

We keep your information for as long as your account is active and as needed to provide the service:

• Property tours, transcripts, photos, and generated content: retained while your account exists, so you can access your tour history and listing kits.
• Account and profile data: retained until you delete your account or request deletion.
• Push notification tokens: retained until you revoke notification permission, sign out, or delete your account.
• Subscription records: retained as required for billing, tax, and fraud prevention, in line with Apple and RevenueCat retention practices.
• Appointments you sync to your calendar: optional and off by default. If you turn it on, appointment text and property addresses are written to a “Wolk” calendar on your device and are then governed by your own calendar account, not by us. Turning it off removes that calendar.
• CRM records and consent documents: retained for as long as your agency keeps them. Your agency sets the retention period for the people in its CRM, and can delete any contact — together with its consent register and the scanned forms — at any time. Consent entries are deliberately not editable, so that the evidence of a consent survives its later withdrawal.

When you request account deletion, we delete your personal data and the associated files in storage within a reasonable period, except where we must retain certain records for legal obligations. Encrypted backups held by our hosting provider expire on their own schedule and are removed within 30 days.

7. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information (e.g. update your name in the app profile)
• Delete your account and associated data
• Opt out of push notifications via iOS Settings or in-app notification preferences
• Manage subscriptions via your Apple ID subscription settings

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email privacy@wolk.website. We will verify your request before responding.

European users

If you are in the European Economic Area or United Kingdom, you may have rights under GDPR, including access, rectification, erasure, restriction, portability, and objection. Contact us at privacy@wolk.website to exercise these rights.

Data about the people in your CRM

If you are asking about data an agency holds about you as a buyer or seller, that agency — not Wolk — is the controller, and your request should go to them. Wolk gives every agency built-in tools to answer: each contact can be exported in a structured, machine-readable format, and deleted outright together with its consent register and any scanned consent forms. If an agency needs our help to answer your request, we assist them under the Data Processing Agreement.

8. Children's Privacy

Wolk is not directed at children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International Data Transfers

Wolk is operated from Italy, but our service providers (Supabase, RevenueCat, Anthropic, Apple, Google) may process data in the United States and other countries. When data is transferred outside your country, we rely on appropriate safeguards such as standard contractual clauses or the EU-U.S. Data Privacy Framework where applicable.

10. Security

We take reasonable measures to protect your information, including:

• HTTPS encryption for all network communication
• Row-level security in our database so teams only access their own data
• Server-side API keys (e.g. Anthropic) that never reach the client app
• On-device speech transcription so raw audio never leaves your phone

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we work to protect your data using industry-standard practices.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are material, we will provide additional notice within the app or by email where appropriate. Continued use of Wolk after changes take effect constitutes acceptance of the updated policy.