Privacy

Effective 9 October 2026.

Crafted Solutions Limited (Craft Applied, Isle of Man) is the controller for Headwires. This policy covers the Headwires learning app and this website. Headwires is for people aged 18 and over.

This website

These pages are static. They do not ask you to sign in, they do not run analytics, and they do not set cookies. Writing to contact@headwires.io sends us whatever you put in the message.

The app, without an account

You can read lessons without signing in. Completed lesson ids are kept on the device. In a browser that has local storage, that list is stored under the key headwires.progress.v1. Where local storage is not available, the list stays in memory for the session.

Account

Sign-up asks for an email and a password, and a name if you give one. If you leave the name blank, the app uses the part of the email before the @. Accounts are handled by Better Auth. The server stores the account, a session token, when the session expires, and may store the IP address and user agent of the session. A welcome email is sent to the address you sign up with.

When you are signed in, completed lesson ids are also stored on our server, with the syllabus id, the time, and an optional extra state field. Local and server lists are combined.

Feedback

Feedback needs a signed-in account. A thumbs-up or thumbs-down is stored with the lesson and screen it came from. A thumbs-down needs a short comment. You can add a contact email. A thumbs-up does not store comment text.

Analytics

The app can send product analytics to PostHog when that service is configured: lesson started, lesson completed, lesson feedback, and checkout started. It can attach your account id, name, and email. If PostHog is not configured, those events are not sent off the device.

Optional subscription

Subscribe is optional. Lessons are not locked behind it. If checkout is turned on, payment is handled by Polar, and we store an entitlement for your account (product, status, and Polar references). The soft-launch app can also run a sandbox checkout that does not charge a card.

What we do not do

There are no ads. We do not sell personal data. We did not find a crash-reporting SDK in the app.

Encryption

The live service is meant to be reached over HTTPS, so account, progress, and feedback traffic is encrypted in transit.

Deletion

Email contact@headwires.io from the address on the account and ask us to delete it. Deleting the account removes the account and the progress tied to it. Feedback rows can remain with the account link cleared, so the comment may stay without your user id. There is no delete button in the app yet. See Support.