Effective October 4, 2026
Wild is made by Hungry, Foolish ("we", "us"). This policy covers the Wild apps for iPhone and Mac and this website. Wild is built so that we hold as little about you as possible. This page says exactly what that little is.
The first time you open Wild, your device creates your identity: a cryptographic key pair. The private key never leaves your devices. Your profile name and picture, your contact list, your message history, the files you send and receive, and your settings are all stored on your devices and nowhere else, unless you choose to copy them somewhere yourself.
When you pair another device, your devices copy this information between themselves directly.
Wild exists to share things with people you choose. Your contacts' devices receive:
Whatever a contact receives is stored on their devices and is theirs to keep. Deleting something on your side does not remove it from theirs, and we have no way to remove it for you.
Relays. Devices connect to each other directly whenever the network allows it. When it doesn't, the encrypted traffic is passed along by a relay: ours at relay.hungryfoolish.work, or, when ours is unavailable, the public relays run by n0, who make the networking library Wild is built on. A relay can see your device's public key, your IP address, which devices it is passing traffic between, and how much and when. It cannot read the traffic itself. Relays don't store what they pass along.
Discovery. So your other devices and your contacts can find a device by its key, each device publishes its public key, together with the relay or network address it can be reached at, to a discovery service run by n0. On a local network, a device may also announce its public key so nearby devices can find it.
Push notifications. When you set Wild up on a device, the app gets a push token for that device from Apple and registers it with our push server. The server stores the token, your account's public key, the app's identifier, and the time the registration was last updated. That is all it stores. When a contact pokes you, their public key, your public key and their display name pass through the server so it can ask Apple to deliver the notification. We don't keep a history of pokes, only a timer of a few seconds that stops the same person poking you over and over. Apple delivers the notification under its own privacy policy.
Apple Music. On a Mac, if you give Wild access to Apple Music, it looks up the song you are playing in Apple's catalog to find artwork and a link. That request goes to Apple. If you don't give access, no lookup is made.
Server logs. Like any server, ours keep routine operational logs, which can include IP addresses, public keys and the time of a request. We use them only to keep the servers running and to stop abuse, and we don't keep them longer than we need for that.
We don't collect your name, email address, phone number, location, address book, or the content of anything you send. The apps contain no advertising, no analytics and no third-party tracking code. We don't sell personal information or share it for advertising, and we have nothing of that kind to sell.
Each is optional. You can change them at any time in your device's settings.
This site sets no cookies and loads no analytics or third-party scripts. The web server sees your IP address and browser details when you load a page, as every web server does.
The directory. Unless you turn off List Me on wild.computer in Wild's settings, which is on to begin with, your devices send this site your account as they hold it: your public key, name, picture, status line, the kind of each of your devices and when it was last here, and the public keys of your contacts. All of it is shown publicly at wild.computer/people, including which of your contacts are listed too, so people who know you can find you and ask to be your contact. Turning it off removes the listing; turning it on sends it again.
Because your information lives on your devices, you delete it there: remove a message, a contact, or the app itself. A push registration is replaced when the device registers again and removed when Apple reports the token is no longer valid, or when you remove your account from the device. You can also email us your account's public key and we will delete any registrations stored for it.
We cannot recover anything for you. If you lose every device that holds your key, we have no copy of the key or of your data.
If we are legally required to hand over information, the most we could provide is what this page lists: push registrations and whatever is in the server logs at the time. We have no messages, files, contact lists or keys to give.
Wild is not directed at children under 13, and we do not knowingly collect personal information from them.
Depending on where you live, you may have the right to ask what personal information we hold about you, to get a copy, to have it corrected or deleted, or to object to how it is used. The only information we hold that is tied to you is the push registration described above, keyed by your account's public key. Write to us with that key and we will tell you what we have or delete it.
If Wild changes in a way that changes this policy, we will update this page and the date at the top. If the change is significant, we will say so in the app or on this site before it takes effect.
Questions about privacy: support@hungryfoolish.work.