Last updated 17 August 2026
The app has no accounts and no analytics. Your screenshots and any file you import are read on your phone and are never uploaded. The one thing it keeps is a random identifier for your device, and only if you were given a complimentary code and choose to enter it — which is also the only reason it contacts a server of its own.
This website is a separate matter: it uses Google Analytics, and only if you accept the notice on your first visit. Declining sets no cookies.
Wren is made by Spencer Fields, a sole trader established in the United Kingdom, at Lytchett House, 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, BH16 6FA. For anything in this policy, write to Apps [at] spencerfields [dot] com.
Nothing, with one exception, and only if you choose it: entering a complimentary code sends that code and a random identifier for this installation to a server run by Wren. Nothing else about you is collected, stored or shared. No account, no sign-in, no analytics, no advertising identifier, no crash reporting.
If you never enter a code — and almost nobody does, because codes go to named people — Wren never contacts a server of its own at all.
Read on the phone and never uploaded. The text recognition runs from a model inside the app itself, so reading a screenshot works with the network switched off and the image never leaves your device. The same holds for a CSV, GPX, KML or Takeout export you import.
Two things, and neither is a screenshot.
The first is the name of a place, and the city you confirmed it is in. Turning "Dishoom Shoreditch" into a coordinate means asking a map, and Android's own geocoder answers over the network — on most phones that is Google, under Google's privacy policy, exactly as it is for any app that looks up an address. Nothing else goes with it, and nothing goes at all until you ask for a lookup.
The city is one you chose in the app. Wren never asks where your phone is — there is no location permission, deliberately. It only asks where a named place is.
The second is a complimentary code and a random identifier, described next.
Some people are given a code that unlocks paid features without paying. When a code is entered, two things are sent to a Cloudflare Worker run by the developer: the code, and a random identifier for this installation. The pair is stored so a code can be used once and not again — which is the whole reason a server is involved, since a phone has no way of knowing a code has already been used on a different phone.
The identifier is generated by Wren and derived from nothing: not your Android ID, not the advertising identifier, nothing about the hardware or your account. It identifies this installation and nothing beyond it. Uninstalling the app removes it, so a fresh install is a fresh identifier.
A small number of codes also grant administrative access to the developer's own code console. Only those are re-confirmed with the server, about once a day, so that such a code can be withdrawn. A re-confirmation sends the same two things and nothing more. An ordinary code is checked once, when it is entered, and never again.
If a code is rejected, the originating IP address is recorded on its own for up to an hour, so the endpoint cannot be hammered with guesses. It is not stored alongside the code or the identifier, it is not stored at all when a code succeeds, and it is deleted automatically.
The list is written to a file on your phone and handed to the app you pick. That hand-over is local: nothing is uploaded, and Wren is not involved once the other app has the file.
Google My Maps is the exception worth naming. Wren saves the file through Android's own save dialog, then opens google.com/maps/d/ in your browser. What happens next is your browser, in your own Google session — Wren uploads nothing and cannot see it.
Exactly one: internet access, needed for the place lookup and, if you enter one, the code. No location, no camera, no contacts, and no access to files beyond the ones you hand it through the system picker.
If you redeemed a complimentary code, the signed reply confirming it. This is what lets Wren check your access offline. And the list of places you are working on, until you publish or clear it.
These are ordinary app storage on your phone, covered by your device's own encryption. Deleting Wren deletes them.
Wren does not connect to Instagram, TikTok or any other service. It has no access to your accounts on them and does not read, scrape or download anything from them. It only reads screenshots you have taken and chosen to share with it.
Wren is not directed at children and collects no personal data from anyone, of any age.
Under the UK GDPR and the EU GDPR you have rights of access, correction, erasure, restriction, objection and portability over personal data held about you.
If you have never entered a complimentary code, Wren holds nothing at all about you, so in practice there is nothing to access, correct or erase. If you have, the one record is the code you used and the random device identifier that came with it, kept so the code cannot be used again. Write to the address above and it will be deleted, or sent to you, within one month. Deleting it releases the code for someone else.
If you are in the United Kingdom, you may also complain to the Information Commissioner's Office.
This site uses Google Analytics to count visits and see which pages people read, and Microsoft Clarity to see which parts of a page are read and where people get stuck. They are the only third parties on the site, there is no advertising, and nothing here is used to build a profile of you or to follow you elsewhere.
Nothing loads until you agree. Analytics cookies are not strictly necessary, so under the Privacy and Electronic Communications Regulations they need your consent first. A notice appears on your first visit with Accept and Decline. Until you choose, Google Consent Mode holds every storage type at "denied" and neither the Google nor the Microsoft script is loaded at all — so declining sets no cookies and sends both of them nothing. Your choice is kept in your browser's local storage so the notice appears once.
To change your mind, clear this site's data in your browser and the notice will appear again.
If you accept, Google receives the ordinary analytics signals — the pages you view, roughly where you are, and what sort of device and browser you use — and sets cookies to tell one visit from the next. Google acts as a data processor for that, and its handling is governed by Google's privacy policy. Advertising and personalisation signals stay denied whatever you choose.
Microsoft Clarity goes further than counting. If you accept, it records how a page is scrolled and clicked during your visit and replays those interactions, and it sets its own cookies to tell one visit from the next. Anything typed into a form field or chosen from a drop-down is masked before it leaves your browser: Clarity masks these in every mode it offers and provides no way to switch that off. On the setting in use here, numbers and email addresses appearing anywhere on the page are masked as well. Microsoft acts as a data processor for this, and its handling is governed by the Microsoft privacy statement. Because a recording of a visit is not aggregate information, it is not something that may be run without asking, which is why the choice is offered rather than assumed.
Separately, the hosting provider keeps ordinary server access logs, which is normal for any website and is not something Wren reads or uses.
None of this applies to the app. Wren the Android app contains no analytics of any kind and never has. This section is about this website only.
If this policy changes, the date at the top changes with it. Material changes will be noted on this page rather than made quietly.