TL;DR: We take your privacy seriously. We only collect what we need to make Whacha work for you, we never sell your data, and you can delete everything anytime.
1. Information We Collect
1.1 Information You Provide
When you use Whacha through WhatsApp, we collect:
- Phone Number: Your WhatsApp phone number to identify your account
- Name: The name you share with us for personalization
- Messages: The text and voice messages you send to Whacha to create reminders, lists, and notes
- Content: Reminders, lists, notes, and documents you create through Whacha
- Timezone: Your timezone to send timely reminders
1.2 Automatically Collected Information
We automatically collect minimal technical data:
- Usage Data: How you interact with Whacha (features used, message frequency)
- Device Information: Basic information about your WhatsApp client
- Log Data: Timestamps of your interactions for troubleshooting
1.3 Google Calendar Integration
If you connect your Google Calendar, we collect:
- Calendar event details (title, time, attendees) to send you reminders
- OAuth tokens to access your calendar (stored securely)
2. How We Use Your Information
We use your information exclusively to:
- Provide Services: Create and send reminders, manage lists, store notes
- Improve Experience: Understand natural language, personalize responses
- Send Notifications: Deliver reminders and digests at your preferred times
- Customer Support: Help you when you have questions or issues
- Service Improvement: Analyze usage patterns to make Whacha better
- Security: Detect and prevent fraud, abuse, and security issues
3. Data Processing and AI
Whacha uses artificial intelligence (AI) to understand your messages and provide smart features:
- Natural Language Processing: We use OpenAI's GPT models to interpret your requests and extract structured information (dates, times, tasks)
- Voice Transcription: Voice messages are transcribed using Whisper AI to convert them to text
- Data Sharing with AI Providers: Your messages are sent to OpenAI's servers for processing. OpenAI's data usage policies apply to this processing
- Retention: We minimize data sent to AI providers and don't store your data on their servers beyond what's necessary for processing
4. Data Sharing and Disclosure
4.1 We DO NOT:
- ❌ Sell your personal information to anyone
- ❌ Share your data with advertisers
- ❌ Use your data for marketing purposes beyond our own services
- ❌ Read your messages for any purpose other than providing Whacha's functionality
4.2 We DO Share With:
- AI Service Providers: OpenAI for natural language processing (as described above)
- Cloud Infrastructure: AWS/CloudFlare for hosting and data storage
- WhatsApp: Meta Platforms to send and receive messages through their platform
- Legal Requirements: When required by law or to protect our rights and users' safety
5. Data Security
We implement industry-standard security measures:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest
- Access Controls: Strict employee access controls - only authorized personnel can access user data for support purposes
- Regular Audits: We regularly review our security practices
- Secure Infrastructure: Our servers are hosted on secure, compliant cloud platforms
6. Data Retention
We retain your data as follows:
- Active Account Data: Kept while your account is active
- Deleted Content: Permanently deleted within 30 days
- Logs and Analytics: Aggregated, anonymized data may be retained for up to 2 years
- Account Deletion: All your data is permanently deleted within 30 days of account deletion
7. Your Rights and Choices
You have the following rights:
- Access: Request a copy of your data anytime
- Correction: Update or correct your information
- Deletion: Delete your account and all associated data
- Export: Download your data in a portable format
- Opt-Out: Disable specific features like digests or calendar notifications
- Withdraw Consent: Revoke Google Calendar or other integrations
To exercise these rights, message us on WhatsApp or email support@heywhacha.com
8. Children's Privacy
Whacha is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately.
9. International Data Transfers
Your data may be processed in countries outside your residence, including the United States and India. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Sending a message through WhatsApp
- Updating the "Last Updated" date at the top of this policy
- Posting a notice on our website
11. Contact Us
If you have questions about this Privacy Policy or our practices, please contact us:
Your Trust Matters: We built Whacha because we wanted a better way to remember things, not to harvest data. Your privacy is not a product feature - it's a core value. If you ever have concerns, please reach out. We're here to help, not hide.