1. Who is responsible
W’sup decides why and how your data is used, and is the one responsible for it. For anything about your data, write to founders@heywsup.life.
2. What we collect
- You and your sign-in: the email of your Google account, the name you give us, your age, gender, the username you pick, what you do for work, and the character you choose as your picture.
- Where you are: the area or city you set, and the spot you pick on the map when you post a plan. We use it to find people near you. We do not follow your location in the background.
- Your plans: the words you write, the activity, the day and time, how far you will go, and the place.
- Matches and chats: who you matched with, your yes or no, your chat messages, how a meetup went (your rating), and any report or block.
- What you are up for: the activities you ask to hear about (with the days, time of day and distance you choose), so we can tell you when a group plan for one of them is posted near you.
- Group plans: a group you post or ask to join, who asked, who was invited, who is in, and the messages in the group chat. Group chats are not locked: our server can read them, so we can look at a chat if someone reports it.
- Your phone: a notification token so we can send you notifications. We also keep basic error records to fix problems.
- Invites: your personal invite code, and the first name and picture of people who join with it.
- If you use X: your X account number and handle, the messages you send our account, and the email you verify with it.
- On the website: if you join the waitlist, your email, name, city, and character.
3. Why we use it
- To run W’sup: understand your plan, find people near you who want the same, let you chat, and send notifications.
- To keep people safe: check reports, stop people who harm others, and stop two people being matched again after a block or report.
- To keep W’sup working: fix errors and stop abuse and spam.
- To follow the law, and to answer lawful requests.
We do not use your data for advertising and we do not sell it. We do not use your chats to train AI.
4. Who sees what
- A person you might match with sees your first name (if you gave one), the character you picked, the activity, the day, and a rough distance. After you both say yes, they also see your age, work, and the area you gave.
- Only the two people in a chat can see the chat, and the W’sup team if one of you reports it or if the law requires.
- Messages in the website’s private room are locked, so nobody outside the chat can read them. Our server makes each person’s keys when the room is created and locks them with that person’s private passcode as soon as it is given to them. We do not read your messages.
- A group plan shows your first name to the host when you ask to join, and to the people in the group once you are in. The exact place of a group is shown only to the host and the people who are in. Only the host and the people who are in can read a group chat, and the W’sup team if someone reports it or if the law requires.
- Your email is not shown to other people.
5. Services that help us run W’sup
These companies handle data for us, only to provide their service:
- Google Cloud and Firebase: sign-in, our database, our servers, and sending notifications. Our data is stored in India (Mumbai).
- Google AI (Gemini on Vertex AI): reads the text of your plan and your city, to understand it. We do not send your email.
- Google Maps Platform (Places): finds the places you search for.
- Resend: sends the sign-in code to your email when you use W’sup through X or the website.
- X: carries your messages with our account, if you use W’sup through X.
- Vercel: hosts our website.
Some of these may process data outside India. We choose providers that protect data, and we only share what is needed.
6. How long we keep it
- Your account, plans, matches, and chats are kept while your account exists. Group chat messages are deleted about 90 days after they are written.
- When you delete your account we remove your profile, plans, matches, chats, notification tokens, and username within 30 days. See how to delete your account.
- We keep a small safety record (who reported whom, any messages attached to a report, and blocks) for up to 24 months, so people who harm others cannot simply start again. Records the law requires us to keep are kept for as long as the law says.
7. Your rights
Under the DPDP Act you can:
- ask what data we hold about you, and get a copy
- correct it (you can change most of it yourself in your profile)
- have it erased by deleting your account
- complain about how we handled it, and name someone to act for you if you cannot
Write to founders@heywsup.life. We reply within 30 days. If you are not happy, you can complain to the Data Protection Board of India.
8. Children
W’sup is only for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think a young person is using W’sup, tell us at founders@heywsup.life and we will act on it straight away.
9. Keeping it safe
Connections are encrypted, and only our servers can read the database. Phones and the website never talk to the database directly. No system is perfectly safe. If a breach affects you, we will tell you and the authorities as the law requires.
10. Changes
If we change this notice in a way that matters, we will tell you in the app or by email first. The date at the top shows the current version.