TL;DR: We take your privacy seriously. We only collect what we need to make Whacha work for you, we never sell your data, and you can delete everything anytime. Whacha's use of information received from Google APIs will adhere to the
Google API Services User Data Policy, including the Limited Use requirements.
1. Information We Collect
1.1 Information You Provide
When you use Whacha through WhatsApp, we collect:
- Phone Number: Your WhatsApp phone number to identify your account
- Name: The name you share with us for personalization
- Messages: The text and voice messages you send to Whacha to create reminders, lists, and notes
- Content: Reminders, lists, notes, and documents you create through Whacha
- Timezone: Your timezone to send timely reminders
1.2 Automatically Collected Information
We automatically collect minimal technical data:
- Usage Data: How you interact with Whacha (features used, message frequency)
- Device Information: Basic information about your WhatsApp client
- Log Data: Timestamps of your interactions for troubleshooting
1.3 Google Calendar Integration
If you choose to connect Google Calendar, Whacha accesses Google user data only to provide calendar features in WhatsApp (reminders and create/delete events).
- Access: Calendar event details (title, time, description, attendees, and related event metadata); permission to create, update, and delete events on calendars you authorize; your Google account email to identify the connected account; and calendar change notifications (watch/sync) so we can update reminders when events change
- Use: Send you WhatsApp reminders for upcoming events; create or delete calendar events when you ask via WhatsApp; and keep those reminders in sync when events change. We do not use Google Calendar data for advertising, credit decisions, or unrelated product analytics
- Store: OAuth tokens (stored securely) and event fields needed to schedule and deliver notifications (such as event ID, title, and start time)
- Share: Event details needed to fulfill your WhatsApp calendar requests may be processed by our AI provider (OpenAI) solely to interpret and complete that request. We also use cloud hosting providers to store tokens and notification data. We do not sell Google user data or transfer it to data brokers or advertising platforms
You can disconnect Google Calendar in Whacha or revoke access at any time in your Google Account permissions.
2. How We Use Your Information
We use your information exclusively to:
- Provide Services: Create and send reminders, manage lists, store notes
- Improve Experience: Understand natural language, personalize responses
- Send Notifications: Deliver reminders and digests at your preferred times
- Customer Support: Help you when you have questions or issues
- Service Improvement: Analyze usage patterns to make Whacha better (this does not include Google Calendar / Google API user data, which is used only for the user-facing calendar features described in section 1.3)
- Security: Detect and prevent fraud, abuse, and security issues
3. Data Processing and AI
Whacha uses artificial intelligence (AI) to understand your messages and provide smart features:
- Natural Language Processing: We use OpenAI's GPT models to interpret your requests and extract structured information (dates, times, tasks)
- Voice Transcription: Voice messages are transcribed using Whisper AI to convert them to text
- Data Sharing with AI Providers: Your messages are sent to OpenAI's servers for processing. OpenAI's data usage policies apply to this processing
- Retention: We minimize data sent to AI providers and don't store your data on their servers beyond what's necessary for processing
4. Data Sharing and Disclosure
4.1 We DO NOT:
- ❌ Sell your personal information to anyone
- ❌ Share your data with advertisers
- ❌ Use your data for marketing purposes beyond our own services
- ❌ Read your messages for any purpose other than providing Whacha's functionality
4.2 We DO Share With:
- AI Service Providers: OpenAI for natural language processing (as described above)
- Cloud Infrastructure: AWS/CloudFlare for hosting and data storage
- WhatsApp: Meta Platforms to send and receive messages through their platform
- Legal Requirements: When required by law or to protect our rights and users' safety
5. Data Security
We implement industry-standard security measures:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest
- Access Controls: Strict employee access controls for Whacha account data. Humans do not read Google Calendar / Google API user data except with your affirmative agreement for specific data, for security investigations (for example, abuse or bugs), to comply with applicable law, or when the data is aggregated and anonymized for internal operations
- Regular Audits: We regularly review our security practices
- Secure Infrastructure: Our servers are hosted on secure, compliant cloud platforms
6. Data Retention
We retain your data as follows:
- Active Account Data: Kept while your account is active
- Deleted Content: Permanently deleted within 30 days
- Logs and Analytics: Aggregated, anonymized data may be retained for up to 2 years
- Account Deletion: All your data is permanently deleted within 30 days of account deletion
7. Your Rights and Choices
You have the following rights:
- Access: Request a copy of your data anytime
- Correction: Update or correct your information
- Deletion: Delete your account and all associated data
- Export: Download your data in a portable format
- Opt-Out: Disable specific features like digests or calendar notifications
- Withdraw Consent: Revoke Google Calendar or other integrations
To exercise these rights, message us on WhatsApp or email support@heywhacha.com
8. Children's Privacy
Whacha is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately.
9. International Data Transfers
Your data may be processed in countries outside your residence, including the United States and India. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Sending a message through WhatsApp
- Updating the "Last Updated" date at the top of this policy
- Posting a notice on our website
11. Contact Us
If you have questions about this Privacy Policy or our practices, please contact us:
Your Trust Matters: We built Whacha because we wanted a better way to remember things, not to harvest data. Your privacy is not a product feature - it's a core value. If you ever have concerns, please reach out. We're here to help, not hide.