Privacy Policy for Wapi

Effective Date: February 10, 2026

This Privacy Policy explains how Wapi ("Wapi," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the Wapi mobile application and related services (the "App").

By using the App, you agree to this Privacy Policy. If you do not agree, please stop using the App.

1. Who We Are

Wapi operates the App and is responsible for how your personal information is handled under this Privacy Policy.

For privacy questions or requests, contact us at [email protected].

2. Information We Collect

We collect the following categories of information:

A. Account and Profile Information

• Account identifiers and login details from authentication services.
• Your display name, profile photo/avatar, and email address (if provided).
• Basic profile information received from sign-in providers such as Google or Apple.

B. Circle and Social Information

• Circle details you create or manage (for example, circle name, members, and settings).
• Invitation and membership information, including invite codes and join actions.
• Member aliases and related in-app preferences.
• Event information you create in circles (for example, title, time, notes, links, and place details).

C. Location and Device Status Information

• Location information when you choose to use location features.
• Battery status information if you enable device status sharing.
• Timestamps tied to status updates.

D. Device, Usage, and Diagnostic Information

• Device and app details (for example, operating system, device model, app version, and similar identifiers).
• App usage information (for example, screens viewed and feature interactions).
• Crash and error reports.
• IP address and session-related technical data needed for service operation and security.

E. Subscription and Purchase Information

• Subscription status, entitlement details, and purchase metadata from app stores and our subscription management partner.
• We do not receive or store your full payment card number.

F. Communications

• Information you send when contacting us (for example, support emails and attached details).
• If you contact us from the App, your message may include device or app version details you choose to send.

3. How We Collect Information

We collect information:

• Directly from you when you create an account, update your profile, create circles, or use App features.
• Automatically when you use the App (for example, usage logs, crash reports, and status updates).
• From third-party providers you choose to use (for example, sign-in providers, app stores, and subscription services).

4. How We Use Information

We use personal information to:

• Provide and operate the App.
• Authenticate users and secure accounts.
• Enable circle features, invitations, member visibility, and event management.
• Provide location and device status sharing features you choose to use.
• Deliver push notifications related to App activity.
• Process and manage subscriptions and premium access.
• Detect abuse, investigate incidents, maintain reliability, and improve the App.
• Respond to support requests and communicate important service or policy updates.
• Comply with legal obligations and enforce our Terms.

5. Permissions and Optional Features

Some features require device permissions. You can grant or revoke these permissions at any time in your device settings.

• Location: used to provide live and background location-sharing features.
• Camera: used to scan QR invitation codes.
• Push notifications: used to send circle and event updates.
• Calendar: used only if you choose to add events to your device calendar.
• Clipboard/Share: used when you copy or share invitation codes and links.

6. Legal Bases for Processing

Where required by applicable law (including in the EEA/UK), we process personal information under one or more of these legal bases:

• Contract: to provide the App and requested features.
• Consent: for optional permissions and features (for example, location, camera/QR scanning, push notifications, and calendar access).
• Legitimate interests: to protect the App, prevent misuse, improve performance, and support users.
• Legal obligations: to comply with applicable law and lawful requests.

You can withdraw consent for permission-based features at any time through your device settings.

7. How Information Is Shared

A. Sharing with Other Users

Because Wapi is a social circle app, information you choose to share in circles may be visible to members of those circles. This may include profile details, location/status information, and event content.

B. Service Providers and Partners

We share information with service providers that help us run the App, such as:

• Cloud backend, authentication, and storage providers (for example, Supabase).
• Mapping and geocoding providers (for example, Mapbox).
• Push notification infrastructure providers (for example, Firebase Cloud Messaging and Apple Push Notification services).
• Crash reporting and analytics providers (for example, Sentry and PostHog).
• Subscription and billing management providers (for example, RevenueCat, Apple App Store, and Google Play).
• Social login providers (for example, Google and Apple).

These providers process data on our behalf or under their own terms when they act as independent providers (for example, app stores and sign-in providers).

C. Legal and Business Transfers

We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or asset transfer.

8. International Data Transfers

Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards for international data transfers.

9. Data Retention

We keep personal information for as long as needed to provide the App, maintain legitimate business records, comply with legal obligations, and resolve disputes.

In general:

• Account and circle data are retained while your account is active.
• If you delete your account, we remove your owned circles, remove your memberships from other circles, and delete your account profile and authentication record, subject to limited retention needed for legal, security, fraud-prevention, or backup purposes.
• Some provider logs and analytics data may be retained according to provider retention schedules.

10. Your Choices and Privacy Rights

Depending on your location, you may have rights to access, correct, delete, export, or object to certain processing of your personal information.

You can also:

• Manage location, camera, push, and other permissions through device settings.
• Use in-app controls to manage sharing behavior.
• Request account deletion from within the App or by contacting us.

If you submit a privacy request, we may need to verify your identity before processing it.

California Notice

If you are a California resident, you may have rights under California privacy laws. We do not sell personal information for money. You may request access to, deletion of, or correction of your personal information, subject to legal exceptions.

11. Security

We use reasonable technical and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children's Privacy

The App is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate action.

13. Third-Party Services

The App may contain links to or integrations with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and post the revised policy in the App or on our website.

15. Contact Us

For privacy questions, requests, or complaints, contact:

• Email: [email protected]

Please include enough detail for us to identify your account and process your request.