Privacy Policy

What we collect

Account information

When you create an account: your email address, username, and a securely hashed version of your password (we never store your plain-text password).

Reminder data

When you create a Wafl (reminder): the title, description, and the specific location coordinates you choose to pin it to. This is the core data the app needs to function. You choose what you write and where you pin it — we just store it for you.

Photos and videos

If you attach a photo or video to a reminder, that file is stored securely via Firebase Storage (Google). It is only accessible to your account.

Usage patterns

We track which reminders you complete so the app can learn your preferences and make smarter suggestions (for example, noticing that you often need to pick up prescriptions). This data stays in your account and is used only to improve your own experience.

What we do not collect

• check Your real-time GPS position is never sent to our servers. Location tracking happens entirely in your browser.
• check We do not track which websites you visit outside of Wafls.
• check We do not use advertising cookies or third-party tracking pixels.
• check We do not sell, rent, or trade your personal data to any third party.
• check We do not read the content of your reminders for advertising purposes.

Third-party services

Google Maps

We use the Google Maps JavaScript API to display the map and allow location search. When you use the map, Google's standard Maps API terms apply. Google may collect anonymised usage data as part of operating their Maps platform. See Google's Privacy Policy.

Firebase (Google)

Media files you attach to reminders are stored in Firebase Storage. Firebase is operated by Google and covered under Firebase's privacy terms.

No other third parties

We don't use analytics platforms (no Google Analytics, no Mixpanel), ad networks, or any other third-party data services beyond the two listed above.

Household sharing

If you create or join a Household, other members of that household can see reminders you share with the group. Only reminders you explicitly add to the household are visible to other members — your private reminders remain private.

Data retention

Your data is stored for as long as your account is active. If you delete a reminder, it is removed from our database immediately. If you delete your account, all of your personal data — account details, reminders, and attached media — is permanently deleted within 30 days.

Your rights

You have the right to:

• check Access the data we hold about you
• check Correct any inaccurate data
• check Delete your account and all associated data
• check Object to how we process your data

If you are located in the European Union, you have additional rights under GDPR. If you are a California resident, you have rights under CCPA. To exercise any of these rights, contact us at the address below.

Security

Passwords are hashed using industry-standard algorithms and never stored in plain text. All data is transmitted over HTTPS. We follow standard security practices to protect your information, though no system is 100% immune to risk.

Children

Wafls is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this policy

If we make material changes to this policy, we will notify you by email or with a notice in the app before the change takes effect. The "Last updated" date at the top of this page will always reflect the most recent revision.