Privacy policy

1. What you give Wamda

We process what you choose to record, type, upload or connect. It can include information about you and about other people, so only add what you are entitled to use.

• Account: email address, sign-in provider (Apple, Google or email), account identifier, language and settings. Using Wamda as a guest creates a private guest account.
• Your content: recordings, transcripts, cards (the short notes Wamda makes from what you say), reminders, AI answers and drafts, saved people and places, contact details and photos you add, and what you put in shared lists and trips.
• Trips: destinations, dates, bookings, tickets, attachments, packing lists, budgets, expenses, receipts you scan, shared bills, memories and gift information you add.
• Optional wellbeing information: energy check-ins, cycle entries and, if you connect them, WHOOP recovery, sleep and activity, or daily summaries your phone works out from Apple Health (sleep, heart rate, heart rate variability, breathing, blood oxygen, wrist temperature, activity and workouts). We keep Apple Health summaries for at most 30 days, delete them when you disconnect, and never use them for advertising or sell them. Either is sent to the voice provider when you ask the voice assistant about it, only after you tap Allow on a separate question. Cycle entries are not given to our AI features. Prayer and Ramadan planning settings could reveal your religion if you turn them on.
• Support: messages, a reply address, attachments you send, and app version, device and language details.
• Usage and purchases: usage totals for plan limits, subscription status and purchase records. Your payment card is handled by the store, and we do not collect it.

2. Phone permissions and location

Wamda asks for permissions when a feature needs them: microphone for recording and voice, calendar for busy times and adding entries, contacts for filling in a person you pick (only that contact is read), and camera and photos for images you add. Face ID or Touch ID, if you turn on the lock, stays on your phone. Motion access can help tell walking from driving for travel times, if you allow it.

If you allow location, Wamda uses it for nearby places, travel times and leave reminders. If you allow it always, Wamda also uses it in the background for upcoming plans, and to notice when you arrive at or leave a place you chose. Your position can also be included when you ask Wamda to look things up near you, and is then sent to the AI provider. You can change permissions in your phone's settings.

3. Why we use it

To provide what you ask for: save and organise content, transcribe recordings, prepare answers and drafts, plan your day, send reminders, manage sharing, connect services, handle subscriptions and answer support requests. We also use technical information to secure and run the service, prevent abuse and apply limits.

We do not sell your personal information or use your private content for advertising.

4. Speech recognition and AI

Your words go to AI providers so Wamda can work. You can turn this off any time in Settings, Privacy. With it off, you can still open what you saved, new recordings wait on our servers, and AI features stay off. Turning it off stops new requests; work already sent may finish.

AI features send recordings, text, questions and the relevant Wamda content to the providers needed to perform them. We use OpenAI for transcription, organising, search, answers, drafts and voice, and Google Gemini for live voice conversations. A voice conversation can include app context and results needed to answer you. Some features use web search through the AI provider.

AI providers may retain data for operating their service, security, abuse prevention or legal reasons, under their terms. We do not promise zero retention by providers. Avoid adding what you do not want processed by them. AI output can be wrong, so check it.

5. Google sign-in and calendars

Signing in with Google provides what is needed to authenticate you, such as an identifier and email address. It does not grant calendar access. Google Calendar is a separate, optional connection with its own consent screen, and is limited to our team while Google's review is pending. Outlook connections work the same way.

With your permission, Wamda reads your Google calendar list to find your primary and selected calendars. It reads relevant events, including titles, start and end times, all-day status and availability, to show your commitments and plan around them. It creates, updates and deletes Wamda-linked events in your primary calendar, including the title, dates, time, notes, location and reminders you choose to export.

The connection requests calendar.events to read and change events, and calendar.calendarlist.readonly to identify which calendars to read. It does not ask to administer your Google account or change your calendar list.

Calendar requests and token refreshes go directly between your phone and Google. Tokens are stored in your phone's protected keychain. Wamda keeps identifiers for entries it creates, so it can update or remove them, alongside the Wamda content you chose to export. It does not upload a copy of your calendar to our servers.

Event titles stay on your phone. When you use Ask Wamda, your phone can send the start and end times of your calendar entries to our server, without their titles, so Wamda can tell when you are busy. If the calendar planning setting is on, those times go to the AI provider answering you. There is one exception, only after you tap Allow on a separate question in the app: when you ask the voice assistant about your calendar on a call, the event names, times and places it needs go from your phone to the voice provider (Google Gemini or OpenAI) to answer you. You can turn this off in Settings, Privacy. What the assistant says back is kept in your Ask history under your history settings.

We do not sell Google user data, use it for advertising, transfer it to data brokers or use it to train general-purpose AI models. Wamda's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnect in Settings, Integrations. This removes the saved tokens from your phone and asks Google to revoke the connection. You can also revoke access in your Google Account connections. Disconnecting stops future access, and does not delete entries already created in your calendar. Signing out removes the saved calendar connection from your phone.

6. Sharing with other people

People on a shared list or trip see what is shared there, and may keep copies outside Wamda.

When a member leaves or deletes their account, a shared list or trip passes to whoever joined first and only goes when nobody is left. What others can see stays: shared list items remain, with the author removed if the person deleted their account, and trip bookings, tickets, stops, lists and packing items stay. The person's name can remain on the list of travellers. What was private to them goes: their spending, memories and gifts.

7. Service providers

We share what is needed for each function. Some providers act as independent controllers of their own services.

• Supabase: accounts, databases, file storage and server functions.
• OpenAI and Google Gemini: content for speech and AI features.
• Google Maps Platform: place searches and travel times. Open-Meteo: an approximate location for forecasts. open.er-api.com: currency codes for exchange rates, and your phone's IP address.
• Apple, Google and Microsoft: sign-in, and calendar services you choose.
• WHOOP: the optional connection, with credentials processed by our server.
• Apple Health: read on your phone only if you connect it. Apple gets nothing from us through it.
• Expo and Apple: notification delivery and app updates. Notifications can carry shared list names and item text, and energy messages. Backup reminder notifications leave out your card's words.
• Apple and RevenueCat: purchases, account identifiers and subscription status.
• PostHog and Sentry, only if you allow usage and crash reports: technical information. PostHog events are linked to your account identifier. We filter your content out of these.
• Resend: support messages, reply addresses and attachment links.
• Twilio: your phone number and reminder words, only if reminder phone calls are switched on. They are not offered today.
• A flight data provider: flight numbers and dates, only if live flight status is switched on. It is not offered today.
• Cloudflare: delivering and protecting this website, including IP address, request time, browser details and the address requested.

We may disclose information where the law requires, to deal with fraud or security incidents, to protect people's rights or safety, or in a business transfer with appropriate protections.

8. How long things are kept

• Audio: by plan and setting. 30 days on Free, up to 1 year on Plus, and until you delete it on Premium if you choose. Recordings with no speech go after 24 hours. Your phone keeps a copy for 7 days after sending it. Deleting audio does not delete its transcript or cards.
• Cards and transcripts: until you delete your account. A card you delete can be brought back for 30 days, then it goes for good, along with its history. A recording's text goes too once none of its cards are left; while any remain, it stays until you delete your account.
• Ask Wamda history: by your setting (30 days, until you delete it, or off).
• Usage and purchase records: deleted with your account. Apple and RevenueCat keep their own records.
• Support emails: can stay in our mailbox after you delete them in the app or delete your account.
• Backups: we do not currently keep a separate backup of the database. Providers may hold technical copies under their own processes.

Disconnecting a service does not delete what that service already holds.

9. Your controls and requests

In Settings, Privacy you can allow or stop AI, choose audio retention, delete saved audio, change Ask history, control usage and crash reports, download your data and delete your account. The download is one page: a readable part, every record we keep for you (leaving out only sign-in secrets), and links to your recordings, photos and tickets that work for an hour. If some audio cannot be deleted at once, we keep trying each hour until it is gone. Trip files nothing points to any more are removed daily.

Email support@mywamda.com to ask for access, correction or deletion. Depending on the law where you live, you may also have rights to portability, restriction, objection or withdrawing consent, and to complain to a privacy authority. We may need to check your identity. Withdrawing permission does not undo processing that already happened. See how to delete your account.

10. International processing and security

Wamda and its providers may process information outside your country. Safeguards depend on the provider, the service and the law. Email us with questions about your account.

We use access controls, private storage, protected storage on your phone and encrypted connections. No system can guarantee absolute security, so keep your phone and sign-in details secure. Provider error messages can occasionally reach our technical logs, and we are reducing this.

11. This website

This website has no advertising, analytics scripts, tracking pixels, accounts or forms, and sets no cookies of its own. Our hosting provider, Cloudflare, processes requests to serve and protect it, may apply security cookies, and may process performance analytics on error responses. An invitation code in a link can appear in its request logs. The app's usage and crash reports are separate and are controlled in Settings, Privacy.

12. Age

Wamda is for people aged 18 and over, and we do not knowingly collect information from children. If you think a child has given us information, email support@mywamda.com.

13. Changes and contact

We will update this page and its date when our practices change, and give notice or ask permission where required. Questions and requests go to support@mywamda.com.