Privacy Policy

Last updated: May 12, 2026

Overview

whyapp ("the App") is a personal assistant application for individual use. This policy describes how we handle your data.

Data We Collect

When you sign in with Google, we access:

• Google account info — name, email address, and profile picture for authentication.
• Gmail (read-only) — email subjects, senders, dates, and body text for triage classification. We do not send, modify, or delete emails.
• Google Calendar — event details (titles, times, locations) for display and to create events you approve.

How We Use Your Data

• Email triage — Emails are analyzed by Anthropic's Claude AI to generate priority scores, summaries, and suggested actions.
• Calendar — Events are displayed in the app. The AI may suggest new events based on email content; these are only created with your explicit approval.
• Captures — Photos, documents, and voice memos you submit are analyzed by Claude AI for triage.
• Context — Personal context you share (names, relationships, preferences) is stored to improve prioritization.
• Feedback — When you correct priorities, that feedback trains future classifications for your account only.

Data Storage and Security

• Your data is stored on Cloudflare's infrastructure (D1 database, R2 storage).
• Google OAuth tokens are encrypted at rest using AES-GCM encryption.
• Your Google tokens never leave the server — the mobile app only holds a session token.
• Uploaded files are stored in a private R2 bucket accessible only to your account.

Third-Party Services

• Google — OAuth authentication, Gmail API, Google Calendar API.
• Anthropic (Claude) — AI processing for email classification, document analysis, and chat. Email content and captures are sent to Anthropic's API for analysis. See Anthropic's Privacy Policy.
• Cloudflare — Hosting, database, and file storage.
• Expo — Push notification delivery.

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is only shared with the third-party services listed above as necessary to provide the App's functionality.

Data Retention

Your data is retained as long as your account is active. You can request deletion of your data by contacting us. Signing out removes your session but does not delete stored data.

Your Rights

You can revoke the App's access to your Google account at any time via Google Account Permissions. You can view and delete stored context entries in the App's Settings screen.

Children

The App is not intended for use by children under 13.

Changes

We may update this policy from time to time. Changes will be reflected on this page with an updated date.

Contact

For questions about this privacy policy, contact us at the email associated with this app's developer account.