This policy explains how whai handles information when you use the whai mobile app and related services. whai is a private daily reflection journal. If you have questions or a privacy request, contact us at support@findwhai.app.
Information whai handles
- Account information. Our sign-in provider, Clerk, handles the information needed to create and maintain your account and sessions. Depending on your sign-in method, this may include your name, email address, account identifier, and authentication details. whai receives an account identifier and basic profile information needed to recognize your account and show your name in the app.
- Journal information. Your entry text, selected mood, question date, and device-recorded writing and page-open times are saved on your device. Accepted entries sync to whai's server under your account identifier. You may include sensitive information in your writing, so please consider what you choose to record. Questions are shared across users; whai does not currently use your journal entries to generate or personalize them.
- Device preferences. Your appearance choice and reminder preference are kept on your device. Reminders are on by default; after your first saved entry, the app asks for notification permission. If you grant it, the app schedules a local reminder on your device. You can turn reminders off in Settings. whai does not need to send your journal text to a push-notification service to do this.
- Service and support information. When your device connects to whai or Clerk, those services may receive technical information needed to provide and secure the service, such as network address, request time, device or app information, and diagnostic records. If you contact support, we handle the information you send us. When enabled in a release, Sentry handles error monitoring and sampled performance traces and may receive error details, stack traces, device or app details, request metadata, and performance timings. The app and API are configured not to collect default personal information through Sentry.
How we use information
We use this information to sign you in, deliver daily questions, save and sync your journal, show your entries back to you, run optional reminders, protect the service, respond to support requests, and handle deletion requests. We do not currently display advertisements in the app or use journal text to target ads. We do not currently send journal entries to AI providers to generate questions, personalize questions, or train models. The app does not currently use a separate product-analytics service.
We collect account details when you sign in through Clerk, journal content and preferences when you enter or select them in the app, and technical records when you use the service. We use these records through the app, our API and database, and the providers listed below. You can choose what to write in an entry, whether to enable reminders, and whether to contact support. Without an account, you cannot use the journal or sync entries. If you do not provide entry text or a mood, that day has no journal entry. Declining notification permission or turning reminders off does not prevent you from using the journal; it only stops daily reminders. If you do not contact support, we cannot respond to a support request.
Where your entries are kept
whai saves entries in the app's storage on your device first, then tries to sync them to whai's server. This copy remains on the device after you sign out, so unsynced writing is not immediately lost; whai shows it again only when the same account signs in on that device. Someone with access to your unlocked device, its storage, or its backups may be able to access the local copy. whai does not separately encrypt journal text in its local app storage. Your device's own security and backup settings affect that copy.
An entry accepted by the server can be restored on another device. An entry that cannot sync, including one rejected after its writing window closes, may remain only on the device where it was written. Local saves and syncing can fail, so whai cannot guarantee that every edit has been preserved.
Other whai users cannot access your entries through the app. Authorized people who operate whai and providers that host or maintain its systems may have access to synced entries when needed to run, secure, or support the service. Entries are not end-to-end encrypted.
Who receives information
- Clerk provides sign-in, account, and session services. Depending on the method you select, Apple or Google may also handle sign-in information under their own policies. See Clerk's Privacy Policy for information about Clerk's own handling of data.
- App and database hosting. Railway hosts the API and PostgreSQL database in its EU West region (Amsterdam, Netherlands). It processes requests and stores accepted journal entries under account identifiers on our behalf.
- Error monitoring. When enabled, Sentry receives the diagnostic information described above to help us investigate errors and performance problems.
- Support email. Cloudflare Email Routing forwards messages sent to support@findwhai.app to the operator's Gmail inbox. Cloudflare and Google process the message and related delivery information.
- We may disclose information when required by law or when reasonably necessary to protect users, the service, or our legal rights.
whai uses Google Gemini to generate shared questions and DeepSeek to check them for duplicates. These tools work from published source material and existing questions, not from your journal entries. We do not currently sell journal entries or send them to Gemini or DeepSeek. If this practice changes, we will update this policy and provide any notice or choice required by law before the change takes effect.
Retention and deletion
We keep synced journal entries while your account is active unless you delete an entry or your account. Deleting an individual entry removes it from the app's local journal and requests its deletion from the active server database when a connection is available. A pending deletion may not reach the server until syncing succeeds.
You can request account deletion in Settings. The server begins by marking your account for deletion and removing its journal entries from the active database, then requests deletion of your Clerk account. If that later step fails, your synced entries have already been removed and new entries cannot sync while deletion is incomplete. The app tells you to retry or contact us. After a successful response, the app attempts to remove that account's local journal copy and reminder state from the device used for the request. Local copies on other devices are not remotely erased; remove the app's data on those devices if you no longer want it stored there. whai retains a minimal deletion record containing the account identifier, deletion status, and deletion-start time to prevent an old session from recreating the account.
We keep account and synced journal information while the account is active. After account deletion, the active database keeps only the deletion record described above. We keep support messages while handling the request and any related follow-up, and operational logs and diagnostic records while needed to investigate incidents, secure the service, or meet legal obligations. We do not currently promise a fixed deletion deadline for those records. whai does not currently configure database backups. If we start backing up the journal database, we will update this policy to describe how long those backups are kept. Device backups are controlled by your device and cloud-backup settings and are not removed by an in-app account deletion request.
Signing out does not delete your account or the local journal copy on that device. If you lose access to the app or need help deleting data, contact support@findwhai.app.
Your choices and requests
You can review your entries in the app, edit them while their writing window is open, delete individual entries, turn reminders off, or request account deletion. You can also ask us about access, correction, deletion, a copy of your information, or other privacy rights by contacting support@findwhai.app. Depending on where you live, you may also have rights to object to or restrict certain processing, withdraw consent where we rely on it, or complain to a privacy regulator. We may need to verify your identity before fulfilling a request.
Notification permission is controlled through your device settings. Turning reminders off stops whai from scheduling new local reminders. You can change or withdraw any optional permission through the app or your device settings.
International processing
The API and active journal database run in Amsterdam, Netherlands. The operator may access service and support information from Taiwan. Clerk, Apple, Google, Sentry, Cloudflare, and Railway may process the categories of information described above in other places where they operate or use service providers, including outside Taiwan and the European Union. Contact support@findwhai.app to ask about a particular provider's processing location or applicable transfer protections.
Children
whai is intended for people aged 16 or older. It is not intended for children under 16. If you believe someone under 16 has created a whai account or provided personal information through whai, contact support@findwhai.app so we can investigate and delete the account and associated information as appropriate.
Changes to this policy
We may update this policy when whai or its data practices change. We will post the updated policy with a new effective date and provide notice of material changes through the app or another reasonable channel. If a new use requires consent under applicable law, we will request it separately.
Contact
For privacy questions or requests, contact support@findwhai.app. Operator: LU-CHENG CHIU, Taiwan.