Privacy Policy

Last updated: May 2026

Information We Collect

Account Information

When you create an account, we collect your email address, username, and any profile information you provide such as a display name and profile photo.

Sign-In via Google or Apple

If you sign in using Google or Apple, those providers share basic profile information (such as your name and email address) with us to create or link your account. Please review Google's and Apple's privacy policies for details on what they share.

Photos and Content

We store the photos you upload for challenges and any reactions, comments, or messages you send. Photos are stored on Cloudflare's infrastructure (Cloudflare R2) via secure cloud storage.

Push Notification Tokens

If you enable push notifications, we collect and store a device push token provided by your operating system. This token is used solely to deliver notifications to your device and is removed automatically if it becomes invalid.

Usage Data

We collect information about how you use the app, including which features you access, actions you take (such as following users or giving reactions), and general activity timestamps.

Technical & Device Information

We may collect device type, operating system version, and error/crash reports to diagnose technical issues and improve app stability.

How We Use Your Information

We use your information to:

  • •Provide, operate, and improve our service
  • •Enable social features like following friends and messaging
  • •Send push notifications about app activity (if enabled)
  • •Ensure platform safety, security, and abuse prevention
  • •Diagnose and fix technical issues
  • •Comply with legal obligations

Third-Party Service Providers

We do not sell your personal information. We work with the following third-party services to operate the platform, each of which may process your data as necessary to provide their services:

  • •Supabase — authentication and database hosting
  • •Cloudflare R2 — photo and image storage
  • •Expo (Expo Push Notifications) — push notification delivery
  • •Vercel — API hosting

We may also share information when required by law or to protect the rights, property, or safety of Whaphotos or others.

Data Security

We use industry-standard security measures to protect your data, including encrypted data transmission (HTTPS/TLS), row-level security on our database, and secure token storage on your device. No system is 100% secure — please use a strong, unique password for your account.

Your Rights

You have the right to access, correct, and delete your personal data. You can:

  • •Edit your profile information at any time in app settings
  • •Delete individual posts from your profile
  • •Control your privacy settings (public/private profile)
  • •Disable push notifications in your device settings
  • •Delete your account and all associated data in Settings › Danger Zone

If you are located in the European Economic Area (EEA), you have additional rights under the GDPR, including the right to data portability, restriction of processing, and the right to object to processing. If you are a California resident, you have rights under the CCPA, including the right to know what personal information we collect and the right to request deletion. We do not sell personal information to third parties.

To exercise any of these rights, contact us at whaphotoinfo@gmail.com.

Data Retention

We retain your data while your account is active. When you delete your account, we remove your personal information and photos within 30 days. Some data may be retained longer where required by law.

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us at whaphotoinfo@gmail.com and we will delete it.

International Users

Whaphotos uses cloud infrastructure providers that may store and process your data in various regions globally. By using the service, you consent to your information being transferred to and processed by these providers in accordance with their own data processing agreements.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

For privacy questions or to exercise your rights, contact us at whaphotoinfo@gmail.com.