Privacy Policy

Effective date: April 24, 2026

1. What We Collect

2. What We Do Not Collect

3. How We Use Your Data

4. Data Storage and Security

Your data is stored in an encrypted SQLite database. Passwords are hashed using PBKDF2-SHA256 with 260,000 iterations and a unique salt — we cannot recover your password. Session tokens expire after 30 days. Daily encrypted backups are retained for 7 days.

5. Third-Party Services

6. Your Rights

We respond to all requests within 30 days.

7. Data Retention

Account data is retained while your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. The "Effective date" at the top shows when it was last updated.

Contact

Privacy questions? Email hello@whirely.com.

← Back