Privacy Policy

Who Called It ("we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our platform.

We keep things simple: we collect only what we need to run the service, we don't sell your data, and we give you control over your information.

Account Information: When you create an account, we collect your name, email address, and profile picture (if you choose to add one). If you sign in with Google, we receive basic profile information from your Google account.

Payment Information: If you add funds to your wallet or make bank transfers, our payment processor (Stripe) collects your payment details. We don't store your full card number or bank account details on our servers.

Activity Data: We collect information about how you use Who Called It, including groups you join, challenges you participate in, predictions you make, and comments you post.

Device Information: We automatically collect basic information about your device and browser, including IP address, browser type, and operating system. This helps us improve the service and detect suspicious activity.

We use your information to:

• Provide and maintain the Who Called It service
• Process transactions and manage your wallet
• Send you important notifications about your account and challenges
• Respond to your questions and support requests
• Detect and prevent fraud or abuse
• Improve and develop new features
• Comply with legal obligations

We share information only in these limited circumstances:

Within Groups: When you join a group, other members can see your name, profile picture, and activity within that group (predictions, comments, etc.). Your email address is not shared with other users.

Service Providers: We work with trusted third parties who help us run the service (like Stripe for payments, and email providers for notifications). They only access information necessary to perform their services.

Legal Requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of Who Called It, our users, or others.

Profile Visibility: You can control what appears on your public profile in your Privacy settings. Choose whether to show your activity, stats, and group memberships.

Email Preferences: You can control which email notifications you receive in your Account settings. Transactional emails (like payment confirmations) cannot be disabled.

Data Export: You can request a copy of your data by contacting support@whocalledit.ai.

Account Deletion: You can delete your account at any time from your Settings. When you delete your account, we remove your personal information, though some data may be retained for legal or fraud prevention purposes.

We take security seriously and implement appropriate measures to protect your information:

• All data is transmitted over encrypted connections (HTTPS)
• Passwords are hashed and never stored in plain text
• Payment information is handled by PCI-compliant processors
• We regularly review and update our security practices

However, no system is 100% secure. If you believe your account has been compromised, please contact us immediately.

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how you use the service. We don't use tracking cookies for advertising.

You can control cookies through your browser settings, but disabling them may affect your ability to use some features.

We retain your data only as long as necessary to provide our services and comply with legal obligations. Different types of data have different retention periods:

Account Deletion: When you delete your account, we begin the disposal process immediately:

• Personal identifiers are removed within 30 days
• Your profile becomes inaccessible to other users immediately
• Activity in groups is anonymized (shown as "Deleted User")
• Financial records are retained but de-identified where possible

Data Disposal Methods: When data reaches the end of its retention period or you request deletion:

• Database records are permanently deleted, not just marked as inactive
• Backups containing deleted data are overwritten within 30 days
• Data shared with service providers is deleted per their data processing agreements
• Anonymized/aggregated data may be retained indefinitely for analytics

Legal Holds: We may need to retain data longer than scheduled if:

• Required by law, subpoena, or court order
• Needed for ongoing fraud investigation
• Subject to an unresolved dispute or chargeback
• Necessary to enforce our Terms of Service

Who Called It is not intended for users under 18 years of age. We don't knowingly collect information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Who Called It is operated from the United States. If you're using the service from outside the US, your information will be transferred to and processed in the US. By using Who Called It, you consent to this transfer.

We may update this privacy policy from time to time. If we make significant changes, we'll notify you by email or through the platform before the changes take effect. Your continued use of Who Called It after changes constitutes acceptance of the updated policy.