Privacy Policy

Privacy Policy

**Last Updated: May 2026**

Introduction

WiWit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Platform").

Information We Collect

Information You Provide
- **Account Information**: Name, email address, phone number, and the city and state you live in.
- **Optional Eligibility Information**: Family annual income (in INR) and government reservation category (General / SC / ST / OBC / EWS). These are used only to filter eligibility-restricted scholarships and government programmes. They are never shared with opportunity providers and are never used for advertising.
- **Child Profile Information**: For each child you add: name, date of birth, gender, current grade, school name, interests, aspirations, and any abilities or skills you record. Date of birth is used to compute age and academic-year progression.
- **Certificates and Achievements**: Documents and images you upload, along with skills automatically extracted from them.
- **Communication Data**: Messages, feedback, and support requests

Information Collected Automatically to Operate the App
These are needed for the app to function and are collected regardless of your analytics choice:
- **Notification token**: A Firebase Cloud Messaging token so we can deliver the notifications you have signed up for (for example, opportunity matches and deadline reminders).
- **Basic device metadata**: Device type and operating system version, used for compatibility and security.
- **Crash and error reports**: If the app encounters an error, we receive a report via Firebase Crashlytics so we can fix the issue.

Information Collected Only If You Opt In to Analytics
Analytics is off by default. If you turn it on from Settings, we additionally collect the following through Firebase services to help us improve the Platform:
- **Usage data**: How you interact with the Platform (for example, which screens you visit).
- **Approximate location**: A coarse location derived from your IP address by our analytics provider.
- **Performance data**: Timings that help us identify slow parts of the app.

You can turn analytics off again at any time from Settings.

How We Use Your Information

We use the information we collect to:
- Provide personalized opportunity recommendations
- Send deadline reminders and notifications
- Improve our services and user experience
- Communicate with you about updates and features
- Ensure platform security and prevent fraud

Data Sharing

We do not sell your personal information. We may share information with:
- **Service Providers**: Who help us operate the Platform, listed below under "Service Providers We Use"
- **Legal Requirements**: When required to do so by applicable law or a valid order from a court or government authority

WiWit does not submit applications on your behalf. When you choose to pursue an opportunity, you visit the provider's own website or platform directly; WiWit does not share your personal data with opportunity providers.

Service Providers We Use

We rely on the following processors to deliver specific parts of the Platform. Each receives only the data needed for its function and is bound by its own privacy commitments:

- **Google Firebase** (Firestore, Cloud Functions, Authentication, Cloud Messaging, Storage, Crashlytics, Performance Monitoring, In-App Messaging, Remote Config, Analytics, App Check, Data Connect): account data, child profile data, certificates, social posts, notification tokens, crash and performance diagnostics. Hosted primarily in `asia-south1` (India).
- **Google Cloud SQL (PostgreSQL via Firebase Data Connect)**: social features (posts, comments, reactions, connections). Hosted in `asia-south1`.
- **Qdrant Cloud (vector search service)**: anonymised child-profile and opportunity embeddings used to compute opportunity matches. No name, phone, or email is sent to Qdrant.
- **Google AI (Gemini API, accessed via our Cloud Functions proxy)**: certificate images you upload are sent for skill extraction and content generation. Images and extracted text are not stored by Google for model training.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Your Rights

You have the right to:
- Access your personal information
- Correct inaccurate data
- Delete your account and data
- Opt-out of marketing communications

Children's Data & Parental Consent

WiWit is designed for parents to use on behalf of their children. The account holder must be an adult (18+), and all child profile information is added and managed by the parent.

In line with the Digital Personal Data Protection Act, 2023:
- We process a child's personal data only on the basis of the parent's consent, for the purpose of discovering and tracking opportunities for that child.
- Analytics and behavioural tracking of children are off by default; parents can opt in at any time from Settings.
- We do not use a child's personal data to serve targeted advertising, and we do not sell it.
- Parents can review, correct, or delete their child's data at any time from the app.

Where Your Data Is Processed

We use Google Firebase (including Firestore, Cloud Functions, Cloud Messaging, and Crashlytics) to operate WiWit. Your personal data is stored primarily on servers in India (Google Cloud region `asia-south1`).

Some third-party services we rely on to provide specific features (for example, Google's AI services that power content generation and extraction) may process requests on servers located outside India. In such cases, we use reputable providers and share only the data needed to deliver that feature.

Data Retention

We retain personal data only for as long as it is needed to provide the Platform to you and to meet our legal obligations. When you delete your account, we delete or anonymise the associated personal data, except where we are required to retain it under applicable law.

Data Breach Notification

If we become aware of a personal data breach that is likely to result in harm to you, we will notify you and the Data Protection Board of India in the manner and within the timelines required under the Digital Personal Data Protection Act, 2023.

Grievance Redressal

You can contact our Grievance Officer to raise any concern about how your personal data is handled:
- Email: privacy@wiwitness.com
- Address: Bangalore, Karnataka, India

We will acknowledge your complaint within 24 hours of receipt and endeavour to resolve it within 15 days, or within the timelines required by applicable law.

If you are not satisfied with the resolution, you may approach the Data Protection Board of India as provided under the Digital Personal Data Protection Act, 2023.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:
- Email: privacy@wiwitness.com
- Address: Bangalore, India