Privacy Policy

We collect account information (your name, email, and profile photo) provided by Google when you sign in, plus the workspace data required to deliver our scheduling features.

WhatsFlow requests only the OAuth scopes needed for the features you enable. You can review or revoke access at any time from your Google Account security page.

With your permission, WhatsFlow reads message metadata (senders, subjects, timestamps) and message content to detect meetings, deadlines, and important senders. Content is processed transiently and encrypted at rest.

We read and write calendar events on your behalf so WhatsFlow can propose time blocks, resolve conflicts, and confirm meetings. Nothing is created without your approval.

Sign-in is handled by Google via OAuth 2.0. WhatsFlow never sees or stores your Google password.

Your data powers your experience — daily briefings, task ranking, and AI recommendations. We do not sell your data or use its content to train third-party foundation models.

Data is encrypted in transit with TLS 1.3 and at rest with AES-256. Access to production systems requires MFA and is limited to a small set of engineers.

We use Google Cloud, Firebase, and Gemini AI to operate WhatsFlow. Each vendor is contractually bound by our data-processing terms.

We retain your data while your account is active. When you delete your account, associated data is permanently removed within 30 days, except where retention is required by law.

You can access, export, or delete your data at any time from the app's Settings screen, or by emailing khedekarsujay720@gmail.com.

The WhatsFlow website uses minimal, first-party cookies for authentication and analytics. No third-party advertising cookies are set.

WhatsFlow is not directed to children under 13. We do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be announced in-app and via email.

Questions? Email khedekarsujay720@gmail.com or call +91 93597 42537.