Privacy Policy for Whachama

Effective Date: September 30, 2025

Welcome to Whachama. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our language learning platform at whachama.com. By using our service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

• Email address and password when you create an account
• Name and profile information you choose to provide
• Messages and content you send through our chat interface
• Language preferences and learning progress
• Profile pictures you upload

1.2 Information from Google OAuth

When you sign in with Google, we collect:

• Your email address (for account identification)
• Your name (for profile display)
• Your Google profile picture (for your avatar)
• A unique Google identifier (for secure authentication)

1.3 Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log data (IP address, access times, referring URLs)

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our language learning service
• To authenticate your account and enable secure access
• To personalize your learning experience with AI-powered conversations
• To track your language learning progress
• To communicate with you about your account and our services
• To improve our platform and develop new features
• To ensure compliance with our Terms of Service
• To protect against fraud and abuse

3. Google OAuth Data Usage

Specifically regarding data obtained through Google OAuth:

• Email Address: Used for account creation, authentication, and communication
• Name: Displayed in your profile and used for personalization
• Profile Picture: Used as your avatar across the platform
• Google User ID: Used for secure authentication and account linking

We do not store your Google password or access your Google account beyond the permissions you explicitly grant.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in these limited circumstances:

• Service Providers: With trusted third-party services that help us operate our platform (hosting, analytics, email delivery)
• Legal Requirements: When required by law, court order, or government request
• Safety and Security: To protect our users, platform, or public safety
• Business Transfer: In connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your information for as long as necessary to provide our services:

• Account Data: Until you delete your account or request deletion
• Chat Messages: Stored to maintain your learning history and progress
• Usage Data: Typically retained for up to 2 years for analytics purposes
• Google OAuth Data: Retained until account deletion or OAuth connection is revoked

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct your personal information through your account settings
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a copy of your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Revoke OAuth: Disconnect your Google account through your Google account settings

7. Data Security

We implement appropriate security measures to protect your information:

• Encrypted data transmission using HTTPS
• Secure password hashing and storage
• Regular security assessments and updates
• Limited access to personal data by authorized personnel only
• Two-factor authentication options for enhanced account security

8. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your login status and preferences
• Analyze usage patterns to improve our service
• Provide personalized content and features
• Ensure security and prevent fraud

You can control cookies through your browser settings, though this may affect platform functionality.

9. Children's Privacy

Our service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Providing notice through our platform interface

Your continued use of our service after such modifications constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@whachama.com
• General Support: support@whachama.com
• Website: whachama.com

13. Google OAuth Compliance

This Privacy Policy is designed to comply with Google's OAuth requirements. We:

• Use Google user data only for the purposes disclosed in this policy
• Do not store or cache Google user credentials
• Provide users with clear information about data collection and use
• Implement appropriate security measures for Google user data
• Allow users to revoke access to their Google account at any time

Last updated: September 30, 2025