Privacy Notice

1. Information we collect

Information you provide. Name, email address, phone number, account name, business name (business users), referral code, contact preferences, and anything you send us. If you sign in with Google or Apple, we receive basic profile information, typically your name and email.

Payments. Payments are handled by Apple or our payment provider. We do not store full card details.

Information generated by using the App. Scheduling preferences and meeting norms learned by the AI; meeting types, locations and travel preferences; timezone settings; the content of scheduling conversations in the App; and app usage data and error logs. If you connect a calendar or video provider, we store authorisation tokens only, not your calendar contents.

Contacts (only with your permission). We temporarily process contact email addresses and phone numbers solely to identify which of your contacts already use Wenya. We do not retain your address book, and matched details are not stored once matching is complete. You can withdraw permission in your device settings.

Collected automatically. IP address, device and browser information, pages or features used, timestamps, error reports, and approximate location from your IP address and timezone. With your permission, we also use device location for travel-aware scheduling.

Meeting recipients. If a Wenya user invites you to a meeting, we process the name and email they provide to arrange it, based on our legitimate interests. You can unsubscribe from any email we send.

What we do not do. We do not intentionally process sensitive personal information (such as health or biometric data). We do not store your calendar events (they are accessed in real time). We do not sell personal data, and we do not use the content of your scheduling conversations, calendar or contacts for advertising.

Google APIs. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How we use your information

We use personal information to:

• create and manage accounts and deliver the Services, including AI scheduling and calendar integrations;
• personalise your scheduling experience (this learned data is used only for you);
• provide support and send service, transactional and (where permitted) marketing messages;
• manage subscriptions and billing;
• understand how the Services are used and improve them;
• measure the performance of our advertising (Section 4);
• conduct AI research and development using anonymised or aggregated data;
• protect security, prevent fraud, and comply with legal obligations.

3. Legal bases

EU and UK (GDPR / UK GDPR). Consent (for example advertising and analytics cookies, contacts access and marketing); contract (providing the Services); legitimate interests (improving and securing the Services, preventing fraud, arranging meetings for invitees); legal obligation; and, where necessary, vital interests. You can withdraw consent at any time.

Singapore (PDPA). Your consent (express or deemed), or where a PDPA exception applies.

Canada. Your express or implied consent, which you can withdraw at any time, except where the law permits otherwise.

United States. See Section 13.

4. Advertising and measurement

We advertise Wenya on platforms such as Apple, Meta, TikTok and Google. To understand whether our ads work, we measure how people who see or click an ad go on to visit our website or install the App.

On our website. If you accept advertising cookies, these platforms may set cookies or pixels that record that you saw or clicked an ad and what you did next on our site. This uses cookie or device identifiers rather than your name or contact details, and only happens with your consent.

In the App. If you install the App after an ad, the platform (for example Apple) may tell us which campaign led to the install. This is campaign-level information and does not include your name or contact details.

What we do not do. We do not use the content of your scheduling conversations, calendar or contacts for advertising, and we do not sell personal data.

Your choices. Cookie and device identifiers can be personal data in some countries, so we treat them as such. You can change your cookie choices at any time through the cookie preferences link on our website, by enabling Global Privacy Control in your browser, or through your device's advertising and privacy settings.

5. Cookies and similar technologies

On our website we use cookies and similar technologies (such as pixels) in three categories: essential (needed for the site to work), analytics (to understand how the site is used, for example using Google Analytics), and advertising (Section 4). Apart from essential cookies, these only load if you consent. Full details are in our Cookie Policy.

6. Who we share information with

We do not sell personal data. We share it with service providers who process it on our behalf under contract and only as needed, including:

• Hosting and infrastructure (such as AWS);
• AI model providers that power the scheduling assistant and support research and development;
• Calendar and video integrations you choose to connect (such as Google Calendar, Microsoft Outlook or Zoom);
• Email and push notification delivery;
• Maps and location services (such as Google Maps);
• Analytics tools;
• Advertising and measurement platforms (Section 4); and
• Payment providers.

We may also share information in connection with a merger, sale or financing (with notice to you), and with authorities, courts or professional advisers where required by law or to protect our legal rights.

7. AI features

Wenya's scheduling assistant is powered by AI models from third-party providers. Scheduling context (such as availability queries and thread content) is sent to them to generate responses, and is processed in accordance with their terms and privacy policies. We also use anonymised or aggregated data for research and product development.

The assistant learns your scheduling preferences over time. This learned data is tied to your account and deleted when you delete your account. We do not use your individual scheduling data to train general AI models without your explicit consent.

8. International transfers

We are based in Singapore and our infrastructure is hosted in Singapore, the United States and the EU (Germany), so your data may be processed outside your country. For UK and EEA data we rely on adequacy decisions (including the EU–US Data Privacy Framework where applicable) or Standard Contractual Clauses, with the UK Addendum for UK data, and can provide copies on request. Transfers from Singapore comply with the PDPA's transfer limitation obligation.

9. How long we keep information

We keep personal information only as long as needed for the purposes in this notice, or as the law requires.

When we no longer need information we delete or anonymise it, or securely isolate it (for example in backups) until deletion is possible.

10. Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, access controls on a least-privilege basis, network protections and secure credential management. No system is completely secure. If a personal data breach occurs, we will notify affected individuals and authorities as required by law.

11. Children

The App is not directed at children under 16 (or 13 in the United States) and we do not knowingly collect their data or market to them. If we learn we have, we will deactivate the account and delete the data. Parents or guardians who believe a child has provided personal information can contact info@wenyawanna.ai. California residents under 18 may request removal of content they have posted under California Business & Professions Code Section 22581.

12. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal information, restrict or object to its processing, receive a copy of it (portability), and withdraw consent at any time without affecting earlier processing. You can also unsubscribe from marketing emails at any time, and update or delete your account in the App or by contacting us. If a decision with legal or similarly significant effects is made solely by automated means, we will tell you and offer human review.

To exercise your rights, email info@wenyawanna.ai with the subject "Privacy Request — [Your Name]". We will respond within 30 days, or sooner where required by law. We may retain some information to prevent fraud, resolve disputes or meet legal requirements.

Complaints. You can complain to your data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, your national authority; in Switzerland, the FDPIC (edoeb.admin.ch); in Singapore, the PDPC (pdpc.gov.sg).

13. United States residents

If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you may have additional rights under the CCPA/CPRA and similar state laws.

Categories collected in the past 12 months: identifiers (name, email, phone, IP address, account name); customer records (contact and payment reference data); commercial information (subscription status); internet or network activity (usage, sessions, features used, error logs); approximate geolocation; professional information (business name, business users only); and inferences (scheduling preferences and AI-learned meeting norms, used to improve your App experience and not for advertising profiling). We do not collect protected classification characteristics, biometric information, audio or visual recordings, education information or sensitive personal information. Sources are you, your use of the Services, and sign-in providers you choose. We use and keep this information as described in Sections 2 and 9.

Sale and sharing. We do not sell personal information. If you accept advertising cookies on our website, sharing cookie or device identifiers and site activity with advertising platforms for ad measurement may count as "sharing" or "targeted advertising" under some state laws. We also share location queries with mapping providers to enable location features, and usage data with analytics providers. You can opt out through our cookie preferences or Global Privacy Control, or by emailing us.

Your rights include the right to know, access, correct, delete and obtain a copy of your personal data; to opt out of targeted advertising, sale and certain profiling; and to non-discrimination. Some states add further rights (for example to a list of third-party recipients, or to review profiling). These rights are not absolute and we may decline requests as the law permits.

How to exercise them. Email info@wenyawanna.ai with the subject "US Privacy Rights Request — [Your Name]". We will verify your identity using information we already hold or that you provide. An authorised agent may submit a request with proof of authorisation. If we decline a request, you may appeal by email, and if the appeal is denied, you may complain to your state attorney general (or, in California, the California Privacy Protection Agency at cppa.ca.gov). California residents may also request information under the "Shine the Light" law (Civil Code Section 1798.83) by writing to us. We respond to US privacy rights requests within 45 days.

14. Singapore residents

Under the PDPA you may access and correct your personal data, and withdraw consent to its collection, use or disclosure (subject to any legal or contractual consequences explained when you gave consent). Email info@wenyawanna.ai with the subject "PDPA Request — [Your Name]" and we will respond within 30 days. Our Data Protection Officer is Thomas Beattie. You may also complain to the PDPC at pdpc.gov.sg.

15. Do Not Track and Global Privacy Control

There is no uniform standard for Do Not Track signals, so we do not respond to them. We do honour Global Privacy Control: if your browser sends it, we treat your visit as a rejection of all non-essential cookies.

16. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last updated. For material changes, we will give you reasonable advance notice, for example by email or in-app notice.

17. Contact us

Wenya Labs Pte Ltd, 50 Chin Swee Road, #08-02, Singapore 169874

Data Protection Officer: Thomas Beattie

Email: info@wenyawanna.ai (subject: "Privacy Request — [Your Name]")

California users may also contact the California Privacy Protection Agency (cppa.ca.gov).