Who we are
Wrynkle is operated by Datahase Dev Private Limited, at India. We provide a private family memory and coordination service for families in India.
What this policy covers
This policy covers the Wrynkle mobile app, our website at https://wrynkle.app, and the messages Wrynkle sends and receives through the official WhatsApp Business Platform. It does not replace the privacy terms of WhatsApp, your mobile network, or your device provider.
Information we collect
Organizer and relative account data
We collect account details such as name, email address, sign-in and verification records, age attestation, circle memberships, and the access role given to each person.
Family circle data
We store the circle name, timezone, members, invitations, roles, access settings, reminders, check-ins, family notes, and the audience allowed to see each record. Invitation codes expire after 7 days.
Parent's WhatsApp details and consent
We store the parent's name and WhatsApp number, the family circle that invited them, consent or withdrawal status, the notice and language shown, and the date and time of their reply. Entering a number in the app does not count as the parent's consent.
Voice notes, transcripts, and classifications
After consent, we process voice notes sent to Wrynkle, their Malayalam, English, or mixed-language transcripts, corrections, review status, and one classification: memory, reminder, check-in, help request, or unclear.
Contacts you add
We store contact details that an authorized family member adds, such as a relative, doctor, or neighbour. Adding a contact does not make that person a Wrynkle member or allow Wrynkle to contact them automatically.
Notifications and technical information
We store notification preferences, quiet hours, device push tokens, message and delivery status, sign-in and security events, error reports, and limited technical logs needed to run and protect the service. We avoid putting private family content in logs.
How we use information
We mainly process personal data with consent. Where the Digital Personal Data Protection Act, 2023 permits a legitimate use, we use data only for that permitted purpose, such as responding to information a person voluntarily provides for a service they asked for or meeting a legal obligation.
| Purpose | Data used | Basis under India law |
|---|---|---|
| Create accounts and private family circles | Account, age attestation, membership, role, invitation, and circle data | Consent and providing the service requested by the account holder |
| Connect a parent through WhatsApp | Name, number, invitation, consent notice, reply, and connection status | The parent's clear consent; limited routing records before consent for security and delivery |
| Process family voice notes | Audio, transcript, language, classification, correction, and review status | The parent's consent and the family's request to provide the service |
| Send reminders, check-ins, confirmations, and family notifications | Schedules, recipients, preferences, device tokens, and delivery status | Consent and the requested service |
| Keep Wrynkle secure and reliable | Sign-in events, limited logs, message identifiers, errors, and abuse reports | A legitimate use permitted by the DPDP Act 2023 and compliance with law |
| Handle privacy requests and legal duties | Identity checks, request history, minimal audit records, and required account records | Consent where needed and a legitimate use or legal obligation permitted by law |
WhatsApp specifically
- An organizer may enter a parent's name and WhatsApp number, but Wrynkle does not connect or process the parent's voice content until the parent replies YES.
- The consent record includes who invited the parent, the notice and audience shown, the reply, and the time.
- The parent can reply STOP at any time. This stops future collection, processing, and Wrynkle messages. It does not by itself erase earlier records; deletion can be requested separately.
- Meta Platforms processes messages as the provider of the WhatsApp Business Platform.
- We never use the parent's WhatsApp number for marketing.
AI processing
Wrynkle sends consented voice notes to Google's Gemini API to create a transcript and classify the note only as memory, reminder, check-in, help request, or unclear. Gemini may process Malayalam, English, or a mix of both.
Gemini does not diagnose, give medical advice, decide whether somebody is safe, contact emergency services, or take an action by itself. It does not automatically schedule a reminder or change a family record. Unclear items are sent for human review, and people can correct a transcript or classification.
Sharing
We share data only with authorized people in the relevant family circle, the service providers needed to run Wrynkle, and authorities when a valid legal request requires it. We do not sell personal data.
Service providers
- Cloudflare: Application hosting and private storage of retained audio (Workers, R2)
- Neon: Database hosting (PostgreSQL)
- Meta Platforms (WhatsApp Business Platform): Delivery of WhatsApp messages to and from the parent
- Google (Gemini API): Transcription and limited classification of voice notes
- Zoho (ZeptoMail): Transactional email such as sign-in verification and invitations
- Upstash (QStash): Scheduling of reminders and check-ins
- Expo: Push notification delivery to family members' phones
These providers process data for the stated service. Their own systems may keep limited operational or backup copies according to their deletion cycles and legal duties.
Retention
- Raw voice audio is retained for a short period, currently up to 30 days unless the family deletes it sooner. This is subject to the published retention setting shown in Wrynkle.
- Transcripts, classifications, corrections, and family records stay until an authorized person deletes them or the related circle is deleted.
- Account data stays while the account is active and is removed after an authorized account-deletion request, apart from the limited records described below.
- Invitation codes expire after 7 days. We keep only the minimum invitation history needed for security and audit.
- Technical logs are kept only as long as reasonably needed for security, reliability, dispute handling, and legal obligations.
Some minimal legal, accounting, security, or deletion-audit records may remain when required. Backup and provider copies are removed through their normal controlled deletion cycles; see our data-deletion instructions for details.
Security
We use TLS for data in transit, private storage, role-based access controls, short-lived access links where needed, and server-side checks before a person or background job can use family data. No system can promise perfect security or delivery.
Wrynkle is not end-to-end encrypted. Wrynkle's servers and the providers listed above must process content to provide the service.
Your rights
You may ask to:
- access the personal data Wrynkle holds about you;
- correct incomplete or inaccurate personal data;
- delete data that you have authority to delete;
- withdraw consent, including by replying STOP on WhatsApp; and
- raise a question or complaint about how your data is handled.
Use the privacy and data controls in the app where available, or email privacy@wrynkle.app. We may need to verify your identity and authority. We aim to complete a verified request within 30 days, and we will explain if a legal or shared-record issue limits what can be changed or deleted.
Children
People under 18 may not create or hold Wrynkle accounts. Account holders must confirm that they are at least 18 when signing up. If you believe a child has created an account or provided personal data, contact us so we can investigate and remove it where appropriate.
Changes to this policy
We may update this policy when the service, providers, or law changes. We will publish the new date and give clear notice in the app or by email when a change materially affects how we use personal data. Where fresh consent is needed, we will ask before the new processing begins.
Contact
For privacy questions or requests, email privacy@wrynkle.app.
Datahase Dev Private Limited
India