// Introduction
WRRU? ("Where Are You?") is built with privacy as the foundation. This policy explains how we handle your data—or more accurately, how we don't handle it. We believe location sharing should be secure, ephemeral, and entirely under your control.
// What Data We Collect
✓ Minimal Profile Data
Username, display name, and optional avatar stored in Apple's CloudKit. End-to-end encrypted.
✓ Connection Records
Friend connections stored in CloudKit. Only connection status and Auto-Share preferences are saved.
✗ Location Data
Your location is never stored on our servers. Locations are transmitted directly via CloudKit encryption and automatically deleted within 1 hour.
✗ Usage Analytics
We do not track your app usage, location history, or behavioral patterns. Zero analytics, zero telemetry.
// How We Use Your Data
- Profile Authentication: Your username and profile enable friend connections.
- Location Sharing: When you accept a ping request, your location is encrypted and transmitted once. No storage, no logs.
- Auto-Share Mode: If enabled for a connection, your location is shared automatically with that contact only. You can disable anytime.
- Connection Status: Last active timestamp shown to friends (you can appear offline by closing the app).
// Data Retention
Profile Data: Stored in CloudKit until you delete your account.
Connections: Persist until you unfriend or block.
Locations: Automatically deleted after 1 hour. Zero permanent storage.
Ping History: Deleted within 1 hour of completion.
// Third-Party Sharing
WE DO NOT SHARE YOUR DATA WITH THIRD PARTIES.
WRRU? does not sell, rent, or share your personal information with advertisers, data brokers, or any external entities. Your data remains between you, your contacts, and Apple's encrypted CloudKit infrastructure.
// Security Measures
- AES-256 Encryption: Industry-standard encryption for all data.
- TLS 1.3: Secure data transmission protocol.
- CloudKit Security: Apple-managed encryption keys.
- On-Device Processing: Location data processed locally on your device.
- No Background Tracking: GPS only activates when you share location.
// Your Rights
Access & Export
Request a copy of your profile data anytime.
Delete Account
Permanently delete your account and all associated data.
Block Contacts
Block unwanted connections and prevent future requests.
Disable Auto-Share
Toggle Auto-Share mode on or off per contact.
// GDPR & Compliance
WRRU? complies with GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act). Users in the EU and California have additional rights including data portability, right to be forgotten, and opt-out of data processing. Contact privacy@dro1d.org to exercise these rights.
// Children's Privacy
WRRU? is not intended for users under 13 years old. We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact wrru@dro1d.org immediately.
// Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of WRRU? after changes constitutes acceptance of the updated policy.
