How Whim uses, retains, and protects data.

This policy explains what Whim collects, how we use it, and how to reach us if you want help or have questions.

Last updated: August 12, 2026 Contact support

What this policy covers

This policy applies to the signup form at whimlife.com and to the Whim mobile app.

What we collect

When you join the Whim updates list, we collect your email address, signup time, the Whim page that sent the signup, and your consent to receive those communications. URL query parameters and fragments are not retained with that source.
Account and authentication identifiers needed to let you create an account and sign in.
A live device location you choose to allow, or a city/town you select, so we can show relevant nearby events. Live GPS is optional.
Onboarding preferences; cards shown; swipe, save, remove, Undo, Calendar, detail, ticket, map, and link actions; session and screen activity; and corrections needed to personalize and improve recommendations.
Event, venue, category, destination, action date/time, age band, home market, action market, local/visitor and travel-distance classifications, platform, app version, operating-system version, logical display dimensions, pixel/font scaling, and other bounded product dimensions used for product, market, recommendation, accessibility, and layout-quality analysis.
Operational diagnostics such as bounded crash reports, error traces, latency, cache behavior, and request outcomes needed to keep Whim reliable. Diagnostic telemetry is designed to exclude raw coordinates, email, access tokens, and free-form search text.

How we use the data

To send the Whim product updates and monthly local-events newsletter you requested, and to respond to support questions.
To run the Whim product, including local discovery, personalization, and basic account management.
To troubleshoot bugs, prevent abuse, and improve quality.
To measure whether the app is actually useful, fast, and trustworthy for real users.
To create aggregated or de-identified analysis of local and visitor interest, event activity, supply gaps, and product behavior. Whim may share or license those insights to destinations, tourism organizations, event partners, or other organizations, but not as personal profiles or individual activity histories.

What we do not do

We do not sell personal information, personal profiles, or individual activity histories.
Joining the updates list does not authorize communication unrelated to Whim, and every marketing email will include a way to unsubscribe.
We do not intentionally publish your location, saved events, or private feedback.

Service providers

We use infrastructure and software providers to help operate Whim, including authentication, cloud hosting, databases, logging, and AI model access. Those providers may process data on our behalf so the app can function.

Retention

We retain an updates-list signup while you remain subscribed or while it is otherwise needed to honor your communication preferences. You may ask us to remove the signup record at any time, and marketing emails will provide an unsubscribe mechanism before sending begins.

While an account is active, Whim retains rich person-level interactions and product telemetry under this policy and does not currently make one uniform age-based deletion promise for those records. When account deletion completes, Whim removes account/profile data, exact date of birth, private Saved and Calendar lists, person-level interaction and telemetry rows, exact location history, credentials, provider identity, and user, device, session, IP, response, and idempotency identifiers. Before that erasure, Whim permanently retains anonymous action facts with event, venue, category, destination, action, date and four-hour time bucket, age band, home and action markets, local/visitor classification, travel-distance band, platform, app version, operating-system version, logical display and font-scale context, numeric measures, and other bounded analytical dimensions. Whim also permanently retains event/cohort metrics for raw and distinct contributions, positive/negative decisions, effective final decisions after Undo, final Saved/Calendar contribution, Undo, and removal. Operational diagnostics and backups follow separately configured access and retention controls; legally required retention, if any, follows its applicable controls.

Whim account and sign-in provider

Deleting your Whim account removes the Whim product profile, Whim's binding to your Microsoft Entra sign-in identity, and the person-level Whim data described above. Whim then deletes and permanently purges the Whim-specific customer identity in its Entra External ID directory. Provider deletion normally completes shortly but may take up to 72 hours after the product-data transaction; the former identity remains blocked during that work. To use the same email again, you must complete signup and receive a new identity.

Your choices

Registered users can delete their account inside the app, and guests can delete their guest identity and person-level activity there too. You can also email us to ask about signup records, request support, or make another applicable data request. You can use a selected city/town instead of live GPS and change location permission in device settings.

Contact

Email support@whimlife.com for privacy questions or support requests.