Privacy Policy
This policy explains what personal data the Whyp app and the website whyp.app collect, why, how long we keep it and what rights you have. We collect only what we need to make Whyp work, and the most sensitive parts — your location and the way you drive — only with your permission.
1. Who is responsible
The controller of your personal data is:
FLOWVATE DEVELOPMENT LTD
Galateias 2-4, 8046 Paphos, Cyprus
Registration number: HE 457494
E-mail for privacy questions: [email protected]
2. What we collect and why
Account
You can use Whyp without an account; we then give your device a random ID. If you sign in with Apple, we receive an Apple user ID and, if you choose to share them, your name and e-mail address (which can be an Apple private relay address). We use this to run your account, sync your data and contact you about it. Legal basis: performance of our contract with you.
Location and motion
With your permission, Whyp uses your phone’s location to show nearby fuel prices, plan routes and navigate. If you turn on trip recording, Whyp also uses location in the background and your phone’s motion activity to detect when a drive starts and ends, and records the route (GPS points), time, distance, speed and acceleration. From this we calculate trip cost, fuel use and driving-style figures such as smoothness. You can turn trip recording off, pause it or delete trips at any time. Legal basis: your consent, which you can withdraw in the app or in your phone settings.
Car and fuel-ups
Details you add about your car (for example fuel type and consumption) and your fuel-ups (litres, amount paid, station and, if you choose, a photo of the receipt). We use them to calculate your costs and savings. Legal basis: performance of our contract.
Friends, shared drives and leaderboards
If you use social features, we process your display name, your friends list, invitations, and the trips and figures you choose to share. During a shared drive with live location turned on, your position and speed are sent to the friends in that drive about every few seconds; live positions are deleted when the drive ends. Leaderboards show your display name and the figures they rank. Legal basis: performance of our contract and your consent for live location.
Subscription
If you buy Whyp Pro, Apple handles the payment. We do not receive your card details; we receive confirmation of your subscription status, product and dates so we can unlock Pro. Legal basis: performance of our contract.
App usage and diagnostics
With your consent, we collect events about how the app is used (for example that a trip was completed or a screen was opened), device model, OS and app version, and crash reports. We use them to fix bugs and improve Whyp. We do not use them to build advertising profiles and we do not sell your data. Legal basis: your consent; basic error and security logs on our servers are kept on the basis of our legitimate interest in keeping Whyp working and secure.
Notifications
If you allow notifications, we store a push token for your device to send you things like your weekly summary and invitations from friends. You can turn them off in your phone settings.
Website
whyp.app does not use advertising or tracking cookies. It stores your chosen language in your browser’s local storage. Our hosting provider processes technical data such as IP address and browser type to deliver the site and protect it from abuse. The site loads fonts from Google Fonts, which receives your IP address when the page loads.
3. Who we share data with
We do not sell your personal data. We share it only with:
- service providers that host and process data for us under contract and our instructions: cloud database and sign-in (Supabase, data stored in Frankfurt, Germany), servers (Hetzner, in the EU), map and routing providers, product analytics (such as Mixpanel and PostHog, only with your consent), and website hosting (Cloudflare);
- Apple, for Sign in with Apple, payments and push notifications;
- other Whyp users, only for what you choose to share (friends, shared drives, leaderboards);
- authorities, when the law requires it.
We keep your account and trip data in the European Union. Where a provider processes data outside the European Economic Area or the UK, we use safeguards required by law, such as the European Commission’s Standard Contractual Clauses.
4. How long we keep data
- Raw GPS points of a trip: up to 90 days. After that we keep only the route matched to roads and the trip figures.
- Trips, fuel-ups, car details and social data: until you delete them or your account.
- Live location in a shared drive: until the drive ends.
- Usage events and diagnostics: up to 24 months.
- Backups: up to 30 days after deletion from our main systems.
When you delete your account in the app, we delete your personal data from our systems, except what we must keep by law.
5. Your rights
You have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time (this does not affect processing before you withdrew it). You can delete trips and your account directly in the app. For anything else, write to [email protected]; we answer within one month.
You can also complain to a data protection authority — in Cyprus, the Commissioner for Personal Data Protection (dataprotection.gov.cy), or the authority in the country where you live or work (in the UK, the Information Commissioner’s Office, ico.org.uk).
6. Security
Data is encrypted in transit, access to it is limited to people who need it, and we review our providers’ security. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the authorities as the law requires.
7. Children
Whyp is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
8. Changes
We may update this policy as Whyp changes. The date at the top shows the latest version. If a change is important, we will tell you in the app before it applies.
9. Contact
FLOWVATE DEVELOPMENT LTD, Galateias 2-4, 8046 Paphos, Cyprus. E-mail: [email protected]. See also our Terms of Service.