Privacy Policy

Walfred — Privacy Policy Last Updated: April 20, 2026

---

1. Introduction

Welcome to Walfred ("we," "us," or "our"). Walfred is a WhatsApp-native personal assistant that helps you manage your relationships, messages, and daily communications through AI-powered tools — all directly within WhatsApp.

We deeply respect your privacy. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the choices you have regarding your information. By using Walfred, you agree to the practices described in this policy.

---

2. Data We Collect

2.1 Account Information

When you link your WhatsApp with Walfred, we collect:

• WhatsApp Identifier (LID): A hardware-linked, immutable identifier used to associate your account with the service. We do not rely on your phone number as a primary identifier.
• Phone Number: Collected as part of the WhatsApp linking process.
• Display Name: Your WhatsApp display name.
• Language and Timezone Preferences: Used to personalize your experience (e.g., delivering morning briefings at the right local time).
• Session and Metric Data: We securely track your session connectivity state and anonymized AI usage metrics strictly for capacity planning and billing purposes.

2.2 Message Data

To provide our services, Walfred processes messages exchanged through your WhatsApp account. You are always in control of which conversations are analyzed. You can choose to "untrack" specific contacts at any time. If a contact is untracked, absolutely nothing from your conversations with them will be processed or stored. For tracked contacts, we process:

• Bot Conversations: Messages you send directly to the Walfred bot are stored temporarily to maintain conversation context and deliver accurate responses.
• Contact Messages: Messages between you and your tracked contacts are processed to power features like contact profiling, conversation search, and daily briefings. We exclusively process text and audio messages; we do not process images, videos, or any other media types. These raw conversations are processed in batches every 12 hours. Once the batch processor's AI extracts the necessary structured insights (e.g., names, calendar events, preferences), the raw conversation text and audio are completely deleted. The analyzed, structured information remains for the long term to power your calendar integrations, reminders, and relationship management.

2.3 Contact & Relationship Intelligence

To provide a cohesive experience, Walfred employs a "Person-centric" architecture. We securely collect and structure:

• Unified Profiles: We aggregate interactions from multiple phone numbers or channels into a single relationship profile.
• AI-Generated Memories: Structured information (e.g., preferences, facts, and events) extracted autonomously from conversations to assist you in managing relationships.
• Location Data: If location context is provided, we geocode the place string to store generalized coordinates for relevant future reminders.

2.4 Voice Notes & Media

We exclusively process text messages and audio voice notes. We do not process, analyze, or store any other type of media (such as images, videos, documents, or stickers). If you use our voice note feature, audio data is processed through Google's Gemini AI for transcription and summarization (limited to 10 minutes per file). Audio data is completely deleted immediately after processing.

2.5 Calendar and Meetings

If you choose to use our meeting management features, Walfred will process meeting schedules and lifecycle details extracted from your conversations to sync them securely.

2.6 Dashboard Data

If you access the Walfred Dashboard, we may collect:

• Authentication Tokens: Passwordless magic link authentication managed through Supabase Auth.
• Feedback and Bug Reports: Submissions made through the dashboard or bot, including type, title, and description.

---

3. How We Use Your Data

We use your data exclusively to provide and improve the Walfred service. Specifically:

We will NEVER:

• Sell your data to third parties.
• Use your data for advertising purposes.
• Share your personal messages or contact information with other users.
• Access your data for any purpose other than delivering the service.

---

3.1 Our Promise of Integrity

We would be lying if we said we physically cannot access the databases where your analyzed information is stored. At a technical level, because we build and maintain the system, our engineering team has the keys. We need this structured information stored in our databases to automate the service, operate the AI processing, and deliver the features you rely on.

However, operating with pure integrity is our core principle. We absolutely do not access, read, or snoop on your database records because we understand how incredibly sensitive and personal your relationship data is. All raw processing is done autonomously by an AI, and privacy is our highest priority.

---

4. Data Storage and Security

4.1 Where Your Data Lives

Your data is stored across the following services, each chosen for its security and reliability:

4.2 Security Measures

We use the highest industry standards for security to keep your information private and safe at all times.

• All data is encrypted in transit using TLS/SSL.
• Database access is controlled through Row-Level Security (RLS) policies, ensuring users can only access their own data.
• Authentication is handled via secure, passwordless magic links.
• API endpoints are protected with API keys and access controls.
• WhatsApp sessions are maintained in isolated, containerized environments.

4.3 Data Retention

• Raw messages (text and audio) are deleted completely from our databases every 12 hours by our batch processor once the AI has analyzed them. They are never stored permanently.
• Short-term chat history (bot conversations) expires automatically after 7 days.
• Contact profiles and structured data are retained as long as your account is active.
• All data is permanently deleted upon account deletion (see Section 6).

---

5. Third-Party Services

Walfred relies on the following third-party services to function. Each has its own privacy policy:

We do not share your personal data with any of these services beyond what is strictly necessary to deliver the service. No third-party service has independent access to your contact list or message content for their own purposes.

---

6. Your Rights and Choices

6.1 Delete Your Data

You can delete all of your information at any point, either directly from the Mission Control Dashboard or by simply talking to Walfred (the bot) and asking to delete your data. When you do this, everything will be deleted automatically and instantly. Your session will be forcefully logged out, your WhatsApp link will be severed, and absolutely nothing will remain stored on our end. This action will:

• Permanently delete your user profile and account.
• Delete all contact profiles and relationship data.
• Remove all vectorized conversation history.
• Cancel all scheduled messages.
• Clear all short-term conversation history.

6.2 Access Your Data

Through the Mission Control Dashboard, you can view:

• Your contact profiles and relationship summaries.
• Scheduled and sent messages.
• Feedback submissions.

6.3 Data Portability

You may request an export of your structured data (contact profiles, scheduled messages) by contacting us directly.

6.4 Opt Out

You can disconnect your WhatsApp from Walfred at any time. Disconnecting will stop all data processing. You may also request full data deletion as described above.

---

7. Children's Privacy

Walfred is not intended for use by individuals under the age of 16. We do not knowingly collect data from children. If we learn that we have inadvertently collected data from a child under 16, we will promptly delete it.

---

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last Updated" date at the top of this document.
• Notify users of material changes via a message through the Walfred bot.

Your continued use of Walfred after any changes constitutes acceptance of the updated policy.

---

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

• Email: support@walfred.ai
• WhatsApp: Message the Walfred bot with "I have a privacy question"

---

This Privacy Policy applies to all Walfred users, including those on free trials and active subscriptions. By continuing to use the service, you consent to this updated policy.