Privacy Policy

1) Who we are & how to contact us

• Controller: Whereto Applications Inc. ("WerToGo")
• Registered address: 1755 Norfolk County Hwy 24 E, Vittoria, Canada
• Privacy contact: admin@where2apps.com
• Data Protection Officer (if applicable): Gavyn Cronkwright, admin@where2apps.com

2) Scope

This Policy applies to personal information we process about users of our Services. It does not apply to third‑party websites, apps, or services linked from our app.

3) Information we collect

A. Information you provide

• Account details: name, email address, date of birth (for age gating), student number (for eligibility/verification), password or sign‑in token.
• Profile (optional): photo, display name, school/college, graduation year, bio.
• Plans/attendance: venues you select as "going" or "interested," comments, reactions, and in‑app messages to friends.
• Support communications: messages you send to us.

B. Information we get automatically

• Device & app data: device identifiers, OS, app version, language, time zone, crash logs, performance data.
• Usage data: interactions with maps and lists, taps, screens viewed, session timestamps, referral/attribution.

C. Location data (with your consent)

• Approximate or precise location from your device to power the map, show nearby venues, and improve relevance. You can disable this in your device settings.

D. Student number handling

• Collected solely to confirm eligibility. Never displayed to other users.
• We either: (i) verify and then delete the raw number while retaining a verification flag/token, or (ii) store a salted hash/tokenized form separate from your profile. We do not share student numbers with advertisers.

4) Why we use your information (purposes & legal bases)

We process your information for:

1. Providing the Services: account creation, login, friend graph, showing venues, displaying your chosen plans to friends.
2. Location‑enabled features: maps, nearby venues, geofencing.
3. Safety, integrity, and moderation: detect fraud/abuse, enforce terms, protect users and the platform.
4. Communications: send service messages (e.g., security alerts, policy updates).
5. Analytics & product improvement: understand usage, fix bugs, improve relevance
6. Legal compliance: record‑keeping, regulatory obligations.

We do not sell your personal information. We do not engage in cross‑context behavioral advertising by third parties at launch. If this changes, we will update this Policy and provide required opt‑outs.

5) How sharing works on WerToGo

• Your plans are social by design. When you mark that you're "going" to a venue, your friends (and any audience you choose) can see that signal.
• Visibility controls. Where available, you can adjust who sees your plans (e.g., friends only / specific friends / private). Your student number are never displayed to other users.
• Public content. If you choose to post publicly (where offered), anyone on or off WerToGo may see that content.

6) When we disclose information

We share personal information with:

• Service providers/Processors who help us operate (e.g., cloud hosting, analytics, crash reporting, customer support, messaging, geolocation SDKs, and maps APIs). They are bound by contract to use your data only for our instructions.
• Integration partners you connect (if/when available). We'll tell you what data will be shared and seek your consent.
• Law enforcement or regulators when required by law or to protect rights, safety, and integrity.
• Business transfers in the event of a merger, acquisition, financing, or sale, subject to this Policy.

We do not share student numbers with venues or other users.

7) International transfers

We may process and store information in Canada, the United States, and other countries.

8) Data retention

We retain personal information only as long as necessary for the purposes described or as required by law. Default targets (subject to change):

• Account data: retained until you delete your account.
• Student number: deleted after verification or stored only as a non‑reversible token/hash separate from your profile.
• Location data: raw session location discarded after [24–72 hours]; aggregated analytics retained longer.
• Plans/attendance signals: visible until the event ends; archived for up to 30 days for safety and abuse review; anonymized thereafter for analytics.
• Logs & security records: 12 months.
• Legal/compliance records: as required

9) Your rights & choices

• Access, correction, deletion: You can review, update, or delete your information in the app or by contacting us.
• Account deletion (in‑app): Go to Profile → Settings → Account → Delete Account. Deleting your account removes your profile, plans, and connections from the app. Some logs may be retained as required by law and security.
• Location: Enable/disable precise or approximate location via device settings; you can use parts of the app without location, though some features won't work.
• Notifications & emails: Control preferences in the app or via unsubscribe links.

10) Children and students

WerToGo is intended for university/college communities and is not for children under 13. If you are under the age of majority in your province/state, you must have permission from a parent/guardian. If we learn we have collected data from a child under 13, we will delete it.

11) Security

We implement technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and security monitoring. No system is 100% secure; if we detect a breach affecting your data, we will notify you and regulators as required by law.

12) Changes to this Policy

We may update this Policy from time to time. We will post the updated version and revise the Effective date above. For material changes, we will provide additional notice (e.g., in‑app notification or email).