Privacy Policy

Whim ("we," "our," or "us") operates the Whim mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

a. Information You Provide

• Account Information: Name, email address, phone number, and password when you create an account.
• Payment Information: Credit or debit card details, billing address. Payment processing is handled by our third-party payment processor; we do not store full card numbers.
• Delivery Information: Delivery addresses, delivery instructions, and recipient details.
• Communications: Messages you send through customer support, feedback, and reviews.
• Driver Information: For delivery drivers — government-issued ID, selfie for identity verification, vehicle information, emergency contacts, and payout details.

b. Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Location Data: With your permission, we collect precise location data to facilitate deliveries, show nearby stores, and provide estimated delivery times.
• Usage Data: Pages viewed, features used, interaction patterns, and timestamps.
• Log Data: IP address, browser type, access times, and referring URLs.

c. Information from Third Parties

• Identity verification services for driver onboarding.
• Payment processors for transaction confirmation.
• Analytics providers for usage insights.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process orders, payments, and deliveries.
• Send order confirmations, delivery updates, and verification codes via SMS.
• Verify driver identity and eligibility.
• Communicate with you about your account, orders, and customer support inquiries.
• Personalize your experience and recommend products and stores.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations.
• Analyze usage patterns to improve the Service.

By providing your phone number and placing an order, you consent to receive transactional SMS messages related to your orders, including:

• Order confirmations and status updates.
• Delivery notifications and estimated arrival times.
• Delivery verification codes.
• Driver assignment and pickup notifications.

You can opt out of SMS messages at any time by replying STOP to any message. Reply HELP for assistance. Message and data rates may apply. Message frequency varies based on order activity.

We do not sell your personal information. We may share your information with:

• Merchants: Store name, order details, and delivery address to fulfill your order. Merchants do not receive your payment information.
• Delivery Drivers: Customer first name, delivery address, delivery instructions, and verification code. Drivers do not see order item details or prices.
• Service Providers: Third-party companies that help us operate the Service (payment processing, SMS delivery, cloud hosting, analytics).
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication and access controls.
• Regular security assessments.
• Row-level security on database tables.

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide the Service. We may retain certain information as required by law, to resolve disputes, or to enforce our agreements. You may request deletion of your account and data by contacting us.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information.
• Portability: Request a portable copy of your data.
• Opt-Out: Opt out of SMS notifications by replying STOP. Manage push notification preferences in your device settings.
• Location: Revoke location permissions through your device settings.

To exercise these rights, contact us at privacy@whimapp.co.

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app or sending you a notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@whimapp.co
• Support: support@whimapp.co