Privacy Policy

Whim Delivers, LLC ("Whim," "we," "our," or "us") operates the Whim mobile application, the website getwhim.app, the Whim ChatGPT app and related services (together, the "Service"). This Privacy Policy explains what information we collect, why, who we share it with, how long we keep it, and the choices you have.

Whim serves New York City and is offered in the United States. If you have questions, write to support@getwhim.app.

a. Information you give us

• Account information: your name, phone number and email address when you create an account or join the waitlist.
• Payment information: card details and billing address, which go straight to Stripe, our payment processor. We never see or store a full card number.
• Delivery information: delivery addresses, access notes and, for gifts, the recipient's name, address and phone number.
• Preferences: sizes, styles and interests you choose to tell the Concierge, and your notification settings.
• Try-on photos: a photo you choose for Whim Mirror, our virtual try-on, and live camera video while you use it.
• Communications: what you write to the Concierge, to support, and in ratings.
• Shop and courier onboarding: for shops, business contact details; for couriers, government ID, a verification selfie, vehicle details and payout details.

b. Information collected automatically

• Device information: device type, operating system and a push notification token if you turn notifications on.
• Location: with your permission, your precise location, to show shops near you and to run deliveries. A courier's location is shared with you while your order is on its way.
• Usage and log data: pages and screens viewed, actions taken, IP address and browser type. On getwhim.app we use PostHog for this; it does not record what you type into forms, and order, gift and card identifiers are removed from web addresses first.

c. Shops that connect their store to Whim

• When a shop connects its Shopify store, Whim reads the store's details (name, address, phone and website) and its products, prices and stock, so they can be shown and sold in Whim.
• When a Whim customer buys from that shop, Whim takes the items sold off the shop's stock count in Shopify, and puts them back if the order is cancelled. The order itself, with the recipient's name and delivery address, stays in Whim, where the shop sees it in the Whim merchant portal. Whim sends no customer details to Shopify and does not read the shop's orders or customer records.
• Privacy requests that reach Whim through Shopify are honored: when a customer asks a shop to delete their data, Whim deletes or anonymizes it in the orders it holds for that shop, and when a shop disconnects, its data is deleted or anonymized within 30 days, except what the law requires us to keep.

getwhim.app sets no advertising or cross-site tracking cookies. What it uses:

• Strictly necessary: a session cookie when you sign in to the web app, a cart cookie while you shop there, and a preview cookie during pre-launch access. These cannot be switched off.
• Payments: Stripe sets its own cookies on checkout pages to prevent fraud.
• Local storage: small settings kept in your browser, such as a saved delivery address, an animation preference, and the page that first brought you to us. They never leave your device except where this policy says.
• Analytics: PostHog, which sets a first-party cookie holding an anonymous identifier so that visits and the pages viewed can be counted. It does not record what you type into forms and does not replay your session.

You can clear or block cookies in your browser; the strictly necessary ones are needed for sign-in and checkout to work. The Whim app sets no cookies; its try-on screen loads getwhim.app without keeping any.

• To run the Service: take orders, charge payments, arrange couriers, and keep you updated by text, email and push notification.
• To run the Concierge and Whim Mirror: your request, your preferences and your try-on photo are processed to produce suggestions and looks.
• To support you and answer your messages.
• To keep the Service safe: prevent fraud and abuse, and verify couriers.
• To improve the Service and understand how it is used.
• To meet legal obligations, such as tax and payment records.

Whim Concierge and Whim Mirror (AI features)

The text you give the Concierge, and the preferences you have shared, are sent to an AI model provider to produce suggestions and, for gifts, an optional card draft. Your try-on photo and the garment image are sent to a try-on provider to produce the look. These providers process the data for us and may not use it to train their models or for their own purposes. Suggestions are generated automatically and can be wrong; check price, sizing and availability before you order. Please do not share sensitive personal information in Concierge messages.

When you sign in with your phone number we text you a one-time code. If you turn on text updates in Settings, we text you about your orders: confirmation, preparation, courier updates and delivery. We do not send marketing texts. Reply STOP to any message to stop, or HELP for help; message and data rates may apply. If you join the waitlist on getwhim.app, we text you once when early access opens.

We do not sell personal information, and we do not share it for cross-context advertising. We share it only as follows:

• Shops: your order, your first name and the delivery address, so the shop can prepare and hand over the order. Shops never see your payment details.
• Couriers: your first name, the delivery address, access notes, your phone number for the delivery, and the release code. Couriers do not see item prices.
• Gift recipients: your name and your message, and the recipient's own address once they confirm it.
• Service providers who process data for us under contract, listed in section 7.
• Legal: when the law, a court or a public authority requires it, or to protect Whim, our customers or others.
• Business transfers: in a merger, acquisition or sale of assets, under this policy.

These companies process personal information on our behalf, in the United States unless noted:

• Account and preferences: while your account is open, then deleted within 30 days of a deletion request.
• Orders and payments: seven years for tax and payment-dispute purposes. After you delete your account, order records are kept without your name, contact details or address.
• Delivery photos taken as proof of placement: 30 days.
• Try-on photos and looks: until you remove them in the app or delete your account; cached renders expire after 14 days.
• One-time codes: 24 hours. Checkout sessions that were not completed: about a day after they expire.
• Concierge conversations: while your account is open; you can clear them in the app or ask us to.
• Waitlist, shop inquiries and nominations: until we launch in your area or until you ask us to remove them, and no longer than two years after we last heard from you.

• Access and portability: in the app, Settings, then Data and privacy, then Download my data gives you a copy of what the app holds; the Service can also send you everything our servers hold. Or write to us.
• Correction: edit your details in the app, or write to us.
• Deletion: delete your account in the app under Settings, then Data and privacy. For details you gave on getwhim.app without an account, use the form on getwhim.app/privacy. We complete deletion within 30 days, and within 45 days for requests by email.
• Marketing: every marketing email has an unsubscribe link, and you can turn marketing email off in Settings. Reply STOP to texts. Push notifications are controlled in your device settings and in the app.
• Location, camera, photos and contacts: permissions you can change at any time in your device settings.

To make a request by email, write to support@getwhim.app from the email address or phone number on the account. We confirm it is you before acting, usually by replying to that address or texting a code to that number. We do not treat you differently for exercising these rights.

Delete your data from getwhim.app

If you joined the waitlist, nominated a shop or wrote to us as a shop on this website, enter that email address and we will send you a link that removes it.

The Service is for people 18 and older. We do not knowingly collect personal information from anyone under 18, and never from a child under 13. If we learn that we have, we delete it. A parent or guardian who believes a child has given us information can write to support@getwhim.app and we will act within 30 days.

If you live in California or another state with a consumer privacy law, you have the rights in section 9, the right to know the categories of personal information we collect and share (sections 2, 6 and 7), and the right to opt out of sale or sharing. We do not sell personal information or share it for targeted advertising, and we do not use sensitive personal information for anything beyond providing the Service. You can appoint someone to make a request for you; we will verify it with you directly.

Data is encrypted in transit and at rest, access is limited to the people and systems that need it, and our database enforces row-level access rules. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

When we change this policy in a way that matters, we will say so in the app or by email before the change takes effect. The date at the top tells you when it last changed.

• Whim Delivers, LLC, New York, NY
• support@getwhim.app