WamyWho we are
Wamy (wamyapp.com) is run by Mahara Tech in the Sultanate of Oman, which is responsible for your data in it. For anything about your data, write to info@wamyapp.com.
What we keep
- Your account: your e-mail address, your name if you wrote one, and the language and look you chose. If you sign in with Google: only your name, e-mail and Google account id, never your password or anything else from your Google account.
- Your messages: the messages services and their teams send you, your replies, the photos and documents attached to them, and when each was sent, delivered and read.
- Your links to services: when you link Wamy from a service you use, that service gives us an id that stands for you there (such as your number or account number with them), so its messages reach you.
- Your devices: the browser and system of each device you signed in on and when it was last used, so you can see your devices and sign out of any. If you turn on alerts: the alert address your browser gives us to send them to.
- Short-lived technical data: your internet address (IP) when you ask for a sign-in code or keep retrying, to stop abuse. It is deleted within a day.
We do not ask for a payment card, your location or your contacts. Photos you send are redrawn, which drops what the camera stores in them, such as where they were taken.
Why we use it
- To deliver messages to you and to whoever you reply to, alert you on your device, and send an e-mail copy when the sender asks for one and you have no device with alerts on.
- To sign you in, protect your account, and stop spam and abuse (such as limits on messages and attempts).
- To find and fix faults.
We do not sell your data, show ads based on it, or read your messages for marketing.
Who sees what
- The organisation that messages you (school, office, platform) sees whether its messages reached you and were read, and what you send to it: replies and attachments.
- Its reply team (staff the organisation names) sees your conversation with it, your name, and your e-mail if you wrote to it without an account there.
- No organisation sees your conversations with another one, or knows that you deal with others.
- We access data only when needed to run the service, fix a fault, answer your request or comply with the law.
Each organisation that messages you is responsible for its messages and for your data held by it, under its own privacy policy.
Services we rely on
- Browser alert services (Google, Apple, Mozilla) carry alerts to your device. The alert content is encrypted before it reaches them, so they cannot read it.
- Our e-mail server sends sign-in codes and e-mail copies of messages.
- Google, only if you choose to sign in with it.
- Our hosting provider runs the servers that store the data.
How long we keep it
- Your account, messages and attachments: as long as your account exists.
- "Clear chat" hides that chat's messages from your screen; the organisation that sent them may keep its own copy.
- Sign-in codes and links: deleted within a day of expiring. Attempt counters and internet addresses: within a day.
- If you ask us to delete your account, we delete it with your messages, attachments and devices within 30 days, except what the law requires us to keep.
Your rights
Under the Personal Data Protection Law of the Sultanate of Oman, you can ask for:
- a copy of your data we hold;
- anything wrong in it to be corrected;
- your account and data to be deleted;
- to stop receiving messages from an organisation, which you can do yourself at any time with "Block" in the chat.
Send your request to info@wamyapp.com from the e-mail address of your account. We answer within 30 days.
How we protect it
- The connection to Wamy is encrypted (HTTPS), and alert content stays encrypted until it reaches your device.
- Sign-in codes and links work once and for a short time; we store a fingerprint of them, not the codes themselves.
- Photos and documents are stored where the internet cannot open them, and only the person in the conversation and the organisation's team who can see it can open them.
- You can see the devices you signed in on and sign out of any of them in Settings.
Children
Wamy is meant for adults, such as parents, customers and staff. Anyone under 18 uses it with a parent's or guardian's consent.
Changes to this policy
If we change this policy, we update the date at the top of this page, and if the change matters we tell you in the app before it takes effect.
Contact
For any question or request about your data: info@wamyapp.com.