Last updated: 6 September 2026
WhoZapp (“WhoZapp”, “we”, “us”) is a marketplace for local services — a map of nearby specialists, their profiles and listings, reviews, messaging and calls. This policy explains what personal data the WhoZapp mobile app and website (whozapp.net) collect, why, and your choices. The service is operated by WhoZapp. Contact: info@whozapp.net.
| Category | Examples | Why |
|---|---|---|
| Account | Name, family name, email, password (stored only as a salted hash) | Create and secure your account, sign-in, password reset |
| Specialist profile (optional) | Address, map coordinates, languages, services offered, photos | Publish your listings and show you on the map to people nearby |
| Location | Approximate and/or precise device location | Show specialists near you and place your own listings; used only while you use the map, not tracked in the background |
| Content you create | Listings, reviews, chat messages, attached photos and voice messages | Deliver your content to the people you intend |
| Calls | Audio/video streams | Voice and video calls are peer-to-peer (WebRTC) and are not recorded or stored by us; a relay server (TURN) may pass the encrypted media only when a direct connection is impossible |
| Device & technical | Push notification token, a device identifier, app/OS version, IP address, server logs | Deliver notifications, keep the service reliable and secure |
You can revoke any permission in your device settings; the related feature will then stop working, but the rest of the app continues.
To operate and provide the service (accounts, the nearby-specialists map, listings, reviews, messaging, calls), to send transactional email (such as password-reset links) and push notifications, and to keep the service secure and working. We do not sell your personal data, and we do not use it for third-party advertising.
With other users: your public profile, listings and reviews are visible to others; messages and call invitations reach the people you send them to. Your exact address is hidden if you choose to hide it.
With service providers that process data only on our behalf:
| Provider | Purpose |
|---|---|
| Google Firebase Cloud Messaging | Delivering push notifications (uses your device push token) |
| SendGrid (Twilio) | Sending transactional email (e.g. password reset) |
| Hosting provider (Hetzner) | Running our servers and database |
| Map & address providers (e.g. Esri, OpenStreetMap/Nominatim) | Map tiles and address look-ups; your map view and address queries reach these tile/geocoding services as part of normal map use |
We may also disclose data if required by law.
Traffic is encrypted in transit (HTTPS/TLS). Passwords are stored only as salted hashes, never in plain text. Location metadata (EXIF) is stripped from photos you upload, so uploading a photo does not reveal where it was taken.
We keep your data while your account is active. You can request access, correction, or deletion of your account and associated data at any time by contacting info@whozapp.net; we will delete it except where we must keep certain records by law. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.
WhoZapp is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.
Our servers are located in the European Union. If you use WhoZapp from another country, your data will be processed on those servers.
We may update this policy; we will post the new version here and update the date above. Material changes will be communicated in the app.
Questions or requests: info@whozapp.net.
This document is a starting draft prepared for WhoZapp’s app-store submission. Please review it against your actual data practices and applicable law — ideally with legal counsel — before publishing.