This policy describes how When Was handles the information provided by those who use it.
When Was records the entries a user creates (event titles, dates, any notes written against them, and any tags or people associated with them) together with the email address used to sign in, where an account is used. Where the full version has been purchased, a record of that purchase is also held against the account. The app contains no analytics, tracking, or advertising, and collects no information beyond the above.
When Was may be used with or without an account, and this determines where entries are held.
Without an account, entries are stored solely on the device on which they were created. They are not transmitted to any server and are not accessible to the operator of When Was or to anyone else. No email address is collected. Entries stored in this way are not backed up; if the device is lost or its data cleared, they cannot be recovered.
With an account, entries are stored on the device and additionally on servers operated on behalf of When Was, so that they remain available across devices. A limited number of third-party service providers are engaged for hosting, data storage, and the delivery of sign-in messages; each processes information solely for the purpose of providing those services.
The full version is a one-time purchase made through Google Play. Payment is handled entirely by Google, and When Was does not receive or store card details or any other payment information. Google provides confirmation that a purchase was made, and that confirmation is held against the account so the purchase is recognised on any device the account is used on. It is checked with Google from time to time so that a refunded purchase is reflected.
Records belonging to an account are restricted at the database level to that account and are therefore not accessible to other users. Administrative access is held by the operator of When Was and is exercised only where necessary to maintain the service, resolve a technical fault, or comply with a legal obligation. Information is not sold, and is not disclosed to any other party.
Entries are retained until deleted by the user. Deleting an account permanently removes that account and all records associated with it. A complete export of an account's contents is available within the app and may be taken before deletion.
Information transmitted to or from an account is encrypted in transit. Authentication is performed by means of a single-use link or code sent to the user's email address; no user passwords are stored.
Questions regarding this policy may be directed to privacy@whenwasapp.com. Any revision will be reflected in the date shown above.