Privacy Policy
Last updated: August 20, 2026
This Privacy Policy explains how Follow Your Instincts UG (haftungsbeschränkt), Birkenstr. 14, 67067 Ludwigshafen am Rhein, Germany (“we”, “us”) processes personal data when you use the Wasim mobile app (the “App”) and the website wasim.chat (the “Site”). We are the controller within the meaning of the EU General Data Protection Regulation (“GDPR”). Contact: support@wasim.chat.
1. The short version
- No account, name, or email address is required to use the App.
- Your imported chats live primarily on your device. A copy is stored on our EU servers so the App can work (details below).
- To generate replies, excerpts of your conversation are sent to our AI provider (currently xAI in the United States).
- We do not sell personal data and we show no advertising.
- The Site uses no cookies and no analytics.
2. Data we process in the App
Content you provide
- Imported chat transcripts — the WhatsApp export you choose to import, which typically contains messages written by you and by other people, names, timestamps, and anything else in the export. Please only import chats you may lawfully use; you are responsible for the content you import, including personal data of third parties contained in it.
- Persona details — the name, photo, relationship, and reason-for-chatting you choose during setup.
- Messages you write in the App and the AI replies generated for you.
Technical data
- Anonymous account identifier — the App signs you in anonymously via Firebase Authentication; we know your installation by a random ID, not your name.
- Push token and device locale/time zone — used to deliver notifications and to time them appropriately.
- Derived style statistics — e.g., typical message length and emoji use, computed from the imported chat to steer the AI's writing style.
3. Where your data is stored
- On your device — the primary copy of your chats.
- Google Firebase (EU region, europe-west1) — a server-side mirror of each persona (recent conversation history, style statistics, push token, pending messages) so a persona can text you first while the App is closed, and an archive copy of the imported transcript. Access is restricted to our backend; no other user can access your data.
4. AI processing and international transfers
AI-generated conversations. Replies in Wasim are generated by third-party large language models — currently xAI's Grok models; we may use other providers. To generate each reply, relevant excerpts of the conversation (and the style statistics above) are transmitted to the provider and processed on our behalf. AI output is automated, imperfect, and depends heavily on how you steer the conversation; it is not reviewed by humans before you see it.
xAI processes data in the United States. The US is not subject to an unrestricted EU adequacy decision; we rely on the European Commission's standard contractual clauses and the provider's data-processing commitments for this transfer. Under the API terms we use, conversation content is processed to provide the service and not to train the provider's models. Google may also process limited infrastructure data outside the EU under equivalent safeguards.
No processing by us produces legal or similarly significant effects about you within the meaning of Art. 22 GDPR.
5. Purposes and legal bases
- Providing the Service (storing your personas, generating replies, delivering persona-initiated messages) — Art. 6(1)(b) GDPR (performance of contract).
- Push notifications — your consent via the iOS permission prompt, Art. 6(1)(a) GDPR; revocable any time in iOS Settings.
- Security, abuse prevention, and service integrity — Art. 6(1)(f) GDPR (legitimate interests).
6. Retention and deletion
- Deleting a persona in the App deletes its server-side mirror (conversation history, style data, pending messages).
- The archived copy of an imported transcript may be retained after in-app deletion for service integrity. You can have it — and all data linked to your anonymous ID — permanently erased at any time by emailing support@wasim.chat.
- Deleting the App from your device removes the on-device copy of your chats.
7. The Site (wasim.chat)
The Site is a static website hosted by Vercel Inc. (USA). When you visit it, the hosting provider processes technical connection data (such as your IP address) in server logs to deliver the pages and keep the service secure — Art. 6(1)(f) GDPR. The Site sets no cookies and runs no analytics or tracking.
8. Recipients
We share personal data only with processors that help us run the Service: Google Ireland Ltd. / Google LLC (Firebase: authentication, database, storage, cloud functions, push delivery), xAI Corp. (AI-generated replies), Apple Inc. (app distribution, push delivery), and Vercel Inc. (Site hosting). We may also disclose data where legally required. We do not sell personal data.
9. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interests (Art. 21), as well as the right to withdraw any consent at any time with future effect. Because the App identifies you only by an anonymous ID, we may ask you for information (e.g., your persona ID from the App) to locate your data.
You also have the right to lodge a complaint with a data-protection supervisory authority — for us, the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz — or with the authority of your habitual residence.
10. Children
The Service is not directed at, and may not be used by, anyone under 18 years of age.
11. Changes
We may update this Privacy Policy from time to time. The current version is always available at wasim.chat/privacy; material changes will be announced in the App or on the Site.
12. Contact
Privacy questions and data-subject requests: support@wasim.chat, or by post to Follow Your Instincts UG (haftungsbeschränkt), Birkenstr. 14, 67067 Ludwigshafen am Rhein, Germany.