Whuff

Privacy Policy for Whuff

Effective Date: 1 August 2025
Last Updated: 1 August 2025

Overview

Whuff, a website and app run by Manicgrin Media Ltd. ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Whuff mobile application (the "App").

Whuff is a thoughtful social network that allows users to allocate "Whuffies" to people they value in their community, creating meaningful connections and recognition systems.

Information We Collect

Information You Provide Directly

Profile Information: Your display name, bio, business description (for business accounts), contact email, and website URL
Account Details: Account type (personal or business) and account preferences
Profile Photos: Avatar images you choose to upload from your photo library
Allocation Data: The Whuffies you allocate to other users, including amounts, categories, and any associated messages or notes

Information Generated Through App Use

Whuff Scores: Calculated scores based on Whuffies received from other users
Usage Analytics: How you interact with the App, including allocation patterns and feature usage
Device Information: Device identifiers, operating system version, and app version for technical support

Information from Third Parties

Invited Users: When someone invites you to join their Whuff network via invite links, we may receive your information through that invitation process

How We Use Your Information

We use the information we collect to:

Provide Core Functionality: Enable you to create profiles, allocate Whuffies, and calculate Whuff scores
Facilitate Connections: Help you discover and connect with other Whuff users
Send Notifications: Remind you about expiring allocations and other important updates (with your permission)
Improve the App: Analyse usage patterns to enhance features and user experience
Provide Support: Respond to your inquiries and provide technical assistance
Ensure Security: Protect against fraud, abuse, and other harmful activities

Data Storage and Synchronisation

Local Storage

Your data is stored locally on your device using Core Data
This ensures the App works even when you're offline

Cloud Synchronisation

We use Apple's CloudKit to sync your data across your Apple devices
This allows you to access your Whuff network on all your iOS devices
CloudKit data is encrypted and controlled by Apple's privacy standards

Data Retention

Active Allocations: Stored until they expire or are manually removed
Expired Allocations: Automatically removed from the system
Profile Information: Retained while your account is active
Account Deletion: All associated data is permanently deleted within 30 days

Information Sharing and Disclosure

Within the Whuff Network

Your profile information (name, bio, avatar, Whuff score) is visible to other Whuff users
Your allocations are visible to their recipients
Business account information may be visible to help users identify organisations

We Do Not Share Your Information With Third Parties

We do not sell, rent, or share your personal information with third parties for marketing purposes
We do not use third-party analytics or advertising services that track users

Legal Requirements

We may disclose your information only when required by law, such as:

In response to valid legal requests from government authorities
To protect our rights, property, or safety, or that of our users
To investigate potential violations of our terms of service

Your Privacy Rights and Choices

Data Access and Portability

You can view all your data within the App
Contact us to request a copy of your data in a portable format

Data Correction

You can edit your profile information, bio, and other details directly in the App
Contact us if you need assistance updating your information

Data Deletion

You can delete individual allocations within the App
To delete your entire account and all associated data, contact us at [privacy@whuff.org]

Notification Preferences

You can control notification settings in your device's Settings app
We only send notifications about allocation reminders and important updates

CloudKit Sync

You can disable CloudKit sync in your device's iCloud settings
This will prevent data synchronisation but allow local use of the App

Security Measures

We implement appropriate security measures to protect your information:

Device-Level Security: Data is protected by your device's security features (passcode, biometrics)
Encryption: CloudKit data is encrypted both in transit and at rest
Local Storage Protection: Core Data stores are protected by iOS security mechanisms
Access Controls: Limited access to user data within our systems
Regular Updates: We regularly update the App to address security vulnerabilities

Children's Privacy

Whuff is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information immediately.

International Data Transfers

If you use Whuff outside your home country, your information may be transferred to and processed in other countries. We ensure appropriate safeguards are in place for such transfers, primarily through Apple's CloudKit infrastructure which maintains high privacy and security standards globally.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated policy in the App
Sending a notification through the App
Updating the "Last Updated" date at the top of this policy

Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

Third-Party Services

Whuff uses the following third-party services:

Apple CloudKit: For data synchronisation across your devices
Apple Push Notification Service: For sending notifications (when permitted)
Universal Links: For invite link functionality via whuff.org

These services have their own privacy policies, and we encourage you to review them.

Data Processing Legal Basis

We process your information based on:

Consent: When you agree to use the App and its features
Contract Performance: To provide the Whuff service you've requested
Legitimate Interests: To improve the App and ensure security
Legal Compliance: When required by applicable laws

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: privacy@whuff.org

For general support inquiries:
Email: hello@whuff.org

Your Rights Under GDPR (for EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

Right to Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data
Right to Restrict Processing: Request limitation of how we process your data
Right to Data Portability: Request transfer of your data to another service
Right to Object: Object to our processing of your data
Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at privacy@whuff.org.

Your Rights Under CCPA (for California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to Know: What personal information we collect and how it's used
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
Right of Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at [privacy@whuff.org].

This Privacy Policy is designed to be transparent about our data practices and your rights. We believe privacy is fundamental to building trust in our community-focused platform.