Privacy Policy

Last updated: March 29, 2026

1. Introduction

Wapuufy (“we”, “our”, or “the App”) is a selfie camera app for the WordPress community, used at WordCamp events worldwide. This Privacy Policy explains how we collect, use, and protect your personal data when you use the Wapuufy mobile app or visit wapuufy.com.

2. Data We Collect

Photos & Camera Data

  • Photos you take using the app (selfies)
  • Face detection data processed on-device for AR overlays and AI generation
  • AI-generated Wapuu portraits created from your photos

Both the original photo and the AI-generated version are saved. Face detection data is processed on-device and is never sent to our servers in raw form.

Account Information

  • Email address (via WordPress.com or Google OAuth)
  • Phone number (if using WhatsApp OTP login)
  • Display name and Gravatar profile

Device & Usage Data

  • Device type and operating system version
  • App version
  • Crash reports (via Sentry, when consented)

3. How We Use Your Data

  • To provide AR Wapuu overlays on your selfies
  • To generate AI Wapuu portraits from your photos on our WordPress backend
  • To display your photos in the event gallery (with your consent)
  • To enable contact sharing via QR codes at WordCamp events
  • To improve app stability and performance (crash reports)

4. AI Processing

When you use AI Mode, your photo is sent to our WordPress backend at wapuu.app, which processes it using third-party AI services (OpenAI, Stability AI, Google Gemini, Replicate, FLUX, or fal.ai) to generate a Wapuu character portrait. The AI provider receives only the photo data needed for generation. We do not use your photos to train AI models.

5. Data Storage & Security

  • Authentication tokens are stored in your device’s secure keychain (iOS Keychain / Android Keystore)
  • App preferences are stored locally on-device using encrypted storage
  • Photos and account data are stored on our WordPress Multisite servers
  • All API communication uses HTTPS encryption

6. Third-Party Services

  • WordPress.com — OAuth authentication
  • Google — OAuth authentication
  • Gravatar — Profile avatars
  • OpenAI / Stability AI / Gemini / Replicate / FLUX / fal.ai — AI image generation (server-side only)
  • Sentry — Crash reporting (when consented)
  • Expo / EAS — App updates delivery

7. Your Rights (GDPR)

You have the right to:

  • Consent — We ask for explicit consent before capturing photos or processing data
  • Access — View your data through the app’s settings
  • Rectification — Update your profile information
  • Erasure — Delete all your data via Settings > Delete All My Data
  • Withdraw consent — Revoke consent at any time via Settings > Privacy & Consent

Data deletion requests are processed immediately. When you delete your data, all photos, account information, and preferences are permanently removed from our servers.

8. Children’s Privacy

Wapuufy is intended for use at WordPress community events. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us.

9. Data Retention

We retain your data for as long as your account is active. Photos in event galleries may be retained for the duration of the event plus 12 months, after which they are automatically deleted. You can delete your data at any time through the app.

10. Contact

For privacy inquiries, contact us at privacy@kdc.in