Privacy Policy
Your privacy is important to us. This policy explains how WayAI (“we”, “us”) collects, uses, and protects your information across the WayAI website, mobile apps, and related services (the “Services”). It is WayAI's policy to respect your privacy regarding any information we collect.
Information We Collect
Depending on how you use the Services, we may collect the following categories of information:
- Account and identity — your name, email address, and authentication details, used to create and secure your account.
- Messages and content — the messages, conversations, and files you send or receive, so we can deliver and process them.
- Voice and audio — when you record a voice message, the audio is captured and transcribed to text to fulfil your request. When you start a voice call with an AI agent, your voice is streamed live to the AI provider that runs the call (OpenAI) so the agent can hear and answer you; if the organization that runs the agent records its calls, the app tells you before the call starts, and the recording is kept with the conversation. The microphone is used only while you record a voice message or are on a call you started, and is never accessed otherwise; a call you started keeps the microphone on if you lock the screen or switch apps, so the call continues.
- Push notifications — a device push token (via Apple APNs or Google FCM) so we can deliver notifications. It is removed when you sign out or disable notifications.
- Diagnostics and usage — crash reports and limited, privacy-scrubbed analytics that help us keep the app stable and improve it. This data is never used for advertising.
- Connected services — when you authorize an integration such as WhatsApp or Instagram, we access only the data needed to perform the actions you request.
How We Use Your Information
We use your information to provide, secure, and improve the Services: to deliver and process your messages, transcribe voice input, send notifications you have enabled, keep the app stable through diagnostics, and perform the actions you request across connected services. We do not use your information for advertising, and we never sell it.
Data Protection
We implement data protection through: TLS/SSL encryption in transit; OAuth tokens stored with authenticated encryption (AEAD); strict access control with RBAC; logical data isolation per user; and continuous access auditing.
Sharing and Service Providers
Your data is not sold or shared for advertising purposes, nor used by WayAI to train AI models. We share data only with providers who process it on our behalf to run the Services: AI model providers (OpenAI, Anthropic, Google, xAI, Groq, and OpenRouter) and voice providers (ElevenLabs), which receive message content to process it; cloud infrastructure, hosting, and storage providers (Cloudflare, Fly.io, Upstash, and ClickHouse) and a code-execution sandbox provider (E2B); sign-in (WorkOS), payment (Stripe), and email-delivery (Resend) providers; push-delivery providers (Apple, Google, and Expo); and diagnostics providers (Sentry for crash reports, PostHog for product analytics, and Grafana for logs and performance monitoring). When you connect a messaging channel such as WhatsApp, Instagram, Telegram, or email, messages are exchanged with that platform through its official APIs, and when you or your organization's administrators connect an external service as a tool (for example, a REST API or MCP server), the data an agent sends to it is shared with that service. Otherwise, sharing occurs only when required by law.
Retention
Messages and data from connected services are stored in your conversation history while your account is active. Authentication tokens are kept encrypted while authorization is active. You can revoke access to a connected service at any time through that service's settings, or delete conversations in your WayAI account settings.
Deleting Your Account and Data
You can delete your account at any time from the app: in the mobile app, open the You tab and tap “Delete account”; on the web, open your user settings (tap your avatar), go to the Profile tab, and use “Delete account” in the Danger Zone. You can schedule the deletion or delete immediately; either way, your account and all associated data are permanently removed within 30 days of your request.
Account deletion instructions →
Contact Us
If you have questions about this policy or your data, contact us at privacy@wayai.pro.
This policy is effective as of September 30, 2026.