Privacy Policy
Last updated: 29 December 2025
weReady ("we", "us", or "our") operates the weReady mobile application and website (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of Personal Information when you use our Service.
We use your Personal Information for providing and improving the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used have the same meanings as in our Terms and Conditions.
weReady is operated from Belgium and is subject to Belgian law and the European Union General Data Protection Regulation (GDPR).
Age Requirement
Our Service is intended for users aged 16 years and older. By creating an account and using weReady, you confirm that you are at least 16 years of age. We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you become aware that your child has provided us with Personal Information without your consent, please contact us immediately. If we become aware that we have collected Personal Information from anyone under 16 without verification of parental consent, we will take steps to remove that information from our servers.
Information Collection and Use
Account Information
When you create an account, we collect your name, email address, and optionally your phone number. You may also choose to upload a profile photo. Account creation is available through Google, Apple, or traditional email and password registration.
User-Generated Content
Our Service allows you to create events ("outings"), invite friends and family, and share content within these outings. You may choose to upload photos, documents, tickets, planning notes, and other materials. All content you share is your own choice and is shared with the participants of your outing.
Automated Content Moderation
To maintain a safe environment, all uploaded photos are automatically scanned for inappropriate content before being shared with your group. This scanning uses Amazon Web Services (AWS) Rekognition, a machine learning-based image analysis service.
What we detect: explicit or suggestive nudity, violence and graphic content, weapons, hate symbols and extremist content, drug-related content, and offensive gestures. Photos containing such content are automatically rejected and never stored on our servers.
How it works: When you upload a photo, it is sent to AWS Rekognition for real-time analysis (typically within seconds). Approved photos are stored and shared with your group. Rejected photos are immediately deleted and you will be notified.
Data location: All image analysis is performed exclusively within the European Union, in AWS's Frankfurt (eu-central-1) data center. Your images never leave the EU during moderation.
Retention: AWS does not retain images after analysis. If content is rejected, we log the violation type, confidence score, and timestamp for safety monitoring. No image data is stored in these logs.
Location Data
With your permission, we collect location data to provide location-based features for your outings, such as meeting points and venue suggestions. You can enable or disable location services at any time through your device settings.
Payment Information
If you subscribe to our premium services, we may collect payment information including bank account details. Payment processing is handled by third-party payment providers in accordance with applicable financial regulations. weReady does not store full payment card details directly.
Social Connections
We store information about your connections within the app, including friends you have added and invitations you have sent or received.
Legal Basis for Processing (GDPR)
| Legal Basis | Data Types | Purpose |
|---|---|---|
| Contractual Necessity | Account information, user-generated content, social connections | Necessary to provide the Service |
| Legitimate Interests | Log data, analytics, diagnostic data, content moderation | Improve the Service, ensure security, prevent fraud, maintain platform safety |
| Consent | Location data, marketing communications | Based on your explicit consent |
| Explicit Consent for International Transfer | All personal data | Processing via US-based infrastructure |
Log Data and Analytics
We collect information that your device sends whenever you use our Service ("Log Data"). This may include IP address, device type, operating system version, pages visited, time and date of access, and diagnostic data.
We use third-party analytics services including Google Analytics and PostHog. These providers operate under their own privacy policies.
Service Providers and Data Processing
| Provider | Purpose | Location |
|---|---|---|
| Convex | Backend infrastructure and database hosting | United States (Florida) |
| AWS Rekognition | Automated content moderation for uploaded photos | European Union (Frankfurt) |
| Cloudflare R2 | Storage of photos and documents | Global |
| Google Analytics | Usage analytics | United States |
| PostHog | Product analytics | European Union |
International Data Transfer
Your information, including Personal Information, may be transferred to and processed on servers located outside your country of residence.
Specifically, backend services are hosted in the United States through Convex.
Legal Basis for Transfer
The transfer of data to the United States is based on:
- The EU–US Data Privacy Framework
- Your explicit consent
- Contractual necessity to provide the Service
At this time, we do not rely on Standard Contractual Clauses (SCCs) or other supplementary transfer mechanisms beyond those described above.
You acknowledge that data protection laws in the United States may differ from those in the European Union.
Your Rights Under GDPR
You have the right to access, rectify, delete, restrict, or export your personal data, to object to processing, and to withdraw consent at any time.
You may delete your account and all associated data directly within the application settings.
Content moderation rights: You may request information about any content violations associated with your account, contest a moderation decision, or request deletion of violation logs (subject to our safety obligations) by contacting us at support@weready.app.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Upon account deletion, data is deleted or anonymized within 30 days unless retention is required by law.
Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption at rest and in transit, access controls, and monitoring. However, no system is completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.
Contact Us
Email: support@weready.app