Privacy Policy

Waitlist

If you joined our earlier waitlist, we store your email address, the consent wording version and the time you agreed, so we can contact you about access. Duplicate signups do not create another record. This does not create an account or give consent for family messages. We delete your waitlist email and consent record after 90 days unless access has been offered. Our storage and hosting services process this record. Email privacy@wrynkle.app to withdraw consent or delete your waitlist record.

Who we are

Wrynkle is a family-care companion operated by Datahase Dev Private Limited, a company in India (“Datahase”, “we”, “us”). For the personal data described in this policy, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (the “DPDP Rules”).

Contact us about privacy, deletion or a grievance at privacy@wrynkle.app. For general help, write to support@wrynkle.app.

What this policy covers

This policy covers the Wrynkle family console at console.wrynkle.app, the Wrynkle mobile apps when they are released, this website at wrynkle.app, and the messages Wrynkle sends and receives on WhatsApp through the official WhatsApp Business Platform. It does not replace the privacy terms of WhatsApp, your mobile network or your phone's maker.

Two kinds of people use Wrynkle. Family members (the organizer and the relatives they invite) have accounts and use the console or app. The parent can use WhatsApp and private tracker pages without creating a family account.

The information we collect

From family members

• Account details: name, your verified WhatsApp number, and your confirmation that you are 18 or older. Email is optional; if you add email and password, we verify the email and store a securely hashed password, never the password itself.
• WhatsApp sign-in verification: WhatsApp delivers a short-lived code to verify control of your account number. We retain a protected challenge and limited attempt records, not a plaintext code. This account verification does not connect a parent or give consent for their messages.
• Sign-in and session records, such as when you signed in and from which device or browser, used to keep your account secure.
• Family circles you create or join, your role in each (organizer, or relative who can help or can view), and invitations you send or receive.
• Saved family setup: your family name and timezone, plus the parent name, WhatsApp number and preferred language you provide. These contact details are unverified until the parent joins. They do not receive a message automatically, and must separately agree before their messages are processed. Setup can resume after an interruption; authorized export and deletion include these details.
• Contacts you add for the family, such as a doctor, a neighbour or a relative. Adding a contact does not make them a Wrynkle user, and Wrynkle does not message them.
• Notification preferences, quiet hours, and the push notification token of each phone you use.
• Reminders, check-ins and messages you set up or write for your parent, and your responses to help alerts.

From the parent, on WhatsApp

• Their WhatsApp number, WhatsApp display name and preferred language.
• Their consent record: the notice shown, their answer, and the date and time.
• The voice notes, text messages and photos they send to Wrynkle after they agree, and the transcripts and short summaries made from them.
• Reminders and check-ins, and their replies to them.
• Requests for help, such as “I fell” or “call my son”.
• Private details the assistant remembers to make conversations useful, such as the name they like to be called and their daily routine. These remembered details are not shown on the family dashboard.
• Delivery records for each message, such as sent, failed or unknown.

Before the parent agrees, Wrynkle keeps only what is needed to deliver the consent message and record their answer. If they say no, nothing they send is kept.

From everyone

Limited technical information such as IP address, browser or app version, error reports and security logs. We keep private family content out of these logs as far as we can.

From visitors to this website

Only if you accept analytics: how this public website is used, through our website analytics service. See Cookies and analytics.

Why we use it, and on what basis

We process personal data on the basis of consent given under the DPDP Act, and for the legitimate uses the Act allows, such as complying with law. We use it only for these purposes:

We do not sell personal data, use it for advertising, build advertising profiles, or send marketing to the parent's WhatsApp number. We do not use your family's content to train AI models.

Cookies and analytics

The Wrynkle website at wrynkle.app can use an optional analytics service to count visits and understand which pages help families. It runs only on this public website, never in the family console, the apps or on WhatsApp, and never sees your family's messages.

• Only with your consent. The analytics service is not loaded until you choose “Accept analytics” in the cookie banner. If you choose “Reject analytics”, the service stays disabled and no analytics cookies are set. Browsing and account access do not depend on accepting analytics.
• What it measures: the pages you visit, how long you stay, how you arrived (for example from a search), your approximate city or country, and your device, browser and screen size. It uses cookies to recognise a returning browser.
• Location: analytics uses approximate location, rather than your precise location.
• No advertising. We do not use analytics for advertising or link it to your Wrynkle account.
• Cookies and preferences: we remember a dated, versioned choice in this browser for up to six months. Analytics cookies, when allowed, last up to six months. An expired choice or a changed notice requires a new decision.
• Analytics records: individual analytics records are kept for up to 14 months. Aggregated reports may remain longer. Withdrawing consent stops future collection; it does not automatically delete earlier reports. Contact our privacy email for a data request.
• Changing your mind: choose Cookie settings at the bottom of any page and pick “Reject analytics”. We disable collection, remove analytics cookies from this browser and apply the choice to other open tabs. Withdrawing is as easy as agreeing.
• Storage that needs no consent: we remember your choice in your browser's local storage, for up to six months, and we remember your light or dark theme. If browser storage is blocked, your decision applies to the current page and you may be asked again after navigation. These are strictly necessary for the site to work as you asked and are not used to track you.

Our analytics service processes this information on our behalf and may process it outside India. You can also block analytics in your browser settings.

Consent and the parent

• A parent is connected only when they message Wrynkle from their own phone, using the link the family sends, and then tap “Yes, I agree” (or reply YES) to the consent notice.
• The notice explains, in plain language, what Wrynkle keeps, who in the family can see it, which providers process it and that Wrynkle is not an emergency service.
• An organizer cannot consent on the parent's behalf. Entering the parent's name in the console is not consent.
• The parent can withdraw consent at any time by sending STOP. Wrynkle then stops processing their new messages and stops sending scheduled messages. Withdrawing consent does not by itself erase what was kept before; the parent can also send “delete my messages” (see Delete your data).
• Withdrawal does not affect processing that happened before it.

AI and how messages are understood

Wrynkle uses AI and speech services to transcribe voice notes, understand messages and photos, and prepare replies in the language being used. These services process message content to provide those features. We do not use your family's content to train AI models.

The assistant helps with everyday conversation, questions, photos, trackers, plans, reminders and check-in replies. It can look up public information when useful, share help requests with the family, and handle STOP and deletion requests. Public lookups may send relevant search terms to search services. Wrynkle does not handle payments. Live voice calls are not currently available. Consent, safety and opt-out messages use fixed wording.

AI can misunderstand speech or meaning. Family members should check important information with the parent directly. Wrynkle does not make medical decisions or decide whether a person is safe.

Who can see your family's information

• Your family circle. Members see shared plans, check-in replies and help requests according to their role. Conversations and recordings are private unless the person using Wrynkle chooses to share messages with family organizers. Medicine trackers are accessible to the primary user; other trackers require sharing. Your own private workspace is separate from the family dashboard. Organizers manage family membership, and relatives see only what their access allows.
• Our service providers, listed below, who process data on our instructions to run Wrynkle.
• Authorities, only when Indian law requires it and the request is valid.

Our staff do not browse family content. Limited access is possible only to investigate a problem you report, or for security or legal reasons.

Service providers

We use these kinds of service providers to process personal data for the purposes described:

• Hosting and storage services: Running Wrynkle and securely storing account information, messages, recordings and saved plans.
• WhatsApp messaging: Delivering verification codes, invitations, consent requests and messages.
• AI and speech services: Transcribing voice notes, understanding messages and photos, and preparing replies.
• Email and notification services: Delivering verification messages, invitations and notifications.
• Website analytics: Helping us understand use of this public website, only with your consent.

Each provider's terms limit its use of the data to providing its service to us. Their own systems may keep short-lived operational or backup copies under their deletion schedules.

Where data is processed

Some of our service providers process data outside India. Section 16 of the DPDP Act permits transfers outside India except to countries the Government of India restricts by notification. We will stop or change any transfer that becomes restricted.

How long we keep it

When a family member deletes their account but others in the family keep their records, entries that person wrote (such as a reminder they set up) remain for the family with the author's identity removed. We may keep the minimum record that a deletion or consent withdrawal happened, so that it is honoured, and records the law requires us to keep.

How we protect it

• Data is encrypted when sent between your device and Wrynkle and while stored by our hosting and storage services.
• Access is checked against your account, family role and sharing permissions.
• Checks to verify that incoming WhatsApp messages are genuine.
• Voice recordings kept in private storage and played only through short-lived private links.
• Passwords stored only as secure hashes.

Wrynkle is not end-to-end encrypted: our servers and the providers above must process content to provide the service. No system is perfectly secure. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as the DPDP Rules require.

Your rights

Under the DPDP Act you have the right to:

• Access a summary of your personal data and how it is processed. Family members can download an export from Settings.
• Correct and update inaccurate or incomplete personal data.
• Erase personal data you no longer want us to keep (see Delete your data).
• Withdraw consent at any time, as easily as you gave it. On WhatsApp, send STOP.
• Nominate another person to exercise your rights if you die or become unable to (section 14 of the DPDP Act). Email us with the nominee's name and contact details.
• Grievance redressal, described below.

To use these rights, use the controls in Settings or email privacy@wrynkle.app. We may ask you to confirm your identity, and we may need to confirm that a request about shared family records comes from someone entitled to make it. Exercising your rights is free and never depends on a paid plan.

If you are in the European Union, the EEA or the United Kingdom

If the EU or UK General Data Protection Regulation (GDPR) applies to you, we are the controller of your personal data. We rely on your consent for website analytics and for the parent's messages, on the performance of our agreement with you to provide your account and family circle, on legal obligations, and on our legitimate interest in keeping Wrynkle secure.

In addition to the rights above, you have the right to:

• Access your personal data and receive a copy.
• Rectification of inaccurate data, and erasure of data we no longer need or may not keep.
• Restrict or object to processing, including processing based on our legitimate interests.
• Data portability: receive the data you gave us in a machine-readable format. The export in Settings provides this.
• Withdraw consent at any time, without affecting processing before you withdrew it.
• Complain to the data protection supervisory authority where you live or work. We would be grateful for the chance to help first at privacy@wrynkle.app.

We do not make decisions with legal or similarly significant effects about you by automated means alone.

Grievance Officer

If you have a concern about how we handle personal data, contact our Grievance Officer at privacy@wrynkle.app with “Grievance” in the subject. We will acknowledge your message promptly, and resolve it within the period set by the DPDP Rules, and in any case within 90 days.

If you are not satisfied with our response, you may complain to the Data Protection Board of India. Under the DPDP Act, you are asked to use our grievance process first.

Children

Wrynkle is for adults. Account holders must be 18 or older and confirm this when they sign up. Wrynkle is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has an account or has sent us personal data, email privacy@wrynkle.app and we will remove it.

Not a medical or emergency service

Wrynkle is not a medical device and does not give medical advice. It is not an emergency service and does not contact emergency services. If someone may be in danger, call 112 or your local emergency number.

Changes to this policy

We will update this policy when our service, providers or the law change, and change the date at the top. If a change materially affects how we use personal data, we will tell family members in the console or by email before it takes effect, and tell the parent on WhatsApp where it affects them. Where new processing needs fresh consent, we will ask for it first.

Contact

Datahase Dev Private Limited, India
Privacy, deletion and grievances: privacy@wrynkle.app
Support: support@wrynkle.app