1. Beta scope, maintainer, and contact
This notice applies to the small-scale WayThread beta website and signed-in Mobile Web/PWA. The public website and signed-in app are separate applications: the website does not read private goals, tasks, trails, attachments, or AI request text from the app. Third-party pages you choose to open use their own rules.
WayThread is currently maintained by an individual developer, but this notice does not invent WayThread as a separate legal entity. The developer's private identity and contact details are not published here. Beta feedback and privacy, account, or deletion requests are temporarily handled through the original beta-distribution or communication channel. That channel must be real and able to receive a reply, or you should not participate in this beta.
2. Account data, access data, and purposes
When you create an email/password account, complete one-time email verification, sign in, recover a password, or use Google sign-in, the system processes your email address, authentication user ID, sign-in method, session tokens, authentication time, and technical metadata needed for sign-in and account security. A phone number is not required for basic sign-in. Passwords are submitted directly to Supabase Auth and are not stored in WayThread's business database. This information is used to establish and protect the account, select the correct local data space, provide membership or Star Coin entitlements, perform requested features, and prevent abuse.
The website, app, API, Supabase, and Cloudflare may process request time, page or endpoint, IP and coarse network information, device and browser type, language, error code, request ID, and necessary technical logs for connectivity, security, and troubleshooting. The current production deployment disables application-level full model-request and output-content logging, but the specific Cloudflare platform-log retention period still requires verification before public operation.
The public website loads Google Analytics 4 only after you choose Accept analytics. The configuration disables Google Signals and advertising personalization, does not send goals, tasks, email addresses, or text you enter, and is not used for remarketing. Choosing Decline leaves Analytics unloaded; clearing this site's browser storage resets your choice.
3. Local-first content and current deletion boundary
Goals, tasks, stages, completion records, trails, notes, preferences, profile images, backgrounds, attachments, audio, photos, growth cards, and reward state are primarily stored in an account-scoped space on the current device. Signing out does not delete them, and the server cannot immediately erase purely local copies on another device.
Clear all local data resets the principal application state but does not delete the account. Delete account first shows server-verified PRO and Star Coin losses and requires the applicable confirmations. On success, it hard-deletes the authentication account and direct membership, Star Coin, AI job, allowance, and calendar data, then clears the current account space, membership cache, and session on the initiating device. Consumed official-invitation ordinals and referral reward facts involving another account are de-identified rather than reopened or rolled back.
Account deletion cannot remotely erase purely local copies on other offline devices or withdraw requests already sent to DeepSeek. Those devices still require local website or app-data cleanup, and provider caches and retention follow the provider's actual rules. Beta features, data structures, and migration behavior may change, so do not use WayThread as the only copy of important information.
4. Device permissions and optional information
Location is requested only when you enable local sky, weather, or a location feature for a task. Sun and moon calculations remain on-device. Weather uses temporary coordinates rounded to about one kilometre; the product is designed not to persist them, and AI receives a necessary weather condition rather than coordinates or a place name.
Camera, photos, files, and microphone permissions are requested only when you choose to capture, select, or record an attachment. The current DeepSeek text integration does not intentionally send image, audio, or file binaries; those materials are primarily stored as local content. You can withdraw permissions in system settings, although the optional feature may then be unavailable.
5. DeepSeek AI and automated processing
The model provider configured for the current small-scale beta is the DeepSeek Open Platform, operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. No other model provider is listed as a current recipient of user requests. This notice should be updated before the actual model provider changes.
To generate goal questions and diagnosis, plans, task details, coaching suggestions, reviews, story content, growth-card text, or other AI content, the WayThread server may send DeepSeek the goal and task text needed for the feature, your answers, planning preferences, schedule, completion and progress information, reviews, task notes when the relevant feature is enabled, necessary ambient context, and internal task-related identifiers. The current integration does not intentionally send your sign-in email, Supabase authentication user ID, session token, images, audio, or files. Personal, health, or third-party information that you type into the submitted text may still be included.
Not every AI request is triggered by a separate Generate button. The beta may automatically request AI output when displaying or updating home-screen ambient copy, growth-card text, some task details or suggestions, coaching queues, and summaries, based on page or task state. A home ambient request uses a minimal context such as completion count, local hour, language, sky phase, and weather condition. The beta has no single global control that disables every AI request. If you do not want the necessary text described above processed by DeepSeek, do not continue using the signed-in beta. Sensitive task-record analysis should still provide a separate explanation and confirmation at the point of use.
AI output may be incorrect, incomplete, outdated, or biased and is not medical, psychological, legal, financial, employment, or other professional advice. It is not used by itself to make a decision with legal or similarly significant effects about you. WayThread does not use private input or output to train a WayThread-owned model. DeepSeek's public downstream API materials do not currently provide a sufficiently complete commitment regarding every improvement use, retention scenario, or deletion mechanism, so this notice does not promise provider-side zero training, zero retention, or immediate deletion of a request already sent.
6. Current principal service providers
The current beta principally uses Supabase for email/password or Google sign-in, password-security processing, authentication identifiers, sessions, and necessary server data; Resend for signup-confirmation and password-recovery codes through Supabase SMTP; Cloudflare for website and app hosting, APIs, containers, queues, security, and necessary runtime logs; Google for identity authentication when you choose Google sign-in and for Google Analytics 4 only after you accept website analytics; and the DeepSeek Open Platform for processing the AI input described above and returning output.
Weather features may use Open-Meteo and, when the relevant key and feature are enabled, Amap for weather or route evidence. A read-only external capability should receive only the query, coarse location, or route fields needed for that request. DeepSeek is a technology provider only; there is no official partnership, agency, joint operation, or endorsement relationship between DeepSeek and WayThread.
7. Data regions and international transfers
The DeepSeek Open Platform operator is located in mainland China, and API input, disk context cache, and output may be processed there. Supabase, Cloudflare, Google, Open-Meteo, or another enabled service may also process necessary data outside a tester's country or region. The beta has not verified every production region, platform-log location, or complete transfer mechanism.
This notice does not mean WayThread is ready for formal public operation in every overseas jurisdiction. Before promotion in mainland China, the EEA, the UK, or another jurisdiction requiring transfer safeguards, the actual path still requires confirmation of the legal basis, assessment, contract, representative, or separate consent, followed by an updated recipient, field, region, safeguard, and rights notice.
8. Retention
On-device content remains until you delete specific content, clear the relevant website or app data, or the device removes the storage. The result of uninstalling or using the current Clear all local data control varies by platform and by the existing cleanup gaps. An AI plan, task, review, or story result you adopt may continue as local product content.
Server-side request snapshots, progress events, and structured results for asynchronous goal-outline and detailed-plan jobs are currently set to expire after about 24 hours and are then removed by a later successful cleanup sweep. This does not guarantee physical deletion at exactly the twenty-fourth hour; an active request or in-process temporary data may remain until the request ends or the runtime instance is recycled.
DeepSeek documentation states that disk context caching is enabled by default, each request constructs cache entries, and unused cache is usually cleared within hours to days. This is a cache rule, not a common period for all API data and not a zero-training promise. WayThread has no direct interface for deleting a request or cache already received by DeepSeek. Authentication, Star Coin, membership, security, or dispute records are retained as needed to provide beta entitlements, prevent abuse, handle requests, and comply with applicable law; more specific periods or criteria remain required before public operation.
9. Your rights, leaving the beta, and deletion
Where applicable, you may request access, a copy, correction, completion, deletion, restriction, objection, portability, withdrawal of consent, account deletion, or an explanation of processing rules. During the small-scale beta, submit the request through the original beta-distribution or communication channel. Do not post verification codes, session tokens, identity documents, or health information in public comments or group chats.
The signed-in app now provides in-product account deletion in Settings. Before deletion it rechecks active PRO and available Star Coins, requires confirmation that all account data is unrecoverable, and separately requires giving up PRO or Star Coins when present. On success, the authentication account and direct server-side account data are deleted, and the initiating device clears only the current account space without affecting other accounts on that device. This does not provide data export or remote cross-device erasure; shared invitation and referral reward facts may remain after de-identification, and WayThread cannot withdraw a request already sent to DeepSeek. Other rights requests or deletion problems can still use the original beta channel.
10. Users in mainland China
Where China's personal-information rules apply, processing should follow lawfulness, necessity, good faith, data minimization, and shortest-retention principles. Before processing, users should be told the operator, purposes, methods, categories, retention, recipients, and rights path. Sensitive information, disclosure to another processor, cross-border transfer, or another activity requiring separate consent must not rely only on the general sign-in checkbox.
Medical or health data, financial accounts, precise location, and information about children under 14 may be sensitive. Do not put unnecessary sensitive information in goals, tasks, notes, or AI inputs unless a feature genuinely requires it and provides a separate explanation and confirmation.
11. International users
If EU, UK, or similar data-protection law applies, testers retain their mandatory local rights. This beta notice has not completed public controller identification, an EU or UK representative, every processing basis, transfer safeguard, or supervisory complaint route and should not be read as ready for formal public promotion in those regions.
If an applicable US state privacy law requires it, users may have rights to know, access, delete, correct, limit sensitive-data use, opt out of sale or sharing, and avoid discrimination for exercising rights. WayThread currently does not sell personal information or share it for cross-context behavioural advertising. A business-model change would require an updated notice and legally required choices before it occurs.
12. Children and sensitive information
WayThread is not designed specifically for children and does not currently provide a guardian-consent flow or child-specific rules. A user under 14 in mainland China should not create an account or submit personal information independently. Elsewhere, a user below the local digital-consent age should participate only under a guardian's decision and supervision as required by local law.
Do not put unnecessary identity documents, financial-account data, precise location, medical or health information, children's data, or another person's private information into goals, tasks, notes, or AI inputs. If a beta feature genuinely requires sensitive information, it should still provide a separate explanation and confirmation at the point of use; the general sign-in checkbox does not replace legally required separate consent.
13. Security and incidents
We use HTTPS, access controls, account scoping, least privilege, secret separation, schema validation, request limits, application-log content restrictions, and provider governance to reduce risk. Only applicable server-side data may have platform backup or recovery capabilities; local-first content is not promised a cloud backup. No system can promise absolute security. If an incident may affect individual rights, we will take remedial steps and notify testers or authorities where required.
14. Changes and conditions before public operation
Beta features, data structures, providers, and rules may change. If the operator, data categories, purposes, DeepSeek or another recipient, regions, retention, automated AI, or rights path changes materially, we will update the date and provide prominent notice through the original beta channel or request renewed confirmation where required.
Before public registration, commercialization, or broader operation, WayThread must still add a verifiable operator identity and public email, verify the real production inventory and regions, maintain a stable version record, and obtain legal review. A language version cannot reduce mandatory rights provided by applicable law.
15. Beta contact channel
During the small-scale beta, submit privacy, account, deletion, or product questions through the original channel that provided your test access. This is a temporary beta contact path, not a public support service. Do not send verification codes, session tokens, identity documents, health information, or other sensitive material in public comments or group chats.