Privacy Policy
This policy explains how the Wecaytion app ("the app") collects, uses, shares and protects your personal data, in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
We don't sell your data, show ads, or use third-party tracking or analytics tools.
1. Data controller
Thanakorn Intajak (ธนกร อินทจักร์) develops the app and is the data controller.
For anything about your personal data, email privacy@pai-tiaw.com.
2. Data we collect
Data you give us:
- Account: display name, email and password (stored as a one-way hash; we never see your actual password)
- When you sign in with Apple, Google or LINE: your user ID from that provider, and the name/email the provider shares (if any)
- Payment details (if you add them): PromptPay, bank name, account name, account number, and whether you accept cash
- Group content: group names and trip dates, expenses, splits, settlements, notes, plans and to-do lists
- Settings: language and notification choices
- Your acceptance of the Terms and this policy (version and time)
Data created when you use the app:
- A token for sending notifications to your iPhone (when you allow it) and a general device name
- Sign-in data such as when you last used the app, and technical server logs (for example IP address and time) for security and troubleshooting
- Whether you have read notifications and notes
Data that stays on your phone only: game player names, your own Guess words, game play counts and the app's theme. This is never sent to our server. All games work without signing in.
3. How we use data, and the legal basis
- Create and run your account, sign you in, let you create and join groups, record and calculate expenses, share notes, and show your payment details to your group — to perform our contract with you (the Terms)
- Send in-app, iPhone and email notifications about group activity and settle-up reminders — to perform the contract, and as you choose in Settings (you can turn them off any time)
- Send email verification and password reset emails — to perform the contract and keep your account secure
- Keep the service secure, prevent abuse and fix problems — legitimate interests
- Keep a record of your acceptance of the Terms and this policy, and comply with the law — legal obligation
We don't use your data for advertising or marketing profiles, and we don't sell or rent it.
4. Who can see your data
- Members of the same group: your name, what you add to the group, balances between you, and the payment details you entered (so they can pay you). They can't see your email or password.
- Service providers who help us run the app (data processors): HostAtom (Thailand) — server, database and email sending; Apple — iPhone notifications and Sign in with Apple; Google and LINE — when you choose to sign in with them
- Authorities: only when required by law or a lawful order
5. International transfers
The app's data is stored on servers in Thailand. Some data may go to Apple, Google or LINE servers abroad, only as needed to sign in with that provider or to deliver notifications to your iPhone. These providers protect data under their own policies.
6. How long we keep data
- Account data and content: for as long as you have an account
- When you delete your account (Account › Delete account): we immediately delete your email, password, Apple/Google/LINE links, payment details, settings, notifications and devices, and revoke Sign in with Apple
- Expenses and notes you took part in stay in the group so your friends' balances remain correct, but your name shows as "Deleted user"
- When an owner deletes a group, it disappears for everyone
- Completed notification delivery records are deleted within 30 days; technical server logs are kept only as long as needed for security
7. Your rights
Under the PDPA you have the right to:
- access your data and get a copy
- receive your data in a machine-readable format
- correct your data (you can edit your name, email and payment details in the app)
- have your data deleted (you can delete your account in the app), restrict its use, or object to processing
- withdraw consent you gave (for example turn off notifications), without affecting what happened before
- complain to the Personal Data Protection Committee (PDPC) of Thailand
Send requests to privacy@pai-tiaw.com. We reply within 30 days and may ask you to confirm your identity first.
8. Security
All connections use HTTPS, passwords are stored as one-way hashes, group data is only available to the group's current members, and server access is limited to the developer. No system is 100% secure; if a breach puts you at risk, we will tell you and the authorities as the law requires.
9. Children
The app is for people aged 13 and over. Users under 20 need a parent's or guardian's permission to sign up. If we learn we hold data of a child under 13, we will delete it. Parents can contact privacy@pai-tiaw.com.
10. Changes
If we change this policy we will tell you in the app, and ask you to accept the new version before continuing when the change is significant. The latest version is always at https://wecaytion.pai-tiaw.com/privacy.