Legal

Privacy Policy

Last updated: May 19, 2026

This page describes what Wamid collects, why, and what you can do about it. Short, because collection is too.

What we collect on this site

If you join the waitlist, we store:

  • Your email address.
  • The date of registration.
  • Your approximate country (inferred from your IP by Cloudflare).
  • The user agent (browser).

No tracking cookies. No third-party analytics. No advertising pixels. The site is served statically via Cloudflare Pages, with privacy-first Cloudflare Web Analytics (cookieless, GDPR-friendly).

Why

To send you a single email: the opening of the beta. Then, we will keep your email as long as you use the service or until you unsubscribe.

What we don't do

  • No reselling.
  • No sharing with third parties for marketing purposes.
  • No advertising profiling.

The Android app

The Wamid Android application is local-first. Your notes and reminders stay on your device in currently shipped versions (V0.x series). When the optional cloud Recall layer ships (V0.41+), it will be clearly announced, opt-in, with end-to-end encrypted backups and minimal telemetry. Free tier remains fully local.

Your rights

You can request at any time access, rectification or deletion of your data. For account deletion specifically (with timing, scope and identity check), see the dedicated page Delete your account.

For any other right (access, rectification, portability, objection) write to privacy@wamid.app.

Recourse

You have the right to lodge a complaint with a supervisory authority:

AI Transparency (EU AI Act)

  • Recall is an AI system within the meaning of Article 3(1) of Regulation (EU) 2024/1689 (AI Act).
  • Provider of underlying model: Google LLC (Vertex AI Gemini Flash 2.5).
  • Deployer: Yassine El Idrissi (Wamid).
  • Article 50(2): you are informed that the Morning Letter is generated by an AI system.
  • Article 50(4): each Morning Letter is flagged in-app with an "AI-generated" label.
  • Recall tone is governed by our tone charter.

Subprocessors

  • Cloudflare, Inc. — hosting (Pages + KV) and cookieless Web Analytics — US, EU-US Data Privacy Framework (DPF) certified.
  • Resend — transactional email delivery — US, DPA signed.
  • Google Cloud (Vertex AI Gemini Flash 2.5) — Recall Morning Letter — us-central1, EU SCC + DPF.
  • Supabase Inc. — authentication + encrypted cloud storage — EU region, DPA signed.

Cookies

The site uses only strictly necessary cookies (Cloudflare bot management) and a cookieless audience tool (Cloudflare Web Analytics). Full details on the dedicated Cookie policy page.

Hosting

Site hosted by Cloudflare (Pages + KV). Data stored in Cloudflare's infrastructure (global network with regional replication). Email delivery handled by Resend. Full publisher and hosting information on the Legal notice page.

Security disclosure

To report a security vulnerability, see /.well-known/security.txt or write to security@wamid.app.

Contact

For any privacy question: contact@wamid.app.

Save my spot