This Privacy Policy explains how WDD (وِدّ), operated by AppexAI ("we", "us"), collects, uses, and protects your information when you use the WDD mobile app and website to order flowers, cakes, and gifts in Palestine.

1. Information we collect

• Account information — your name, phone number, email, and (optionally) your birthday and gender.
• Sign in with Apple or Google — if you choose to sign in with Apple or Google, we receive from that service an identifier for your account there, your name and the email address of that account (Apple may give us a private relay address instead, which forwards messages to your email); we never receive your Apple or Google password. We keep them with your WDD account, linked to that sign-in, and use them to sign you in and to set up your account; the email address becomes your account's email only if no other WDD account uses it and, for Google, only if Google has verified it. Where Apple issues a token for that sign-in, we keep it encrypted and use it only to revoke it with Apple, such as when you delete your account. To place an order, your account still needs a phone number, which is added only with a code we send to that number on WhatsApp. We never join accounts by email: if the number you add already belongs to another WDD account, the two become one account only after you enter that code and confirm it. When you delete your account, we delete its link to Apple or Google and ask Apple to revoke the token we kept.
• Order & recipient details — recipient name, delivery address, recipient phone, gift message, any link you choose to attach to a gift, the text you ask us to write on a cake you personalize and the photo you add to it, and add-ons you choose.
• Your occasions — the occasions you save: the title you give each one (often the name of the person it is for), its date and type and, if you add it, that person's phone number, typed or picked from your contacts; for an occasion you save from a gift order, the recipient's number on that order and which order it was saved from. We use them to remind you of each occasion, to fill in the recipient's name and number at checkout when you choose the occasion, and in gift groups as section 5 describes.
• Payment information — handled by our payment provider. We do not store full card numbers; for cash on delivery we record only that the method was selected.
• Device & usage data — app version, device type, and how you use the app, to keep it reliable.
• Communications — messages you send us on WhatsApp, and calls you make to our support line.
• Location — when you set a delivery point on the map, we use your device's location, only while you are using the app and only if you allow it. When you open the map for a new address, the app uses your location straight away to center the map on where you are, asking for this permission first if you have not given it; you can refuse and place the pin by hand. The point under the pin is sent to our servers to show the street name and nearby places, and the point you choose is saved with your order, and with the address if you save it, so the courier can find the address.
• Camera, microphone and photos — only if you choose to add a greeting video to a gift, or a photo to a cake you personalize. We use the camera and microphone to record the video, or your photo library to pick one; for a cake, you pick one photo from your photo library, only that photo is uploaded, and we store it privately. We never access these at any other time or for any other purpose.
• Notification token — if you allow notifications, a token for your device so we can send order updates and occasion reminders.
• The contact you pick — when you use "From contacts" or "Pick from contacts", your phone's own contact picker opens and the app receives only the one contact you tap. At checkout, its number fills in your gift recipient's number, and its name the recipient's name if you have not typed one, and what it filled in is sent with your order; on an occasion, we save its number, and its name as the occasion's title if you have not written one; for a friend request, we use only its number. We never ask for access to your contacts, and we never read or upload your address book.
• Friends — if you use Friends: your friends on WDD, the friend requests you send or receive (and the phone number you sent a request to), the dates about you that you add (such as your wedding anniversary) and, for each date about you, your birthday included, the friends you choose to share it with, and any block or report you make. See section 4.
• Gift groups and chat — if you use Invites: the groups you create or join and their names, the messages you write in them, your replies and reactions, the gifts you suggest, your vote, the budget and voting deadline of a group you start and any occasion title and date you type for it, any report you make about a message, a member or a group, and when you accepted the chat rules. See section 5.

2. How we use your information

• To process, prepare, and deliver your orders.
• To verify your phone and sign you in using a one-time code sent over WhatsApp.
• To send order updates and, with your consent, occasion and promotional messages.
• To provide customer support and improve our service.
• To run Friends: deliver friend requests, show you the dates your friends choose to share and remind you of them, and review reports.
• To run Invites: deliver invitations, messages, suggestions and votes between a group's members and send its notifications, suggest gifts that fit the occasion and the budget, check messages before they are sent to keep out abusive words, and review reports.
• To meet legal, tax, and accounting obligations.

3. How we share information

We share only what is needed, and we never sell your personal data. We share with:

• Delivery companies — the recipient's name, address, and phone, so your gift can be delivered.
• Payment processors — to take payment securely.
• The person receiving your gift — your gift message, and any greeting video or link you attach, which they open through a private link printed as a QR code on the gift card. A greeting video stays available until it is deleted, 30 days after delivery.
• Your friends on WDD — only what section 4 describes: your first name, your avatar, your gender if you set it (only for the wording), and the dates you choose to share with each of them.
• Members of a gift group — your first name and avatar, and what you write, suggest or vote for in a group, are seen only by its members and the people invited to it, as section 5 describes.
• The bakery that makes your cake — the text you ask us to write on a cake you personalize and the photo you add to it, only to make that cake.
• WhatsApp / Meta — to send verification codes and order messages.
• Service providers who host and run the app for us, such as cloud hosting, databases and notification delivery. They may use your data only to provide that service to us, and must protect it to the same standard as this policy.
• Authorities when required by law.

A thank-you after a gift — The thank-you request and its page show only the gift sender's first name, not their surname or the price. If that name cannot be shown, we use a generic phrase.

If someone sends you a gift through WDD, we use your number only to deliver it and tell you about it, and once it has arrived we ask you one time whether you'd like to send a thank-you. What you write goes only to the person who sent the gift. Our team sees it only if it is reported, or if you or the sender ask us for help with it. We keep it for a year and then delete it. We never add you to any marketing list, and you can stop thank-you requests from the same link; if you do, we keep your number only so we don't ask again.

4. Friends

Friends is an optional feature that lets you add people you know on WDD, so you can remember each other's occasions and choose gifts for them.

• What a friend sees — your first name, the avatar you chose for your account, your gender if you set it (used only to word things correctly in Arabic), the date you became friends, and only the dates you choose to share with them: your birthday, or an occasion about you such as your wedding anniversary, shown as day and month, never the year. You choose what to share with each friend separately; nothing is shared unless you choose it, and you can change or stop it at any time.
• What a friend never sees — your phone number, last name, email, addresses, orders, the occasions you save for other people or their numbers, or your list of friends. We never tell anyone that you removed or blocked them.
• Invite link — you can create a personal link (wdd.ps/f/…) and send it yourself on WhatsApp or any other app; WDD never messages your contacts. Anyone who opens it sees only your first name and avatar, worded for your gender if you set it. A link works for 30 days, and you can turn it off at any time.
• Adding from your contacts or by number — you pick one contact in your phone's own contact picker, or type a number yourself. We use the number only to deliver that friend request, and the contact's name is not sent. When you send a friend request to a number, the result may tell you whether it currently has a WDD account and what happened to your own request, within limits that prevent abuse. The result itself does not reveal the account holder's name or account identifier, or whether they declined your request or blocked you. We never use these numbers for marketing or to suggest people. If the number has no account, the request is shown to its owner if they sign up within 60 days, and then it expires.
• Friend requests — the person you ask sees your first name and avatar (worded for your gender if you set it) and can accept or ignore it; we never tell you that a request was declined. A friendship starts only when a request or an invite link is accepted, or when you both send each other a request.
• Reminders — when a friend shares a date with you, we remind you by notification a week and three days before it; you can turn this off for each date. We never send WhatsApp messages about your friends' dates.
• Blocking and reporting — you can block or report anyone from their page or their request. Blocking ends the friendship and stops any sharing or requests between you, including from their phone number, and they are not told. The WDD team reviews every report within 24 hours; for this we keep the reason, your note if you wrote one, and the name you saw, and we may suspend Friends, temporarily or permanently, for anyone who breaks our Terms. We never tell the person reported who reported them.
• When you delete your account — we delete your friends, the dates you shared and those shared with you, the friend requests you sent or received (including requests sent to your number before you signed up), your invite link, and the blocks you made. A block another user placed on your number stays, so it cannot be avoided by signing up again with the same number, and reports stay in our review records without your name or account.

5. Gift groups and chat (Invites)

Invites is an optional feature that lets you start a group for an occasion's gift and invite your friends on WDD to it, so you can chat, suggest gifts and vote on them; the person who started the group then orders the gift the members chose.

• Who sees what — the members who joined a group, including the person who started it, see the group's name, the occasion with its day and month, the budget and the voting deadline, each member's first name and avatar and, if they set it, their gender (only to word things correctly), every message and suggestion in it (including those written before they joined), and how many votes each suggestion has, with the first names of those who voted for it. The person who started the group may invite friends of theirs who are not your friends; they too see your first name, your avatar and what you write in the group. If you are invited to a group, its members see your first name in the line that says who was added (such as "Ahmad added Sara") even if you never join, and the person who started it sees your first name and avatar marked "waiting for a reply". Someone who has been invited but has not joined sees only the first name and avatar of who invited them, the group's name and the occasion.
• Replies and reactions — members see replies and the reaction counts on messages. A reply may show one quoted line from the original only when that viewer is allowed to read it; replying does not reveal a hidden, deleted or otherwise unavailable message.
• What members never see — your phone number, last name, email, addresses or orders; nor the price, delivery address or payment method of the gift that was ordered: we tell them only that it was ordered and the day it will be delivered. We never tell the person who started a group that someone declined their invitation.
• The person the gift is for never sees the group — they are never invited, never see it, never get a notification about it and are never told it exists, even from another account on the same phone number. To keep them out, we store their account and phone number with the group, only for that purpose, until the group is deleted.
• A date shared between friends — if you share a date such as your birthday with a friend, that friend may start a gift group for it: the members they invite — who may not be your friends — see the occasion's title with your first name (usually in the group's name too) and its day and month, never the year, your avatar or anything else about you, and you never see the group, as above. To suggest gifts that suit you (WDD picks), we may use your gender if you set it; it is never shown to anyone. The same applies when you start a group for a date a friend shared with you. If you start a group for an occasion you saved yourself, members see its title, day and month, never the recipient's number you saved with it.
• Checking messages — we check the messages, group names and occasion titles you type before they are saved; anything with words that are not allowed is neither sent nor stored, and members see "WDD user" in place of a first name this check does not allow. Links in messages are never made tappable; a link to a WDD product shows as that product's card. You can delete your own message until the group ends; everyone then sees "This message was deleted". Its text stays stored, out of the members' sight, until it is deleted with the group's messages as section 6 describes, and it appears in our staff tools only through a report, as described below.
• Notifications — we notify members of an invitation, a new suggestion, the voting deadline coming up, the result and the order. We prepare a notification for each new message and may combine messages sent close together into one notification. It may show the sender's first name and the start of their message, and is not sent to someone who has that group open at the time — for this we record when you last opened it and the last message you read. You can mute the message notifications of any group; notifications about suggestions, the vote and the order still come. We never send WhatsApp messages about groups.
• Blocking, reporting and review — from inside a group you can report any message, member or the group itself, and block any member; the messages of someone you blocked then show to you collapsed, without their text, and they are not told. The WDD team reviews every report within 24 hours, and a message reported by two members is hidden from everyone until the team has reviewed it. With a report we keep its reason, your note if you wrote one, and the message, the member's first name or the group name as you saw it. In our staff tools, a group's chat can be opened only through a report — the reported message with five messages before and five after it, or the last twenty lines of a reported group. If the reported message is a reply, this may also include one quoted line from the original under the same access rules. Every such look is logged. We may hide messages, close groups, or suspend the feature temporarily or permanently for anyone who breaks our Terms. We never tell the person reported who reported them.
• Ordering the gift — only the person who started the group orders the winning gift and pays for it, through the app's usual checkout; the gift card is pre-filled with the members' first names, which they can change before ordering. We link the order to the group to tell members that it was ordered and the day it will be delivered; our team also sees on the order that it came from a gift group.
• When you delete your account — your messages in groups stay visible to their members as "Deleted user", without your name or avatar, until they are deleted with the group's messages as section 6 describes; we delete your memberships, suggestions and votes, your acceptance of the chat rules and what was kept of your first name and words in reports about you; the groups you started are cancelled, except one whose gift was already ordered, which stays for its members, without your name, until it ends; and the reports you made stay in our review records without your name or account.

6. Data retention

We keep your account information while your account is active. Order and transaction records are kept for as long as needed to meet legal and accounting requirements, then deleted or anonymized. Greeting videos are stored privately and deleted 30 days after the gift is delivered. Photos you add to a cake are stored privately and deleted 30 days after the order is delivered or cancelled; a photo that is not part of an order is deleted once it is about 7 days old and no longer in your cart in the app (about 30 days old if it was added on our website). A friend request that is not accepted within 60 days of being sent expires. Records of ended friend requests (accepted, declined, cancelled or expired) are deleted automatically about 90 days after they were sent, and stopped or expired invite links about 90 days after they stopped working. A gift group ends when it is cancelled, two days after the occasion if the gift was not ordered, or a week after the occasion if it was. Its messages are deleted automatically 90 days after it ends, and the group itself, with its members, suggestions and votes, a year after it ends; the message or group name kept with a report is deleted 180 days after the report was reviewed. We keep reports and the decisions on them for as long as needed to protect users and prevent abuse.

When you delete your account, we erase the text of thank-you messages linked to your orders from the thank-you record, thank-you notifications and any report copies, and disable their links.

Invoices issued for your orders are kept on our side as accounting records. You won't be able to open them after deleting your account.

7. Security

We protect your data with encryption in transit, access controls, and least-privilege access for our team. No system is perfectly secure, but we work to keep your information safe. Only the staff who prepare orders can see your order details, gift message, any greeting video or link you attach and any photo you add to a cake, and only to prepare your gift; a cake's text and photo also go to the bakery that makes it, as section 3 describes. In our staff tools, your list of friends can be opened only by the people who review reports, and every opening is logged. In our staff tools, gift-group chats can be opened only through a report, as section 5 describes, and every opening is logged.

8. Your rights

You may access, correct, or delete your information, object to certain uses, or withdraw consent at any time. You can delete your account directly from the app — see our Account Deletion page.

9. Children

WDD is not intended for children under 16. We do not knowingly collect their data.

10. International transfers

Your data may be processed on servers located outside your country. We apply appropriate safeguards when this happens.

11. Changes to this policy

We may update this policy. We will post the new version here and update the "Last updated" date.

12. Contact us

Questions about your privacy? Email support@wdd.ps or message us on WhatsApp at +970 594 119 660.