1. Introduction and Scope
This Privacy Policy describes how WMTAN (including its affiliates, subsidiaries, and operating entities) collects, uses, stores, processes, and protects your personal data.
This policy applies to all users who access, register for an account, or use the services, applications, and websites (collectively, the 'Services') within the WMTAN Ecosystem, including but not limited to WMTAN ID, Vowlet, WCare Health, Morph, Wiki Map, and other shared platforms.
By continuing to access and use the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If a specific product or service has its own separate Privacy Policy, that specific policy will apply in conjunction with this one and shall take precedence in the event of any conflicting provisions.
2. Data We Collect
We collect personal data through three main methods: data you actively provide, data collected automatically, and data from third parties.
Data you actively provide includes: Personal identification information (Name, email address, phone number, date of birth); Authentication information (Passwords, security codes, WMTAN ID credentials); User content (messages, images, files, support feedback you submit to the platform).
Data collected automatically includes: Device information (IP address, browser type, operating system, unique device identifiers); Usage data (access times, pages viewed, features interacted with, system error logs); Location data (approximate location from IP address or precise location if you grant the app permission).
Data from third parties: If you link your WMTAN account with third-party services (e.g., Google, Apple, Facebook), we may receive basic profile information from them subject to your authorization.
3. Purposes of Processing
Your personal data is utilized by WMTAN to ensure the continuity, security, and personalization of the Services.
Specifically, we process data to: Provide, maintain, and personalize features of the Services; Manage accounts and the Single Sign-On (SSO) process across the ecosystem; Prevent fraudulent activities, unauthorized access, system abuse, and cybersecurity risks.
Additionally, data is used to: Improve system performance through telemetry and statistical measurement; Contact you to provide technical support, security alerts, or policy updates; and Comply with legal obligations and requests from competent authorities.
4. Data Sharing and Disclosure
WMTAN is committed to not selling your personal data to third parties for marketing or advertising purposes under any circumstances. Your data is only shared when absolutely necessary to operate the Services.
We may share data with: Affiliates and subsidiaries within the WMTAN Ecosystem to provide a seamless experience; Third-party service providers (such as AWS/Supabase cloud hosting, email services, analytics systems) under strict confidentiality obligations and Data Processing Agreements (DPA).
In exceptional cases, we may be compelled to disclose information in response to lawful requests by public authorities, courts, or to protect the legitimate rights, property, and safety of WMTAN, its users, or the public. If WMTAN is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
5. Data Retention
WMTAN retains your personal data for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.
When you request account deletion, we will permanently delete or anonymize your data within 30 to 90 days. However, certain data may be retained for the period required by law for accounting, tax, legal dispute resolution, or preventing recurring fraud.
System logs and security telemetry will be deleted or anonymized (making it impossible to trace back to an individual) after a fixed cycle.
6. User Privacy Rights
In alignment with international data protection standards such as GDPR or CCPA, you have full control over your personal data on the WMTAN platform.
You have the right to: Access (request a copy of your personal data); Rectify (update inaccurate or incomplete information); Delete (Right to be Forgotten - request the deletion of your account and associated information); Restrict processing; and Object to unnecessary data analytics activities.
To exercise these rights, you can use the self-service Account Settings on the WMTAN ID Portal or submit a formal request to our Data Protection team via support@wmtan.com.
7. Children's Privacy
WMTAN Services are not designed for and are not intentionally directed at users under the age of 13 (or the minimum age of digital consent in your jurisdiction).
We do not knowingly collect personal information from children. If you are a parent or legal guardian and discover that your child has provided data to WMTAN without your consent, please contact us immediately. Upon discovering any account belonging to an underage user, we will take immediate steps to disable the account and delete the associated data.
8. Cookies and Tracking Technologies
We use Cookies, Local Storage, and similar technologies to maintain user sessions, protect the system against CSRF attacks, and store user language and UI preferences.
Unlike many other platforms, WMTAN strictly prohibits the use of third-party cookies for cross-site tracking or retargeting advertisements. Any analytics tools (if present) are configured to maximize privacy respect and are not tied to your personal identity.
You can configure your browser to refuse all or some cookies. However, disabling authentication cookies may prevent you from logging in or using the core functions of the Services.
9. Health and Sensitive Data
For specialized products like WCare Health or systems storing medical records, biometric information, and personal health status, such data is classified as Sensitive Data.
This category of data is protected using advanced encryption (encryption at rest & in transit). WMTAN commits to the strictest security principles. Absolutely no health data is sold, shared with third parties, insurance providers, or used for targeted advertising campaigns under any circumstances.
10. International Data Transfers
WMTAN's server infrastructure may be located in various geographic regions globally (primarily utilizing AWS/GCP infrastructure). Consequently, your data may be transferred to, stored, or processed in a country other than your country of residence.
When conducting cross-border data transfers, we apply international legal safeguards (such as Standard Contractual Clauses - SCCs) to ensure your personal data is always protected at a level equivalent to the most stringent regulations.
11. Changes to this Privacy Policy
WMTAN reserves the right to update or modify this Privacy Policy at any time to reflect changes in technology, operational processes, or legal requirements.
For material changes that directly affect your rights, we will provide clear notice on our website, applications, or via direct email notification before the changes take effect. The 'Last Updated' date at the top of the policy will always display the most recent revision time.
