Privacy Policy
Last Updated: November 2026
Introduction
WiWit is a product of Chintan Technology Solutions ("Chintan Technology Solutions," "we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile apps (the WiWit app and WiWit Business) and our websites (collectively, the "Platform").
Information We Collect
Information You Provide
- Account Information: Name, email address, phone number, and the city and state you live in.
- Child Profile Information: For each child you add: name, date of birth, gender, current grade, school name, interests, aspirations, and any abilities or skills you record. Date of birth is used to compute age and academic-year progression.
- Certificates and Achievements: Documents and images you upload, along with skills automatically extracted from them. When you choose to scan a certificate, we access your device camera or photo library solely to capture that image.
- Communication Data: Messages, feedback, and support requests
Information Collected Automatically to Operate the App
These are needed for the app to function and are collected regardless of your analytics choice:
- Notification token: A Firebase Cloud Messaging token so we can deliver the notifications you have signed up for (for example, opportunity matches and deadline reminders).
- Basic device metadata: Device type, operating system version and the version of the app you last used, used for compatibility and security, and the time zone the phone is set to, so the times in a business's messages read on your own clock.
- Sign-in security: When your sign-in code is sent through Google Firebase, Google's reCAPTCHA checks the device to prevent abuse. It reads device identifiers, how the app is being used and some of the apps installed on the device.
- Crash and error reports: If the app encounters an error, we receive a report via Firebase Crashlytics so we can fix the issue.
Usage Information
To see how the app is used and improve it, we collect the following through Firebase services:
- Usage data: How you interact with the Platform (for example, which screens you visit).
- Approximate location: A coarse location derived from your IP address by our analytics provider.
- Performance data: Timings that help us identify slow parts of the app.
This is on for every account. It is not linked to your name or phone number, and it carries no child's name or date of birth. You can turn it off at any time in the app, under Settings, then Privacy, then App analytics.
How We Use Your Information
We use the information we collect to:
- Provide personalized opportunity recommendations
- Send deadline reminders and notifications
- Improve our services and user experience
- Communicate with you about updates and features
- Ensure platform security and prevent fraud
Messages on WhatsApp
WiWit sends these WhatsApp messages from its own number, to the phone number you sign in with:
- Your sign-in code.
- If your child's class runs its fees on WiWit: a reminder about a fee that is past its due date, only when your phone is not showing WiWit's notifications, and at most once a week.
- If you ask to run your business on WiWit Business: one message when your request is approved.
Reply STOP to WiWit's WhatsApp number to stop every message except sign-in codes. Reply START to receive them again.
If You Run a Business on WiWit
WiWit Business is our app and website (business.wiwitness.com) for academies, coaches, tutors and other businesses to run their batches with the people who come to them. When you use it, we collect:
- Your account: your name and the phone number you sign in with. If a business adds you to its team, it sees your name, your number and your role.
- Your business: its name, type, address and contact number, your UPI ID and the name on it, and your batches, timings, fees, holidays, events, plans and notes.
- Your request to run your business on WiWit: the email you give, how many people your business has and your note, so our team can contact you and set your business up. We write to that email, and on WhatsApp, when your request is approved.
- The people who come to you: what you and your team record about each of them: their name, a parent's name and phone number where it is a child, their batches, attendance, absences, fees and payments.
- Messages and files: the messages, photos, voice messages, videos and study material sent between your business and the people in it, and the enquiries people send you from your page. We access your camera, photo library or microphone only when you take or choose a photo or record a voice message.
- Payment receipts: the picture or PDF of a UPI receipt that you or a parent shares, to record that fee. It is read automatically by Google's Gemini AI service, through our Cloud Functions, to find who paid, the amount, the date and the payment reference. A receipt that records a payment is kept with that payment. The picture of a receipt that records no payment is deleted 90 days later, and what it showed is kept with its record.
- Notification token: so we can notify you of messages, join requests and replies, with the type of device and when WiWit Business was last opened on it.
Who sees it:
- What you put on your page is public in the WiWit app, and on the web at wiwitness.com while your web page is on.
- A parent sees what you send them and what is about their own child or themselves. Your team sees what their role allows.
- Your UPI ID is shown to the people in your business, so they can pay you directly.
- When you report a message, our team sees it and the few messages before it from the same person, to review it. The person is not told.
- We use the details of the people who come to you only to run WiWit Business for you. We do not sell them, and we never use them to target advertising.
You can delete your business account in WiWit Business under Settings, then Your account, or ask at wiwitness.com/delete-account/classes. Every business you own is deleted with everything in it. We keep a record that each business was deleted, with its name, for security.
Data Sharing
We do not sell your personal information. We may share information with:
- Service Providers: Who help us operate the Platform, listed below under "Service Providers We Use"
- A business you join: when you join a business on WiWit or send it an enquiry, that business sees your name, your phone number, your child's name where you join for a child, and what you send it
- Legal Requirements: When required to do so by applicable law or a valid order from a court or government authority
WiWit does not submit applications on your behalf. When you choose to pursue an opportunity, you visit the provider's own website or platform directly; WiWit does not share your personal data with opportunity providers.
Service Providers We Use
We rely on the following processors to deliver specific parts of the Platform. Each receives only the data needed for its function and is bound by its own privacy commitments:
- Google Firebase (Firestore, Cloud Functions, Authentication, Cloud Messaging, Storage, Crashlytics, Performance Monitoring, In-App Messaging, Remote Config, Analytics, App Check): account data, child profile data, certificates, social posts, comments, reactions and connections, business and attendance records, messages, payment receipts, notification tokens, crash and performance diagnostics. Hosted primarily in
asia-south1(India). - Qdrant Cloud (vector search service): anonymised child-profile and opportunity embeddings used to compute opportunity matches. No name, phone, or email is sent to Qdrant.
- Google AI (Gemini API, accessed via our Cloud Functions proxy): certificate images you upload are sent for skill extraction and content generation, and payment receipts shared in WiWit Business are sent to read who paid, the amount, the date and the reference. Images and extracted text are not stored by Google for model training.
- Meta (WhatsApp Business Platform): your phone number and the words of each message, to deliver the messages described under "Messages on WhatsApp", and any message you send to WiWit's WhatsApp number.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate data
- Delete your account and data
- Withdraw your consent for your child's data
- Opt-out of marketing communications
Children's Data & Parental Consent
WiWit is designed for parents to use on behalf of their children. The account holder must be an adult (18+), and all child profile information is added and managed by the parent.
In line with the Digital Personal Data Protection Act, 2023:
- We process a child's personal data only on the basis of the parent's consent, for the purpose of discovering and tracking opportunities for that child.
- We do not track or monitor a child's behaviour. The usage measurements described above are about how you use the app, and they carry no child's name or date of birth.
- We do not use a child's personal data to serve targeted advertising, and we do not sell it.
- Parents can review, correct, or delete their child's data at any time from the app.
- A parent can withdraw this consent at any time in the app, under Settings, then Privacy, then Withdraw consent. WiWit then deletes the data of every child on the account, and the account stays. A child's profile that both parents share is not deleted: it stays on the other parent's account. Before a child is added again, WiWit asks for consent again.
Where Your Data Is Processed
We use Google Firebase (including Firestore, Cloud Functions, Cloud Messaging, and Crashlytics) to operate WiWit. Your personal data is stored primarily on servers in India (Google Cloud region asia-south1).
Some third-party services we rely on to provide specific features (for example, Google's AI services that power content generation and extraction) may process requests on servers located outside India. In such cases, we use reputable providers and share only the data needed to deliver that feature.
Data Retention
We retain personal data only for as long as it is needed to provide the Platform to you and to meet our legal obligations. When you delete your account, we delete or anonymise the associated personal data, except where we are required to retain it under applicable law.
Data Breach Notification
If we become aware of a personal data breach that is likely to result in harm to you, we will notify you and the Data Protection Board of India in the manner and within the timelines required under the Digital Personal Data Protection Act, 2023.
Grievance Redressal
You can contact our Grievance Officer to raise any concern about how your personal data is handled:
- Company: Chintan Technology Solutions
- Email: privacy@wiwitness.com
- Address: Bangalore, Karnataka, India
We will acknowledge your complaint within 24 hours of receipt and endeavour to resolve it within 15 days, or within the timelines required by applicable law.
If you are not satisfied with the resolution, you may approach the Data Protection Board of India as provided under the Digital Personal Data Protection Act, 2023.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
- Company: Chintan Technology Solutions
- Email: privacy@wiwitness.com
- Address: Bangalore, Karnataka, India