Privacy

This is a first version. The final privacy statement will follow before the official launch.

Who is responsible

Felobo B.V. in Hilversum, the Netherlands (Chamber of Commerce 80910483) is responsible for the data HeadsUp processes. Questions about your data? Email hallo@headsup-app.com.

What we read

Only text messages from the chats you allow HeadsUp to read: the groups you switch on, or all groups if you choose that reading mode. We do not store other chats, photos, voice messages or videos. HeadsUp never sends messages.

In 'everything' mode HeadsUp also reads your one-to-one chats. Those messages are deleted after 14 days, just like group messages. We never read status updates, channels or your chat with yourself.

How long we keep it

Raw messages are deleted after 14 days. The action items and overviews made from them are kept for as long as your account exists.

AI

To find action items we send messages to an AI service. We only use services that do not store the messages and do not train on them.

Profile picture

As your profile picture we store your WhatsApp profile photo, or otherwise your Gravatar image if you have one. We fetch it ourselves and resize it to 256 by 256 pixels. Your email address is only sent to Gravatar as a hash, never from your browser. If you unlink WhatsApp, the WhatsApp photo is removed; if you delete your account, the profile picture is removed entirely.

Analytics and error reports

On the website we use Google Analytics, only if you agree to it in the cookie banner. Without consent Google sets no cookies and only receives counts without identifiers. Ad signals are always off. In the iOS and Android apps we measure usage with Firebase Analytics. Error reports from the website, apps and server go to Sentry.

We send usage events, such as a page view or a checked-off action item, and technical data, such as browser, device and the error message. Never the content of messages or action items, and never your email address or phone number. Google keeps this data for 14 months, Sentry for 30 days.

Processors in the US

Google (Google Ireland Ltd. and Google LLC, Ireland and US) for Google Analytics and Firebase, and Functional Software Inc. (Sentry, US) for error reports. Transfers to the US are based on the European Commission's Standard Contractual Clauses (SCCs). You can change your cookie choice via Cookie settings at the bottom of the page.

Deleting

Delete your account in the settings. All your data is removed right away.