Privacy Policy
Last updated: 5 March 2025
WayFlame ("we", "us", "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore and applicable data protection standards.
1. Data We Collect
- Account information: Name, email address.
- Profile information: Cancer type, subtype, stage, treatment status, medications, molecular markers, and related health details you choose to provide.
- Employment & insurance: Employer name, employer size, insurance type and provider (optional).
- Usage data: Features used, content generated (journal entries, checklists, report translations).
- Payment information: Processed and stored by Stripe. We do not store your credit card details.
2. Purpose of Data Collection
We collect and use your data to:
- Provide personalized recommendations and AI-generated content tailored to your diagnosis.
- Manage your subscription and process payments.
- Improve the Service and develop new features.
- Communicate important account and service updates.
3. We Do Not Sell Your Data
We will never sell, rent, or trade your personal data to third parties for marketing or any other purpose.
4. Third-Party Services
We use the following third-party services to operate WayFlame:
- Supabase — Database and authentication. Your data is stored securely with row-level security.
- Stripe — Payment processing. Subject to Stripe's Privacy Policy.
- Anthropic (Claude) — AI processing. Your prompts are sent to generate personalized content. Anthropic does not use your data to train models.
5. Data Retention
We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days in case you resubscribe, after which it is permanently deleted. You may request immediate deletion at any time.
6. Your Rights
Under the PDPA, you have the right to:
- Access your personal data we hold.
- Correct inaccurate or incomplete data.
- Withdraw consent for data processing (which may affect your ability to use the Service).
- Request deletion of your personal data.
To exercise any of these rights, contact us at hello@wayflame.health.
7. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, row-level security policies, and secure authentication practices.
8. Cookies
We use essential cookies for authentication and session management only. We do not use tracking or advertising cookies.
9. Children
The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.
11. Contact
For privacy-related inquiries, contact our Data Protection Officer at hello@wayflame.health.