Privacy Policy
Last updated 25 October 2026
This policy explains what WhetWare LLC (“WhetWare”, “we”) collects when you use our applications, why we collect it, and how you can get it back or have it erased. It covers Personal Vault, SplitTab, Musicians Hub, Ledger, MyPaths, Rentals and the WhetWare shop.
The short version: we collect what an account needs to work, we do not sell your data, we do not run advertising or cross-site tracking, and you can delete your account and its contents at any time.
What we collect
| Data | Why we have it |
|---|---|
| Email address, and your name if you give one | To identify your account, verify it, and send transactional mail such as verification and password resets. |
| A hashed password, if you register with one | To sign you in. Passwords are stored only as salted hashes — we cannot read them. |
| Sign-in details from Google or Facebook, if you use those buttons | When you choose social sign-in, the provider returns your name, email address and profile picture so we can create or match your account. We do not receive your password, and we request no permission to post on your behalf. |
| The content you put into an app | Vault entries, receipts, band and track details, ledger transactions, hike tracks and photos, booking details, orders. This is yours; we store it so the app can show it back to you. |
| Basic operational logs | Request and error logs that let us keep the services running and investigate abuse. These may include an IP address and are kept only as long as they are operationally useful. |
Things we deliberately do not do
- We do not sell or rent your personal information to anyone.
- We do not use advertising cookies or cross-site tracking, and we do not run third-party ad or analytics trackers in our apps.
- We never store card numbers. Card details are entered directly with Stripe and never reach our servers.
- For Personal Vault, your vault contents are encrypted in your browser with a master password we never receive, so we cannot read them even if asked.
Cookies and local storage
We use only what is required to keep you signed in: a session token held by your browser. Some apps also keep small preferences locally, such as whether you last used the map or satellite view. Our sign-up pages use Cloudflare Turnstile to block automated abuse, which sets its own challenge data under Cloudflare’s terms.
Who else processes your data
We keep the list of third parties short, and each one only sees what it needs to do its job:
- Amazon Web Services — hosting, databases and file storage, in the United States.
- Stripe — payments and subscriptions, where an app charges for something.
- Google and Meta — only if you choose their sign-in button, and only to authenticate you.
- Email delivery providers — to send verification, password reset and notification mail.
- Cloudflare — bot protection on sign-up forms.
We may also disclose information where the law requires it, or where it is necessary to protect our users or our services from abuse.
Where your data lives, and for how long
Data is stored on servers in the United States. We keep your account data for as long as your account exists. Accounts that are registered but never verified are deleted automatically after seven days. When you delete content in an app, it is removed from the live service; it may persist briefly in routine backups before ageing out.
Your rights, and how to delete your data
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to erase it entirely.
To delete your account and the data associated with it:
- Email info@whetware.com from the address on the account, stating which app you want deleted, or that you want all of them removed.
We action deletion requests within 30 days and will confirm by email when it is done. If you signed in with Google or Facebook, deleting your WhetWare account also removes the profile information we received from them; you can additionally revoke our access from your Google or Facebook account settings at any time.
Children
Our services are not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will remove it.
Security
Traffic to our apps is encrypted in transit. Passwords are stored as salted hashes, access to production systems is restricted, and Personal Vault additionally encrypts its contents in your browser. No system is perfectly secure, but we take these obligations seriously and will notify affected users promptly if a breach ever puts their data at risk.
Changes to this policy
If we change this policy we will update the date at the top of the page, and for significant changes we will tell account holders by email.
Contact
Questions about this policy, or about your data, go to info@whetware.com.