1. Who we are
Whenly (whenly.family) is operated by Arturo Caissut, an individual based in Italy. As data controller, I am responsible for the personal data you provide when using this service.
For any privacy-related enquiries, contact: privacy@whenly.family
2. What data we collect
We collect only the data you actively provide:
- Account data: email address, password (hashed), username, country of residence (required), preferred language
- Optional profile data: first name, last name, date of birth, avatar image
- Children's data: nickname and date of birth for each child you add. Date of birth is required to use the diary feature; nickname is optional.
- Activity data: votes on parenting milestones, confidence ratings, source links you submit, diary milestone entries
- Communication preferences: whether you have opted in to receive service updates and news from Whenly
- Technical data: session tokens necessary for authentication (stored by Supabase)
We do not collect location data beyond country of residence, device fingerprints, or any data through tracking technologies beyond what is strictly necessary for the service to function.
3. Legal basis for processing
- Contract performance (Art. 6.1.b GDPR): processing your account and activity data to provide the service you signed up for
- Legitimate interest (Art. 6.1.f GDPR): maintaining service security, preventing abuse, and producing internal aggregated statistical reports on milestone data (see section 4a)
- Consent (Art. 6.1.a GDPR): optional profile data such as your own date of birth; email communications (if you have opted in)
4. How we use your data
- To create and manage your account
- To display your votes and contributions on the platform
- To compute community consensus on parenting milestones
- To power the diary feature, including calculating your child's age at each milestone
- To moderate user-submitted source links
- To provide you with a personalised experience based on your profile
- To send you service updates and news, if you have opted in (see section 4b)
We do not use your data for advertising profiling. We do not share individually identifiable data with third parties except as described in section 5.
4a. Aggregated and statistical data
We may use anonymised, aggregated data derived from user votes and milestone entries for internal research and statistical analysis — for example, computing average milestone ages by country or user cohort. This data cannot be traced back to any individual user.
At present, aggregated data is used for internal purposes only. If in the future we decide to share or commercialise aggregated data with third parties (such as academic researchers or companies in the child development sector), we will notify all registered users by email and display a prominent notice on the platform at their next visit. Users will be able to opt out before any such sharing takes place.
4b. Email communications
If you opted in during registration or later updated your preferences, we may send you occasional emails about new features, milestone updates, and platform news. These communications are not automated marketing — they are sent manually and infrequently.
You can withdraw this consent at any time from your account settings under Preferences → Keep me updated, or by contacting us at privacy@whenly.family. Withdrawing consent does not affect transactional emails (account confirmation, password reset, account deletion).
5. Third-party processors
We use the following sub-processors, each bound by appropriate data processing agreements:
- Supabase Inc. (USA) — database, authentication, and file storage. Data may be stored in EU data centres. See Supabase Privacy Policy.
- Resend Inc. (USA) — transactional email delivery (account confirmation, password reset, and service notifications). Your email address is shared with Resend solely for the purpose of sending these messages. See Resend Privacy Policy.
- Vercel Inc. (USA) — hosting and deployment infrastructure. See Vercel Privacy Policy.
No other third-party services receive your personal data.
6. Children's data
Whenly is intended for use by parents, caregivers, and anyone interested in child development, aged 18 and over. We do not knowingly collect personal data from children under 18. If you are under 18, please do not create an account.
Information about children (nicknames, dates of birth) entered by parents or caregivers is processed solely to personalise the diary experience and compute milestone ages. This data is never shared, never made publicly visible, and is permanently deleted when the parent account is closed.
7. Data retention
- Account data: retained for as long as your account is active
- Votes and contributions: retained for as long as your account is active; anonymised aggregates may be retained after account deletion
- Diary entries and children's data: deleted immediately upon account deletion
- Avatar images: deleted immediately upon account deletion
When you delete your account, all personally identifiable data is permanently removed within 30 days.
8. Your rights
Under the GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate data directly in your account settings
- Erasure — request deletion of your account and all associated data
- Portability — receive your data in a machine-readable format
- Restriction — request that we limit processing of your data
- Objection — object to processing based on legitimate interest, including aggregated data use
- Withdraw consent — at any time, for data processed on the basis of consent (optional profile fields, email communications)
To exercise any of these rights, contact us at privacy@whenly.family. We will respond within 30 days. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).
9. Cookies
We use only technically necessary cookies required for authentication and session management. We do not use advertising or tracking cookies. For full details, see our Cookie Policy.
10. Affiliate links
Some pages on Whenly may contain affiliate links to products on Amazon and other retailers. If you click one of these links and make a purchase, Whenly may receive a small commission at no additional cost to you.
Affiliate links are clearly identified where they appear. The inclusion of affiliate links does not influence the content of the platform in any way — in particular, product suggestions have no bearing on the consensus data, which is derived solely from community votes and scientific sources.
Whenly is a participant in the Amazon Services LLC Associates Program and the Amazon EU Associates Programme, affiliate advertising programmes designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.
11. Changes to this policy
We may update this Privacy Policy from time to time. For minor changes, we will update the date at the top of this page. For material changes — in particular any change to how aggregated data may be shared or commercialised — we will notify all registered users by email and display a prominent notice on the platform at their next visit, giving them the opportunity to review and respond before the change takes effect.
Continued use of the service after notification of material changes constitutes acceptance of the updated policy.