How your data is protected

• If you speak, your speech is turned into text and is then used exactly like a typed turn. No audio file is stored anywhere. The text derived from your speech is kept, though — exactly like a message you type.
• The conversation is kept word for word: what you write, what is recognised from your speech, and what WWAIT replies. That is why an interrupted session (a reload, a lost connection) can continue naturally.
• The conversation does not disappear when the session ends. Earlier conversations stay in the same conversation view and you can scroll back through them. You can also ask for one particular matter to be forgotten, or delete the whole process, whenever you want.

When the session ends, a structured memory is also formed from the conversation: structured notes on what was worked on, in WWAIT's own words. The conversation itself stays underneath them, exactly as it was held. The notes may include, for example:

• situations and events that were discussed
• people and relationships you mentioned
• thoughts and feelings you described
• relevant personal details you brought up yourself
• goals and worries
• your own observations and insights
• connections and contradictions that surfaced
• matters left open
• things that can be returned to in later sessions

Beyond individual sessions, WWAIT maintains a picture that develops over time: recurring themes, changes, connections, goals and unfinished matters. The purpose is not to collect as much information as possible, but to spare you from starting every session from scratch and explaining the same things again. Memory is a working tool for continuity, and alongside it the conversation itself is kept for you to read whenever you want.

• Audio recordings of sessions are not kept.
• No audio file of your speech and no recording of WWAIT's voice is kept — only the text remains.
• WWAIT does not form a diagnosis about you and does not maintain a clinical patient record.

Because you may talk about deeply personal things, the structured memory can also contain sensitive information — an illness, a diagnosis, medication, a relationship — if you describe it yourself and it matters for the process to continue. WWAIT draws no conclusions about you from it, but it does not pretend to forget it either. You can always share only what you choose to share and always delete the data you want to delete.

• Memory content is tied to your user account, not to your name. This is pseudonymisation, not anonymisation: the content can technically be linked to your account.
• Only you can reach your own data. Access is restricted per user at the database level, not merely in the interface.
• Your data is protected by encryption in two places: traffic between your device and the service is encrypted, and stored data is kept encrypted at rest in the cloud infrastructure we use. In practice this means that if someone obtained only the files on disk or the backups, the content would look like a meaningless string of characters without the encryption keys. 
• The conversation is processed using external language and speech models whose servers may sit outside the EU. 

You can at any time, even in the middle of a process, delete all data related to your process on the “My process” page itself. This permanently deletes all sessions and conversation content, session memories, memory developed across sessions, temporary conversation content, as well as all themes, observations, and other process-related information formed during the process. After deletion, no information remains in WWAIT regarding previous conversations, their content, or the themes discussed in them. Deletion cannot be undone.

Payments are handled through Stripe Managed Payments. Sold through Link, LLC acts as the merchant of record and takes care of tax, receipts and payment support. WWAIT never sees or stores your card or payment details.

WWAIT is not a crisis service. If your situation is acute, you are always directed to human help according to your local services.

WWAIT is not a medical device (EU MDR) and is not marketed with treatment claims. We promise no health outcomes. If you need care, assessment or a diagnosis, turn to a healthcare professional.