Your household details are private to you. Only you, and the people you invite who sign in themselves, can see your household. We do not sell your data and we do not share it with advertisers.

• Sign-in details — your name and email address from Google when you sign in.
• Your ID profile — full name, phone number, date of birth, ID expiry date, a photo of your National ID, and a selfie.
• People you add — their full name, phone number, date of birth, ID expiry date, whether they have a smartphone, and who they are attached to.
• Household details — household name, household logo, and a WhatsApp group link if you save one.
• Invites — the name, phone number and invite link of a person you invite to join.
• Help questions — questions you type into Ask Welile, which are sent to an AI service to write an answer. We ask you not to type private details there.

We do not collect National Identification Numbers, relationships, home addresses, or documents belonging to the people you add.

Details are kept in a secure managed database, and photos in private storage. Photos are never publicly readable — the app creates a short-lived private link each time you view one. Database rules make sure one household cannot read another household's records.

Photos are made smaller on your phone before they are uploaded, so less data leaves your device.

• to show your household, your family tree and renewal dates;
• to let people you invite join and see their own record;
• to open WhatsApp with a number you chose to message;
• to keep the app secure and to stop misuse.

We do not use your household data to target adverts.

• You, as the Anchor of your household.
• A person you invited who signed in — they see their own record and who they are under.
• Our service providers, only as needed to run the app: the hosting and database provider, Google for sign-in, and the AI service that answers help questions.

Staff accounts for adverts can manage advert pictures only. They cannot see household data.

If we add these features, this page will be updated first and you will be told before anything new is collected:

• a verification or proof-of-membership check, and a record of when it was used;
• simple usage statistics, so we can see which screens are difficult;
• notification details, such as a device token for renewal reminders;
• optional location of a district or village, if households ask for it;
• payment details, if paid features are ever offered.

We keep your household records while your account is active. You can permanently delete your account and data yourself from My profile.

Deletion removes your sign-in account, profile, ID photo, selfie, household logo, people under your household, invitations and staff roles. It cannot be undone.

If you joined another household, that household's family record remains, but it is disconnected from your deleted sign-in account. Information that we must retain to meet a legal obligation may be kept only for the required period.

• See and correct any detail from your profile or a person's edit page.
• Remove a person at any time.
• Cancel an invite before it is accepted.
• Delete your account and household data directly from My profile.

Children can be added as dependents by an adult Anchor. Only an adult may create an account and sign in.

For any privacy question, contact the Welile ID team through the app. You do not need to contact us to delete your account: open My profile and choose Delete my account and data.