Privacy Policy

Waldroid ("Waldroid," "we," "us," "our") is a product studio operating from Liverpool, United Kingdom and Ikeja, Lagos, Nigeria. We design and build web and mobile applications and B2B websites for clients, and we build and operate two consumer apps of our own: Vutar, a routine and habit tracker, and FreelancerTax, an income and tax-estimation tool for freelancers.

- our website and any subdomain of it;

- Meetroid, our built-in scheduling and payment system for booking calls with us;

- the chat assistant embedded on our website;

- the Vutar mobile app; and

- the FreelancerTax mobile app.

Where a rule in this policy applies only to one of our apps or only to the website, that is stated explicitly in the relevant section. Everything else applies across all of them.

If you have questions about anything in this policy, or want to exercise any of the rights described below, contact us at the email address given in the Contact section at the end of this document.

We collect different information depending on how you interact with us. We only collect what we need to provide the service you're using, and we never sell your personal information to third parties.

Contact form If you get in touch through our contact page, we collect your name, your email address, and whatever message you choose to send us. We use this solely to reply to your enquiry.

Booking and scheduling (Meetroid) When you book a call with us, we collect your name, your email address, your phone number if you provide one, the date and time you select, and your answers to any screening questions the person you're booking with has set up for that meeting type. If the meeting is a paid consultation, we also process payment information as described below.

Payments Where a booking requires payment, card payments are processed by Stripe, our payment processor — we never see or store your full card number, expiry date, or CVV; Stripe handles that directly and securely. For manual bank transfers, we ask you to upload a screenshot or photo confirming the transfer, which we review to confirm your booking and then retain for our own accounting and dispute-resolution records.

Chat widget Our website includes a chat assistant. Messages you type into it are sent to us so the assistant can respond, and — only if you choose to use one of the "I need a website," "I want to build an app," "Pricing," or similar prompts — we also collect the project details and email address you provide so a member of our team can follow up with you directly. If you just ask the assistant general questions, no separate record with your identity attached is created beyond the conversation itself.

Account and calendar connections To create calendar invitations for bookings, members of the Waldroid team connect their own Google Calendar or Microsoft Outlook accounts to Meetroid. These connections are established by our staff, not by people booking calls with us, and are used only to create the calendar event for your booking and to add the relevant details (time, video-call link, your name and email) to both your calendar and ours.

Website usage data Like almost every website, ours generates standard server logs through Cloudflare, our hosting provider — things like your IP address, browser type and version, the pages you visited, and the date and time of your visit. We use this in aggregate to understand traffic and to detect and prevent abuse; we do not use it to build individual advertising profiles.

Cookies See Section 6 below for the specific cookies we use.

Vutar and FreelancerTax What we collect through each app is different enough from the website that each has its own dedicated section — see Sections 8 and 9.

e use the information described above for the following purposes:

- to respond to enquiries submitted through our contact form or chat widget;

- to schedule, confirm, and remind you about bookings made through Meetroid, including generating calendar invitations and video-call links;

- to process payments for paid bookings and to keep the financial records our business is legally required to keep;

- to follow up with people who indicate through our chat widget that they want to discuss a project;

- to maintain, secure, and improve our website, including diagnosing technical problems and preventing fraud or abuse;

- to comply with our legal obligations, for example responding to a lawful request from a regulator or tax authority; and

- to provide the core functionality of the Vutar and FreelancerTax apps, described in their own sections below.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you, and we do not use it to serve third-party advertising.

For visitors in the UK and EEA, we rely on the following legal bases under UK GDPR (and the equivalent provisions of the EU GDPR where applicable) to process your personal information:

• Contract to take a booking, provide a service you've asked for, or process a payment, we need to process your details as necessary to perform that contract with you.
• Legitimate interests for things like responding to general enquiries, keeping our website secure, and understanding aggregate usage, we rely on our legitimate interest in running a functioning business, balanced against your right to privacy.
• Consent where we ask for it specifically, such as certain non-essential cookies, we rely on your consent, which you can withdraw at any time.
• Legal obligation we retain certain payment and accounting records because the law requires businesses to do so.

For visitors and app users based in Nigeria, we apply the equivalent standards under the Nigeria Data Protection Act 2023 (NDPA) and its supporting regulations.

Our website uses a small, deliberately limited set of cookies and local-storage entries:

- a cookie that remembers whether you've accepted or declined non-essential cookies, so we don't ask you again on every visit;

- local-storage entries that keep the chat widget's conversation history and lead-capture progress intact as you move between pages on our site; and

- local-storage entries that keep the Meetroid booking flow working correctly across steps.

We do not use third-party advertising cookies, cross-site tracking pixels, or social-media tracking scripts. You can decline non-essential cookies from the banner shown on your first visit, and you can clear any stored cookies or local-storage data at any time through your browser's site-data settings. Declining cookies will not prevent you from browsing the site, but may mean the chat widget or booking flow don't remember your progress between pages.

We share personal information only with the service providers we need to run our business, and only to the extent necessary for them to provide their service to us. These include:

• Cloudflare our hosting provider, which also processes the traffic to our website, stores certain files (such as payment-proof screenshots) in its object storage, and runs the AI model behind our chat assistant (Cloudflare Workers AI). Cloudflare does not use this data for its own purposes.
• Stripe our payment processor for card payments made through Meetroid. Stripe is itself subject to strict card-industry security standards (PCI DSS).
• Google and Microsoft used only for the calendar connections our own staff set up, so that booking a call with us results in a calendar invitation appearing in both your calendar and ours.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We will only disclose personal information beyond the parties listed above if required to do so by law, to comply with a valid legal process, or to protect the rights, property, or safety of Waldroid, our users, or the public.

Because we operate across the United Kingdom and Nigeria, and because our service providers (Cloudflare, Stripe, Google, Microsoft) operate global infrastructure, your personal information may be processed in countries other than the one you live in, including the United States. Where we transfer personal information out of the UK or EEA, we rely on appropriate safeguards recognised under UK GDPR, such as Standard Contractual Clauses, or on the fact that the recipient is certified under a recognised adequacy framework. You can contact us for more information about the safeguards that apply to a specific transfer.

Vutar is designed so that your personal data doesn't leave your phone. It makes zero network calls for your routines, logs, streaks, or check-ins that information lives only in an on-device store on your phone. Because of this, Vutar's App Store privacy label reads "Data Not Collected," and it is accurate: we have no server that stores or could disclose your routine data, and there is nothing for us to lose in a data breach because nothing leaves your device in the first place.

The only information that flows outside your device relates to your subscription, and even that is limited: Apple processes your subscription payment and manages your billing relationship directly through your App Store account. We receive only anonymous, aggregated start, renewal, and cancellation signals from Apple — never your payment details, and never anything that identifies you personally.

You are always in control of your own data within the app: from Settings. Your data, you can export everything you've logged as a JSON or CSV file, or delete all of it, at any time, with no need to contact us. If Vutar ever adds features that do involve a server such as optional iCloud sync between your own devices this policy will be updated in advance to describe exactly what that means for your data, and any such sync will only ever be accessible to you through your own private iCloud account, never to us.

Vutar is a self-tracking tool intended to help you build routines. It is not a medical device, and it does not diagnose, treat, or provide medical or psychological advice.

FreelancerTax works with the financial information you choose to enter yourself: income and expense entries you log, receipt photos you scan for automatic reading, mileage records, and the country you select, which determines the tax rates, brackets, and deduction rules the app shows you. FreelancerTax does not connect to your bank account, and we do not ask you for a bank account number, sort code, routing number, or national tax identification number.

We use the information you enter solely to calculate the estimates, charts, and reminders you see inside the app for example, the running total of what to set aside for taxes, or the itemised breakdown of your estimated liability. This calculation happens to serve you the numbers you see; we do not use your financial entries for any other purpose, and we do not sell or share this data with third parties for marketing or credit-scoring purposes.

As with Vutar, your subscription is billed and managed entirely by Apple through your App Store account. We receive only anonymous subscription-status events from Apple never your card details.

FreelancerTax is a budgeting and estimation tool, not a substitute for professional advice. The figures it produces are estimates based on the information you provide and the tax rules built into the app; they are not tax advice, and you should confirm your actual tax position with a qualified tax professional, or with the relevant tax authority (such as the IRS, HMRC, CRA, ATO, or Nigeria's Federal Inland Revenue Service), before filing or relying on any figure for a real tax filing.

We keep personal information for as long as we need it for the purpose it was collected for, and no longer, except where the law requires us to keep it for longer. In practice:

• Contact-form and chat-widget enquiries are kept for as long as needed to respond to you and for a reasonable period afterward in case you follow up, and are then deleted or anonymised.
• Booking records (Meetroid) are kept for as long as needed to deliver the booked service and for our own operational history, and payment-related records are kept for the period required by UK and Nigerian tax and accounting law (typically several years).
• Website server logs held by Cloudflare are retained on a rolling basis for a limited period for security and diagnostic purposes.
• Vutar data never reaches our servers in the first place see Section 8.
• FreelancerTax data you enter stays associated with your account for as long as you keep using the app, and you can request its deletion at any time by contacting us or, where the app provides an in-app deletion option, using that directly.

We use industry-standard technical and organisational measures to protect personal information, including encryption in transit (HTTPS) across our website and apps, access controls limiting who on our team can see personal data, and relying on reputable, security-audited infrastructure providers (Cloudflare, Stripe) rather than running our own servers for sensitive functions like payment processing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we take reasonable steps appropriate to the sensitivity of the data involved.

If you are in the UK, the EEA, Nigeria, or most other jurisdictions with modern data-protection laws, you have some or all of the following rights over your personal information, subject to certain exceptions:

• Access to ask us for a copy of the personal information we hold about you.
• Rectification to ask us to correct information that is inaccurate or incomplete.
• Erasure to ask us to delete your personal information, subject to any legal obligation we may have to keep it.
• Restriction to ask us to limit how we use your information in certain circumstances.
• Portability to ask us for your information in a portable, machine-readable format, or to have it transferred directly to another provider where technically feasible.
• Objection to object to our processing your information where we rely on legitimate interests.
• Withdraw consent where we rely on your consent (for example, certain cookies), to withdraw that consent at any time, without affecting the lawfulness of processing before the withdrawal.

For Vutar, most of these rights are already built directly into the app the export and delete functions in Settings. Your data give you immediate, complete control without needing to contact us at all, because we hold nothing on our servers to act on regardless. For everything else described in this policy, email us at the address in the Contact section and we will respond within a reasonable time and in any event within the timeframe required by applicable law (for example, one month under UK GDPR).

If you are unhappy with how we've handled your personal information, you also have the right to lodge a complaint with your local data-protection regulator in the UK, this is the Information Commissioner's Office (ico.org.uk); in Nigeria, this is the Nigeria Data Protection Commission (ndpc.gov.ng).

Our website, Meetroid, and our apps are not directed at children under the age of 16, and we do not knowingly collect personal information from children under that age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to remove it.

We do not send unsolicited marketing emails. If you contact us through our website or book a call with us, we may follow up about that specific enquiry or booking, but we will not add you to a marketing list without your clear, separate opt-in, and if we ever do send you marketing communications, every message will include a straightforward way to opt out.

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or the law. Whenever we do, we will update the "last updated" date at the top of this page and publish the new version here. If a change is significant, we will make reasonable efforts to bring it to your attention, for example through a notice on our website or within the relevant app. Continuing to use our website, Meetroid, or our apps after a change takes effect means you accept the updated policy.

If you have questions about this Privacy Policy, want to exercise any of the rights described above, or have any other concern about how we handle your personal information, please contact us at:

Email: contact@waldroid.com

We aim to respond to all privacy-related enquiries within a reasonable time, and in any event within any timeframe required by applicable law.