Privacy policy

• You answer questions with taps. We use your answers to make your report, and we keep the report so you can come back to it.
• If you create an account, we keep your email address so you can sign in. We only email you about your account, and we'll only send you other emails if you choose to receive them.
• If you buy a report or a plan, Stripe takes the payment on its own page: we never see your card number. We keep a record of what you bought, as tax rules require.
• We don't sell your data, show ads or use tracking cookies.
• An AI model helps write the words in your report and, if you buy one, your plan. It receives your answers and anything you type in your own words (the goals for a plan), never your name or email. Your answers are stored with your report, and with your account once you have one.
• WayUV is for adults: accounts are for people aged 18 or over.
• You can download a copy of your data, or delete your account, from your Account page, or ask us at privacy@wayuv.com.

WayUV (wayuv.com) is run by Truest FZC, a Free Zone Company with limited liability, incorporated in Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates, with its registered address at Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates (business licence 4431218.01). Truest FZC decides how your data is used: in data-protection terms, it is the controller, and “we” on this page means Truest FZC.

For anything about your data, email privacy@wayuv.com. Our representative in the European Union under Article 27 of the GDPR is James Samassa, Madrid, Spain, reachable at the same address.

• We don't sell or rent your data, and we don't share it with advertisers.
• We don't show ads or use tracking cookies, advertising pixels or social-media trackers.
• We don't ask for your name, phone number or address. When you pay, Stripe asks on its own page for what a payment needs; we don't receive your card number.
• We don't send your email, your name, your network address or the codes for your account or report to the AI model.

Your report is made automatically. Fixed scoring rules turn your answers, published labour-market data and our four scenarios into the labels, ranges and verdicts you see. The same answers always give the same result. An AI model then writes the explanation in plain words. It never sets the numbers or labels, and its text is checked before it's shown. If the text fails those checks, or the AI is unavailable, you see text written by the rules instead.

If you buy Your Report or Your Complete Plan, the same AI model writes more for you: the full report, and the plan from your plan answers, your report and the day's news. The same checks apply, and every part written by AI is labelled as such.

What the AI receives, exactly. For a report: each question with the answer you chose, the results of our scoring rules, published data about your field, and the day's news summary. For a plan, also: your plan answers, including the goals you typed in your own words, the tasks you ticked, and your report's text. It never receives your name, your email address, your network address, or the codes for your account or your report. Your answers, and what the AI wrote, are stored with your report, and with your account once you have one.

The report is guidance to help you think ahead. It isn't a prediction, and it isn't financial, career or legal advice. It doesn't decide anything about you, and we don't share it with employers, lenders, insurers or anyone else, so it has no legal or similar effect on you.

If you use a share button, the link opens a small card showing your four labels, never your answers, name or email. Anyone with that link can see the card.

These companies process data for us, only on our instructions and under data processing agreements, except Stripe, which also acts on its own account (below). The list is made from what our code actually calls.

• Supabase (our processor) stores your account, answers, reports, plans, purchases and usage events. Our database is in Ireland, in the EU.
• Vercel (our processor) hosts the website, runs our server code (in Dublin, in the EU) and provides the website analytics. It receives every request to the site, with your network address. Vercel is based in the United States.
• Anthropic (our processor) provides the AI model that writes the words of your report and, if you buy one, your plan. It receives exactly what is described in “What the AI receives” above: never your email, name, network address or account. Under its commercial terms, Anthropic doesn't train its models on this data, and deletes it within 30 days unless it must keep it longer for safety or legal reasons. Anthropic is based in the United States.
• Resend (Plus Five Five, Inc.; our processor) sends our account and order emails, such as password-reset links, order confirmations and withdrawal confirmations. It receives your email address and the content of each email. We send through its EU region; Resend is based in the United States and also processes this data there. Resend keeps each email's data for 30 days.
• Stripe takes payments. We send Stripe your email address and the codes for your account and report with the order; on Stripe's payment page you give your card details and, for tax, your billing country and where needed your postcode. Stripe sends us the amount, the tax, the billing country, its reference numbers and the email you paid with, never the card number. Stripe has two roles: it is our processor when it handles the payment on our instructions, and an independent controller for its own purposes, such as preventing fraud, meeting financial and anti-money-laundering rules, keeping its services secure, and keeping its own payment records for as long as those rules require. For those purposes Stripe's own privacy policy applies: stripe.com/privacy. Stripe is based in the United States and has companies in Europe.
• Google (Google Workspace; our processor) handles our email at hello@wayuv.com and privacy@wayuv.com. Google is based in the United States.

Two more services our code calls receive no personal data: Perplexity (United States) receives only our own news-search questions when we make the daily news summary, and Healthchecks.io receives a signal that the summary was published. Neither receives anything about you.

Some of this data leaves the European Economic Area: Anthropic, Google, Resend, Stripe and Vercel are based in the United States, and Supabase's and Vercel's teams may reach data from outside the EU to run their services. Each of these transfers is protected by the European Commission's Standard Contractual Clauses, which are part of each provider's data processing agreement. Google, Resend and Vercel are also certified under the EU-U.S. Data Privacy Framework. Truest FZC itself is in the United Arab Emirates: your data is stored in the EU, and when our team in the UAE or our contracted developer in Spain needs to look at it to run WayUV or answer you, they reach it from there. Ask us if you'd like more detail.

• Your account and the reports saved to it: until you ask us to delete them, or until the account hasn't been used for 24 months (no sign-in, no new report and no report opened, and no WayUV Plus payment). Then we delete the account and its reports.
• Reports made without an account: deleted 90 days after they were made. Any share link to them stops working then.
• The scrambled network code and the usage events are kept with their report, and deleted with it.
• The scrambled network codes kept for wrong family codes and the cancellation form: deleted within two days.
• Your plan answers, your plan, the steps you ticked and any guarantee refund request: deleted with your account.
• WayUV Plus: your what-ifs, the news picked for you and your monthly updates are deleted 30 days after your membership ends (time to rejoin and keep them), or with your account, whichever comes first. Your membership's details and the record of each reminder and confirmation we emailed you are deleted with your account. The membership's payments are purchase records, kept as below.
• Purchase records (what you bought, the payment and its tax, the billing country, refunds and withdrawals, the terms and the delivery box you agreed to, and whether our confirmation reached you): kept for 10 years from the end of the year of the purchase, as EU VAT rules require, also after your account is deleted, with the link to your account removed. They hold no name or email: only the amounts, dates, country, Stripe's references and the scrambled email code. A record of the first sale in each country (the country, date, product, amount and Stripe's reference) is kept with them, for our tax registrations.
• Website analytics: the code that recognises a visit is discarded after 24 hours; only counts are kept.
• At Anthropic: deleted within 30 days, as above.

We check for these every day. Deleted data can stay in our database provider's backups for up to 7 days before it's gone for good.

To delete your account and everything saved to it, open your Account page and choose “Delete my account”; it asks for your password and deletes at once (purchase records stay, as above). If you're a WayUV Plus member, deleting your account ends your membership at once, and nothing more is charged. You can download a copy of your data there first. If you'd rather, email privacy@wayuv.com from the address you signed up with. For a report made without an account, send us its link. We'll delete it within one month and tell you when it's done. Taking the questions again makes a new report; it doesn't delete the old one.

We may keep anonymised, aggregated statistics that can't identify anyone, such as how many reports were made each month or how the results are spread across countries and kinds of work. We use them to improve WayUV and to publish or share insights about how AI is changing work.

They're counts and totals only: no ids, no network codes, no email addresses and no individual answers, and groups too small to hide anyone are left out. Because they can't identify anyone, we may keep them after the data they came from has been deleted.

We only store what WayUV needs to work. We don't use analytics, advertising or tracking cookies.

• Sign-in cookies keep you signed in after you create an account or sign in. They last up to 400 days and are removed when you sign out.
• wayuv_made remembers which reports were made in this browser (the last ten), so only you can open a report before it's saved to an account. It holds report codes, nothing about you, is signed so it can't be forged, and lasts 30 days.
• wayuv_family is set only if you open a family price link. It remembers the link in this browser so the family prices show here, holds nothing about you, and lasts 90 days.
• Your answers in progress are kept in your browser's session storage while you answer, so a refresh doesn't lose them. They're cleared when you close the tab.

All of these are needed for the service you asked for, so we don't ask for consent to them. Stripe's payment page sets its own cookies while you pay, under Stripe's policy; our pages set none for it.

Under the GDPR you can ask us to: give you a copy of your data; correct it; delete it; limit how we use it; give it to you in a portable format; and stop using it where we rely on our legitimate interests. A copy of your data and deletion are a button away on your Account page; for anything else, email privacy@wayuv.com. It's free, and we'll reply within one month.

If you're not happy with how we handle your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority where you live; in the UK, the Information Commissioner's Office (ico.org.uk). We'd also welcome hearing from you first, so we can try to put it right.

WayUV is for adults. You need to be 18 or older to use it: the questions start at 18, and you confirm your age when you create an account. A parent can ask about a child's future using only broad interests and stage of study; we never ask for a child's name, school, birth date or where they live, and keep no separate profile of a child: only the age group and interests you chose, as part of your own answers.

Data travels encrypted (HTTPS). Passwords are stored only in hashed form. Only our server code can read the database, and our secret keys never reach your browser.

If we change how we handle your data, we'll update this page and its version and date. For significant changes, such as a new kind of data or a new provider, we'll also tell you on the site.

Version 6 · 23 October 2026