Privacy Policy

Last updated: 10 July 2026

1. Who we are

WML (What My Life) is operated by Baltasaar Services GmbH, Gensinger Str. 14, 55457 Horrweiler, Germany (“we”). Contact: hello@baltasaar.com. We are the controller under the EU General Data Protection Regulation (GDPR).

2. What WML processes — and your explicit consent

WML is a wellbeing and recovery-support tool. What you log — habits, moods, notes, connection signals — can reveal information about your health. Health-related data is a special category under Art. 9 GDPR: we process it only with your explicit consent(Art. 9(2)(a) GDPR), which we ask for when you create your account and which you can withdraw at any time (see section 7).

• Account data: name, email, password (stored as a hash), language, timezone — Art. 6(1)(b) GDPR (providing the service).
• Wellbeing data you log: habits, mood scores, optional notes, goals, planner entries — Art. 9(2)(a) GDPR (your explicit consent).
• Safety signals: if a note contains crisis-related wording, a local keyword check may create a severity flag so the app can show you support resources. The check runs inside WML; the text of your note is not sent anywhere. Gentle outreach only happens if you separately opt in (Settings → Safety).
• Emergency contact (optional): stored encrypted, used only with your explicit consent, never shared or sold.

3. What WML does NOT do

• No advertising, no tracking, no analytics on your wellbeing data.
• Your entries are never sold or shared with third parties.
• Your entries are not processed by external AI/LLM services and are not used to train any models.
• No automated decision-making within the meaning of Art. 22 GDPR.

4. Sharing you control

Everything you log is private by default. Buddies, pods and co-habits only ever see what you explicitly choose to share, at the level you choose. You can change or revoke sharing at any time.

5. Hosting and security

WML runs on servers in Germany (EU). All traffic is TLS-encrypted; sensitive fields (mood notes, emergency contact) are additionally encrypted at rest (AES-256-GCM). Fonts are served from our own infrastructure — no requests to third-party font services.

6. Retention

Your data is kept for as long as you keep your account. Deleting your account (Settings → Delete) erases your habits, moods, connections and profile immediately and irreversibly (Art. 17 GDPR).

7. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and to withdraw consent at any time with effect for the future (Art. 7(3)) — withdrawing consent means we stop processing your wellbeing data; you can simply delete your account or email us. You may complain to a supervisory authority (Art. 77), e.g. the Landesbeauftragte für den Datenschutz Rheinland-Pfalz. An informal email to hello@baltasaar.com suffices.

8. Not a medical device

WML is a wellness tool, not a medical device, and does not replace professional diagnosis or treatment. If you are in crisis, contact local emergency services (EU: 112) or a crisis line immediately.