Privacy, in plain language

What we collect

• Your account When you sign in, we get your name and your email address or phone number, whichever you sign in with. Phone sign-ins add an email too. We store your profile photo if you have one. Sign-in runs on Firebase Authentication, a Google service. We never see your password.
• Your plans Plan names and descriptions, the days people mark, who's in a plan and who invited them, and any cover photo you add. This is the product. Without it, WhatIfWe has nothing to show your friends.
• Usage Which pages and features people use, and any errors the app hits, through an analytics service. In the app, those events carry your name and account ID. This tells us what's confusing and what's working. We don't use it for ads.
• Recordings The same service records how people move through our pages, including what they click and what's on screen. This shows us where people get stuck.

Who can see your plans

Only people you share the link with. Plans are never public and never show up in search. Invite pages carry a noindex instruction so search engines skip them. Anyone with the link can see the plan's name, cover, date window, and the host's first name. To see more, they sign in and join. Anyone with the link can do that. People in a plan see who else is in it and which days each person marked. Adding days requires signing in, so names attach to dates.

Other guests see your name and photo. They don't see your email or phone number.

The person who builds WhatIfWe can see plans too. An activity feed texts them when people sign up, start plans, join, or mark days.

Where your data lives

Plan and account data lives in Google Cloud Firestore, the database behind the app. Photos you upload live in Firebase Storage. Resend, an email service, sends notification emails to the address on the account, like telling a planner that a friend added their days. Cover photo search runs on Unsplash. The app sends Unsplash your plan's description as the search term, and Unsplash photos load from Unsplash. Google and Resend process data on our behalf. Neither gets your data for its own use.

What we don't do

WhatIfWe shows no ads. It sells no data and shares none with brokers. It has no paid tier.

One measurement tag, on these pages only

WhatIfWe advertises itself on Google. To know whether those ads work, every page outside the app carries Google's measurement tag (gtag). The tag loads on each of those pages and records a conversion when you click through to the app. Google uses its own cookies for that. The tag is not in the app itself. Past the front door, WhatIfWe sends nothing about your plans or your account to any ad platform. Google's privacy policy covers how Google handles tag data.

Your choices

You can leave a plan whenever you want. To delete your account and its data, email support@whatifwe.app. A person reads that inbox and does it. The same address answers any question this page didn't.

Last updated 2026-11-04 (what a link shows, what other guests can see, and recordings).