Way Account Privacy Policy
Version 3.0 · Effective 11 December 2026 · Covers the Way Account, WayTube and WayMath
The short version
- A Way Account is one parent account that works in both WayTube and WayMath. Only adults (18+) can create one.
- Children never create accounts or sign in. We never ask for a child's surname, full date of birth, email, photo, voice or location.
- No ads in the apps, no selling of data, and no profiling of children for marketing.
- Each app keeps its own activity data. WayTube viewing history is not used in WayMath, and WayMath learning progress is not used in WayTube, unless you switch on a feature that clearly says so.
- You can ask us to delete a child profile, one app's data, or the whole account by emailing support@webwaygo.com. Deletion is completed within 30 days.
1. Who we are
The data controller is UI Tech Engineering SRL, registered office at Str. Cumpenei nr. 4G, et. 1, ap. 2, camera 9, sat Berceni, com. Berceni, jud. Ilfov, Romania, Trade Register no. J2025071610008, fiscal code (CUI) 52540461. Privacy contact: support@webwaygo.com. We have not appointed a Data Protection Officer, because we are not required to under art. 37 GDPR. For any data question, write to support@webwaygo.com.
2. What this policy covers
- The Way Account (sign-up, sign-in, parent area, subscriptions).
- WayTube apps (iOS, Android) and waytube.app.
- WayMath apps and waymath.app.
- Support requests by email or in-app.
It does not cover YouTube itself, or purchases made through the Apple App Store or Google Play, which follow their own privacy policies.
3. How one account works across apps
- Shared across apps: parent details, child profiles, subscription entitlements, privacy choices and language.
- Kept per app: what a child does in each app (videos watched in WayTube, exercises done in WayMath).
- Adding an app: once WayMath supports Way Accounts, your child profiles will appear there when you sign in, and you will choose which child uses which app.
- Removing an app: you can delete one app's data without closing your Way Account.
- Cross-app features: any feature that combines data from both apps (for example, one total screen-time limit) is off by default and explained before you turn it on.
WayMath test version (until accounts launch)
The current WayMath test version works without a Way Account and sends no personal data to us.
- Everything stays on the phone: the parent's choices (class, goal, time per week, reward level, how far the class has got in the school year), placement answers and results, progress (correct exercises, mastered skills, stars, streak days) and the parent PIN, kept in the phone's secure storage.
- Nothing is collected: no accounts, sign-in, ads, analytics, tracking or crash reporting. No name, birth date, photo or voice. No camera, microphone or location access.
- The parent report is calculated on the phone from the solved lessons.
- Deleting: use "Șterge datele de pe acest telefon" in the parent area, or uninstall the app. We hold no copy, so the data cannot be recovered.
When WayMath moves to the Way Account, goals, progress and reports will be stored on our servers in AWS Frankfurt (EU), visible only to the parent, under the rest of this policy.
Signing up to test (waymath.app/testare): if you sign up to test the app, we keep your email address, your phone type (iPhone or Android), your child’s school year, the page language and the date you agreed, only to contact you about testing. We do not ask for the child’s name. The legal basis is your consent, Article 6(1)(a); you can withdraw it at any time by writing to support@webwaygo.com. The data is stored in WayMath’s database in AWS Frankfurt (EU), is never used for advertising and is not passed to anyone. We delete it when you ask or when testing ends.
4. What we collect
| Category | Data | Source | Apps |
|---|---|---|---|
| Parent account | Name, email, password (stored only as a hash), country, language, record of the consents you gave and when | You | All |
| Child profile | First name or nickname (a made-up name is fine), birth month and year, age band, content language(s), avatar (picked from our illustrations) | You | All |
| Parent settings, WayTube | Content level, channel setup choice and selected channels, search on/off, daily limit and break reminders, parent PIN (stored as a hash) | You | WayTube |
| Parent settings, WayMath | Class, learning goal, time per week, reward level, how far the class has got in the school year | You | WayMath |
| Activity, WayTube | An activity log shown to you in the parent dashboard: videos watched and for how long, videos blocked by the filter, moods selected, in-app searches when search is on, watch-time counters | The app | WayTube |
| Activity, WayMath | Placement answers and results, correct exercises, mastered skills, stars and streak days (account version only; the test version keeps these on the phone) | The app | WayMath |
| Purchases | Plan, status, renewal dates, store transaction ID. We never see card numbers. | Apple, Google, Stripe | All |
| Device and technical | Device platform and app (read from the user agent), app version, language, IP address, approximate country or region, installation ID (a random code the app creates when it is first opened), server logs, server-side usage statistics (pages visited, referrers, features used) | The app, the website | All |
| Support | Messages you send us and our replies | You | All |
5. Why we use it and our legal basis (GDPR art. 6)
| Purpose | Legal basis |
|---|---|
| Create and run your Way Account and the apps you use | Performance of our contract with you, art. 6(1)(b) |
| Run child profiles: filter videos in WayTube, adapt exercises in WayMath | Performance of our contract with you, the parent, art. 6(1)(b) |
| Show you reports and dashboards about your child's use | Performance of contract, art. 6(1)(b) |
| Sell and manage subscriptions; keep invoices | Contract, art. 6(1)(b); legal obligation (accounting and tax), art. 6(1)(c) |
| Keep the service secure, prevent fraud and abuse, fix bugs | Legitimate interest, art. 6(1)(f) |
| Improve the apps using aggregated or pseudonymised statistics | Legitimate interest, art. 6(1)(f). Never used to target anyone. |
| Send service emails (verification, password reset, billing, policy changes) | Contract, art. 6(1)(b) |
| Send marketing emails to parents; optional cross-app features | Your consent, art. 6(1)(a); withdraw any time, as easily as you gave it. Marketing is never sent to children. |
| Respond to authorities and defend legal claims | Legal obligation, art. 6(1)(c); legitimate interest, art. 6(1)(f) |
6. Extra rules for children's data
- Child profiles are created, edited and deleted only by the parent.
- We collect the minimum: no surname, no full birth date, no photo, no voice, no location, no contacts.
- No advertising, no third-party trackers in child-facing screens, no sale of data, no profiling for marketing.
- Identifiers linked to a child profile are used only to run the service (sign-in, settings, progress, fixing errors).
- Settings, purchases and links out of the app sit behind a parent gate (PIN or a neutral age screen).
- If we learn that a child created an account or gave us personal data without a parent, we delete it.
- In Romania the age of digital consent is 16. For the safeguards in this section, we treat every user under 18 as a child.
7. How we use AI
- WayTube Age Fit Score is calculated from public information about each video: title, description, channel, tags, duration, category, transcript excerpts when available, thumbnail images and text detected in them, and safety or moderation signals derived from that content. We use OpenAI and Anthropic to analyse the text signals, and TypeSafe AI Inc. to classify thumbnail images. We do not send these providers any personal data about parents or children: no names, profile details, account identifiers, contact details or child settings.
- Age Fit Scores are probabilistic and can be wrong, incomplete or outdated. Parents stay responsible for the settings they choose. You can report a video you think is scored wrongly; we review reports and use them to improve scoring.
- WayMath: uses OpenAI to write practice problems from the school curriculum and TypeSafe AI Inc. to check that they are correct. This is done in advance: problems ship inside the app already reviewed, and the app makes no live AI calls. No child data, answers or identifiers are ever sent to an AI provider.
- We do not use your or your child's data to train AI models, and our providers are not allowed to use it for training.
- The Age Fit Score supports filtering and parental decisions only. It is not used for legal, financial, educational-access, health or similarly significant decisions about parents or children.
8. Who we share data with
We never sell personal data. We use these service providers (processors) under data processing agreements:
| Provider | Purpose | Data location | Safeguard for transfers |
|---|---|---|---|
| Amazon Web Services | Hosting, database, cache, server logs, reviewer sign-in emails | EU (Frankfurt) | EU hosting; AWS DPA |
| Microsoft (Microsoft 365) | Sending service emails | EU / EFTA | Microsoft DPA |
| Stripe | Web subscriptions on waytube.app | EU / US | SCCs / EU-US Data Privacy Framework |
| OpenAI | Text analysis (WayTube); generating math problems (WayMath); no personal data | US | SCCs / Data Privacy Framework |
| Anthropic | Text analysis (WayTube); no personal data | US | SCCs / Data Privacy Framework |
| TypeSafe AI Inc. | Thumbnail image classification (WayTube); checking generated math problems (WayMath); no personal data | US | TypeSafe DPA with SCCs |
The apps contain no crash-reporting, analytics or advertising SDKs. The websites load no third-party analytics or advertising trackers.
These parties act as independent controllers under their own policies:
- Apple and Google process payments for in-app subscriptions. On Android, Google Play Services also supplies the fonts the WayTube app uses, which involves a standard request from the phone to Google.
- YouTube serves the videos played in WayTube. WayTube uses YouTube API Services; by using WayTube you also agree to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy.
We may also disclose data to authorities when the law requires it, or to a buyer if our business is sold. We will tell you before your data moves to a new controller.
9. International transfers
Your account data is stored in the EU (AWS Frankfurt). Where a provider processes data outside the EU or EEA, we rely on an adequacy decision (including the EU-US Data Privacy Framework) or Standard Contractual Clauses. You can ask us for a copy of these safeguards.
10. How long we keep data
| Data | Retention |
|---|---|
| Parent account and child profiles | While the account is active; deleted within 30 days after you delete it |
| WayTube viewing and blocked-video history | Rolling 12 months |
| WayMath progress | While the child profile exists, or until you reset it |
| WayMath test sign-ups | Until testing ends or until you ask us to delete them |
| Inactive accounts (no sign-in, no app use and no active subscription for 24 months) | We email you, then delete 30 days later |
| Server logs | 30 days; database error logs 90 days |
| Security logs (including IP addresses) | 30 days |
| Server-side usage statistics | 90 days |
| Invoices and accounting records | As required by Romanian accounting law (Law 82/1991): usually 5 years for invoices and supporting documents, 10 years for accounting registers |
| Consent records | For the life of the account plus 3 years, to prove consent was given |
| Backups | Deleted after 7 days |
11. Your rights
You have the right to access, correct, delete, restrict, move (portability) and object to the processing of your data, and to withdraw consent at any time. As a parent, you can exercise the same rights for your child's data. You also have the right not to be subject to decisions based solely on automated processing that significantly affect you.
To use these rights, use the parent area in any Way app or email support@webwaygo.com. We reply within one month, extendable by two months for complex requests. We may ask you to confirm the request from your signed-in account.
You can complain to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, postal code 010336, anspdcp@dataprotection.ro, www.dataprotection.ro, or to the authority in your EU country.
12. Deleting data
- A child profile: email support@webwaygo.com. This removes the profile and its activity in all Way apps.
- One app's data: email support@webwaygo.com. Your Way Account stays open.
- The whole Way Account: email support@webwaygo.com, as explained at https://waytube.app/delete-account. This removes all data in all Way apps.
- Subscriptions bought through Apple or Google must also be cancelled in the store. Deleting the account does not cancel them.
13. Security
We encrypt data in transit (HTTPS), store passwords and PINs only as hashes, keep sign-in tokens in the device's secure storage (iOS Keychain, Android encrypted storage), encrypt stored data at rest (database, cache, file storage and backups), and restrict access to the people who need it. If a breach puts your rights at risk, we notify ANSPDCP within 72 hours and tell you without undue delay.
14. Cookies
Our websites use only cookies and browser storage needed for sign-in, security and remembering your language. We measure visits with our own server-side statistics, which run on our servers, set no tracking cookies and share nothing with third parties. Video previews on waytube.app are loaded from YouTube; the YouTube player loads only when you press play.
15. Changes to this policy
We will tell you by email and in the apps at least 30 days before any material change. Where the law requires it, we will ask for your consent again. Past versions are kept at https://webwaygo.com/privacy/archive.
16. Contact
UI Tech Engineering SRL · Str. Cumpenei nr. 4G, et. 1, ap. 2, camera 9, sat Berceni, com. Berceni, jud. Ilfov, Romania · CUI 52540461 · J2025071610008 · support@webwaygo.com
17. Teachers and content reviewers
Teachers and reviewers who check WayMath content use a separate admin area; families never do. For them we process their email address, invite links (valid 48 hours), sign-in records and an audit log of their reviews and notes. Sign-in tokens are stored only as hashes. Invite and sign-in links are emailed from no-reply@waymath.app through Amazon Simple Email Service (AWS, EU Frankfurt). Our legal basis is our legitimate interest in reviewing educational content, art. 6(1)(f). When someone is removed, their email is deleted after 12 months and their audit entries are kept with the email replaced by an anonymous ID. Reviewers have the rights in section 11.