1. Introduction

Welcome to wosia ("we," "our," or "us"), a digital legacy locker application operated by Sir Vimbi. wosia allows you to store personal messages, videos, audio recordings, letters, and documents that will be delivered to your chosen recipients after your passing or upon a trigger event you configure.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (Android package: wosia) and other platforms.

By downloading, installing, or using wosia, you agree to the terms of this Privacy Policy. If you do not agree, please uninstall the application and do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

• Account credentials: email address, phone number, password (stored as a hash, never in plain text)
• Profile information: full name, preferred name, date of birth (optional), city, country, short bio
• Legacy content: videos, audio recordings, written letters, PDF documents, photographs, and personal notes
• Recipient information: names, email addresses, phone numbers, and WhatsApp numbers of designated recipients
• Community guardian information: names and contact details of trusted individuals
• Heartbeat check-in data: timestamps of check-in confirmations and your configured check-in interval
• Vault PIN: stored only as a SHA-256 hash with a randomly generated salt — the raw PIN is never stored

2.2 Information Collected Automatically

• Device information: device model, operating system version, unique device identifiers, app version
• Usage data: which features you use, how often you open the app, and general interaction patterns
• Authentication logs: sign-in timestamps, sign-in method, and device identifiers
• Crash reports and error logs to help diagnose and fix problems
• Firebase Analytics: anonymised, aggregated usage data (opt-out available in settings)

2.3 Information from Third Parties

If you sign in using Google Sign-In, we receive your name, email address, and profile picture from Google. We do not request access to your Google Drive, Gmail, Contacts, or any other Google service.

3. How We Use Your Information

We use your information to: create and maintain your account; store, encrypt, and protect your legacy content; deliver your vault content to designated recipients when triggered; send heartbeat check-in reminders; authenticate your identity; detect and prevent fraud and security incidents; analyse usage patterns in aggregate to improve the application; and comply with applicable laws.

4. Data Storage & Security

Your data is stored using Google Firebase services (Firestore, Firebase Storage, Firebase Authentication), hosted on Google Cloud infrastructure with ISO 27001, SOC 2, and SOC 3 certifications.

• All data is encrypted in transit using TLS 1.2 or higher
• Data at rest is encrypted by Google using AES-256
• Your vault PIN is stored only as a SHA-256 hash with a randomly generated salt
• Firestore Security Rules restrict access to your authenticated UID only
• After multiple failed PIN attempts, the vault is locked for increasing time periods (30 seconds, 5 minutes, up to 1 hour)

⚠️ No method of electronic storage or transmission is 100% secure. While we implement industry-standard security measures, we cannot guarantee absolute security of your data.

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties for marketing purposes. We share information only with: trusted service providers (Google Firebase, Brevo for email, Africa's Talking for SMS/WhatsApp); your designated recipients when a delivery trigger is activated; and as required by law or to protect rights and safety.

6. Your Rights & Choices

You may view, export, update, or delete your data at any time through the app. To delete your account, contact us at bryan@wosia.life. Upon deletion, we will delete your personal data within 30 days, subject to legal retention obligations.

7. Children's Privacy

wosia is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we may have collected information from a minor, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or in-app notification at least 14 days before the changes take effect. Your continued use of wosia after the effective date constitutes acceptance of the changes.

1. Agreement to Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you and Sir Vimbi ("we," "us," or "our"), the operator of the wosia Digital Legacy Locker application. By downloading, installing, creating an account in, or otherwise using wosia, you agree to be bound by these Terms and our Privacy Policy. If you do not agree, do not use wosia.

2. Description of Service

wosia provides secure digital storage of personal legacy content (video messages, audio recordings, letters, and documents); a "heartbeat" monitoring system; designation of recipients and community guardians; encrypted vault storage; and multi-channel delivery reminders.

⚠️ WOSIA IS NOT A LEGAL SERVICE. Content stored in wosia does not constitute a valid will, testament, codicil, trust, power of attorney, or any other legal document. We strongly encourage all users to also prepare a formally executed will or estate plan with a qualified attorney.

3. Eligibility

To use wosia, you must be at least 18 years of age, be a human individual (corporate accounts prohibited without express written consent), have legal capacity to enter a binding contract in your jurisdiction, and not be prohibited from using the App under applicable law.

4. Account Registration & Security

You agree to provide accurate information, maintain confidentiality of your credentials and vault PIN, and are responsible for all activity under your account. Notify us immediately at bryan@wosia.life if you suspect unauthorised access. We will never ask for your vault PIN or password via email or phone.

5. Subscription Plans & Payments

Available Plans

• Legacy (Free): 1 video (100 MB), 1 audio (50 MB), 1 document, 1 letter, 1 recipient. Total: 300 MB.
• LegacyPlus (US$5 one-time): 3 videos, 3 audios, 10 documents, 10 letters, 3 recipients, 3 guardians. Total: 600 MB.
• LegacyElite (US$15 one-time): Unlimited content, unlimited recipients and guardians. Priority support.

LegacyPlus and LegacyElite are one-time purchases — no recurring subscription fees. Purchases processed through Google Play or Apple App Store. All refund requests must be submitted through the relevant app store.

6. User Content

You retain full ownership of all content you upload or create in wosia. By uploading content, you grant Sir Vimbi a limited, non-exclusive licence to store, process, encrypt, and transmit your content solely to provide the service. You are solely responsible for all content you store and must not store content that is unlawful, harmful, threatening, or that infringes any third-party rights.

7. Heartbeat System & Content Delivery

The heartbeat system monitors whether you check in within your configured interval (7–90 days). If you miss your deadline, an escalation sequence of reminders begins before delivery is initiated. You may check in via the app, by replying ALIVE to SMS reminders, or by emailing alivestatus@wosia.app.

⚠️ We cannot guarantee the timeliness of content delivery. Delivery depends on recipient contact information accuracy, third-party service availability, and system availability. We are not liable for delayed, undelivered, or misdirected content.

8. Disclaimers of Warranties

WOSIA IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW. We expressly disclaim all warranties including merchantability, fitness for a particular purpose, uninterrupted service, or that content will be successfully delivered to all intended recipients.

Wosia does not provide legal, financial, medical, or professional advice of any kind. Nothing in the service constitutes or should be construed as professional advice.

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SIR VIMBI SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES. Our total cumulative liability for all claims shall not exceed the greater of: (a) the total amount you have paid us in the preceding 12 months; or (b) US$50.

10. Termination

You may terminate your account at any time by contacting bryan@wosia.life. We will delete your account and vault content within 30 days. We reserve the right to suspend or terminate your account for violation of these Terms, extended inactivity (3 years), or legal requirements.

11. Governing Law & Dispute Resolution

These Terms are governed by the laws of Kenya. Disputes shall be resolved informally by contacting us first. If not resolved within 30 days, disputes shall be submitted to binding arbitration in Nairobi, Kenya, in accordance with the Kenyan Arbitration Act.