Privacy Policy

Last updated: 30 April 2026

1. Introduction

This Privacy Policy describes how WePredict ("WePredict", "we", "us") collects, uses, shares, and protects personal information when you use wepredict.org or related services (the "Platform"). It applies in addition to our Terms of Service. We are the data fiduciary for the personal information described below.

2. Information we collect

2.1 Information you provide

Account details: email address and mobile number (each verified via one-time password), display name, and password (stored hashed, never in plain text).
Optional profile: city, region, profile photo URL, and any biographical information you choose to add.
Activity: predictions, market suggestions, comments, votes, polls, and circle (community) memberships.
Communications: messages you send to support and content you submit through feedback forms.

2.2 Information we collect automatically

Device and usage: IP address, user-agent (browser and OS), referrer, the pages you view, and timestamps of your activity.
Browser storage: a session token in your browser's local storage to keep you signed in, and a small set of UI preferences. We do not set advertising trackers.
Bot-protection signals: when you complete certain forms we use Cloudflare Turnstile, which may collect device signals to distinguish humans from bots.

2.3 Information from third parties

Sign-in providers: if you sign in using Google, we receive your name, email address, and profile picture from that provider in accordance with the permissions you grant.
Mu balance: Mu balances are maintained by an external attention-currency service and looked up by your verified email address.

3. How we use your information

We use personal information for the following purposes:

To create and authenticate your account and verify your identity (one-time passwords, session tokens).
To operate the Platform — record your predictions, display leaderboards, deliver in-product notifications, and host circle activity.
To communicate with you about security events, account changes, market resolutions, replies to your comments, and (with your consent) product updates.
To moderate the Platform — investigate reports, apply warnings or mutes, and maintain the integrity of markets.
To improve the Platform — analyse aggregate usage, debug errors, and develop new features.
To comply with applicable law, including responding to lawful requests and enforcing our Terms.

4. Legal basis (where applicable)

Where the Digital Personal Data Protection Act, 2023, the EU General Data Protection Regulation, or comparable laws apply, we rely on the following grounds: your consent (provided on signup and where we request specific permissions); the necessity of processing for the performance of our contract with you (operating the Platform); our legitimate interests in keeping the Platform secure, fraud-free, and functional; and our compliance with legal obligations.

We share personal information only as described below:

Service providers who process data on our instructions and under contract — including the Mu attention-currency operator, our email-delivery providers, hosting and content-delivery infrastructure, and Cloudflare Turnstile for bot protection.
Authorised Workspace operators — if you access the Platform through a federated workspace (operated by a third party under licence from us), the operator of that workspace acts as a joint data fiduciary for content and activity within their workspace.
Authorities and legal requests — when we are required to do so by law, court order, or regulatory authority, or when we reasonably believe disclosure is necessary to investigate fraud, protect the rights or safety of users, or enforce our Terms.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, with appropriate safeguards.

We do not sell your personal information, and we do not share it with advertising networks for cross-site behavioural advertising.

6. Data retention

We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations and resolve disputes. Specifically:

Account profile data is retained while your account is active. After deletion, identifiers are removed and remaining records are pseudonymised within thirty (30) days, except where law requires longer.
Predictions, comments, and similar content posted publicly may persist (in pseudonymised form) as part of the historical record of the Platform.
Server logs and security telemetry are retained for up to ninety (90) days unless required for an active investigation or by law.
Email-delivery records (used to detect bounces and abuse) are retained for up to one (1) year.

7. Your rights

Depending on your jurisdiction, you have rights in relation to your personal information. We provide the following to all users:

Access — request a copy of the personal information we hold about you.
Correction — update or correct inaccurate or incomplete information through your profile or by writing to us.
Deletion — request deletion of your account and personal information, subject to legal-retention obligations.
Withdraw consent — opt out of non-essential email categories (account-security and core-account emails are always sent).
Portability — request a machine-readable export of the personal information you have provided to us.
Grievance redressal — write to our Grievance Officer (see §13) for any privacy-related complaint. We will acknowledge within 7 days and respond within 30 days where reasonably possible.

8. Cookies and local storage

We use first-party browser storage to keep you signed in (a JSON Web Token in local storage) and to remember UI preferences. We do not set advertising cookies and do not participate in cross-site tracking. Third parties we engage (such as Cloudflare Turnstile and our sign-in providers) may set their own cookies on their domains as part of providing those services; their cookie practices are governed by their own policies.

9. Children

The Platform is not directed to anyone under eighteen (18) years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information to us, please write to us and we will delete it.

10. International transfers

We may process and store personal information in countries other than your country of residence, including in jurisdictions that may not provide the same level of data protection as your home country. Where applicable, we apply contractual and technical safeguards consistent with applicable data-protection law. Users in the European Economic Area, the United Kingdom, and California: please contact us for additional details on the rights you have in your jurisdiction.

11. How we protect your information

We use technical and organisational measures appropriate to the risk, including TLS encryption in transit, hashed storage of passwords, role-based access controls, and limited internal access on a need-to-know basis. No security control is perfect; you are responsible for keeping your password confidential and not sharing your one-time passwords. If you believe your account has been compromised, write to us immediately at info@wepredict.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-product notice and will take effect on the date stated in the notice. Your continued use of the Platform after the effective date constitutes acceptance.

13. Contact and Grievance Officer

For privacy questions, requests to exercise your rights, or to raise a grievance, write to info@wepredict.com. We will appoint a Grievance Officer in accordance with applicable law; their name, contact email, and postal address will be published on this page once nominated.