PRIVACY POLICY

Last Updated: April 17, 2025

This Privacy Policy (“Policy”) explains how WOM collects, uses, retains, protects and shares your personal information. It also explains your privacy rights and choices.

This Policy is grouped into these sections:

1. About Us and This Policy
2. Information We Collect & Why We Use It
3. Our Disclosures Of Information To Others
4. How Long We Retain Your Information
5. Use By Minors
6. How To Control Your Privacy
7. Information About Local Privacy Laws.

We encourage you to read this Policy carefully. If you have questions, please contact us.

Section 1: About us and this Policy

WDYR INC. (“WOM”, “we”, “our” or “us”) is the data controller of the personal information collected through the Services (as defined in our Terms of Services, or “Terms”). Capitalized terms that are used but not defined in this Policy are defined in our Terms. The Terms describe how the Services work in general, and establish a contract between you and us governing your use of the Services.

Seeking Customer Service

If you have any questions or feedback about this Policy, email us at support@nomwithwom.com. If you engage with our customer service, you may be asked for identifying information. We rely on this information to assist and address your needs.

Changes to this Policy

Because the Services change often, this Policy may change over time. Anytime we update the Policy, we post a revised version as noted at Last Update above. We will notify you if we intend to materially change the practices described to you at the time of collection, so you have time to review them. If we have your contact information (such as your email or phone number), we will notify you that way. We may also post a temporary notice on the Services, or notify you by other means to the extent required by law.

Check the Last Update date periodically to ensure you’re aware of the current Policy. By using or accessing the Services, you signify that you have read, understand and agree to be bound by this Policy and the Terms.

When this Policy applies

1. This Policy applies to you when you use the Services, effective as of the Last Update. However, some collection and use of information falls outside this Policy:
• Outside services: The Services frame, embed, integrate and link to third-party content, websites, services that are not owned or controlled by WOM (“Outside Materials”). Outside Materials are not part of the Services. This Policy doesn’t apply to any information you may exchange with providers of Outside Materials. Those third parties have their own policies and practices about data. We encourage you to familiarize yourself with their privacy notices and applicable contractual terms.
• For example, many of our restaurant listings frame or link to content on other review sites, like Yelp, Google Maps, and The Infatuation. That content is Outside Materials. For example, wherever you access Yelp content—as framed on our Services or on yelp.com—Yelp’s software controls the data transmitted between you and Yelp.
• Our personnel: If you are a current or former employee or contractor of ours, this Policy does not apply to you. Reach out to your human-resources partner or supervisor with any inquiries about your personal information.
• When we don’t control your information: If we receive your information in our role as a service provider to another business, our agreement with that business governs our use of your information. We will refer any questions or concerns of yours to that business.

Section 2: Information we collect & why we use it

1. We collect certain information when you use the Services. This includes information you provide through the Services, information we collect automatically, and information we receive from other sources. This also includes information you may provide to third-party service providers while using our Services.
2. This section describes, comprehensively, how the Services collect and use your information, and our legal basis for that processing. Under certain data protection laws like GDPR, companies must have a “legal basis”—a valid reason—to process personal information. We rely on different legal bases to process your information for the purposes described in this Policy.

What we collect	How we use it	Why we process it	Legal basis	Retention
Account data – login credentials, permissions, and account act... as creation and access events, account requests and changes).	We collect, analyze, process, and store your account management data.	• To create and maintain an Account at your direction.	To detect and secure accounts from unauthorized activity. Performance of a contract.	Account lifetime, or as applicable law requires
Activity data – areas of the Services you visit, click, scroll...ction events, and when and for how long the activity occurred.	We collect, analyze, process, and store activity data including event timestamps. This data does not identify a person and isn’t tied to any identifiers.	• For fraud prevention. • To improve our Services.	Our interests in understanding use and interaction on our Services. To detect malicious and fraudulent activity. Performance of a contract.	Periodically aggregated and/or deleted in the ordinary course.
Communication data – interactions with or through WOM, via our SMS or email.	We collect, analyze, process, profile and store your communication data.	• To send you relevant marketing and other communications. • To improve our Services.	To respond to and facilitate your communications. Our interest in providing a valid and relevant service to our users and to continue to improve our products and Services.	Account lifetime
Contact information – name, phone number, email and address.	We collect, process and store your contact information.	• To create your Account. • To facilitate invitations and connections with WOM users among your contacts. • To send reminders, updates and/or marketing messages. • To contact you and provide Services related to WOM promotions.	Our interest in validating your identity. With your consent, to connect you with WOM users among your contacts or facilitate invitations to the contacts you select. Performance of a contract. Consent. Marketing messages and alerts are sent if you consent, and cease when you opt-out.	Account lifetime
Device information – IP address, device identifiers, user agent, and geolocation data.	We collect, process and store your device information.	• For fraud prevention. • To administer your account and tailor the Services based on your geography. • To keep the Services secure and to provide a valid and relevant service to our users. Consent. We only collect precise or imprecise geolocation with your consent, and only until you withdraw it.	To detect and prevent unauthorized access and activity. Performance of a contract.	Account lifetime, except precise geolocation data which we do not retain after centering your map view
Payment information – last four digits of your payment card and other verification data.	We collect, process and store your payment information.	• To effect payment for a chargeable service. • To facilitate due process and respond to valid legal process.	To effect your purchases. To comply with our legal obligations with respect to financial reporting and valid legal process.	Per applicable legal requirements
Social Login data – information you provide via your Social Login provider.	We collect, process and store your Social Login data.	Account lifetime, or until you unlink your accounts	Consent. To authenticate you with third-party providers.	Account lifetime, or until you unlink your accounts
User review data – including ratings, written reviews, and other content you post to the Services.	We collect, analyze review data.	• To inform our product roadmap and Services. • To personalize recommendations and curate our listings.	To publish and curate user content at your direction. Our interest in operating, managing, and improving our Services.	Lifetime of the Services, or as applicable law requires

3. Any personal information that WOM obtains from other third-party sources will be processed by WOM in accordance with this Policy and all applicable laws. For example, if we use or transfer any information via Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Security

1. WOM has implemented technical, administrative and physical security measures to protect your information from unauthorized access, use or disclosure. Still, no data transmission online is 100% secure, so we cannot guarantee or warrant the security of any information you provide, and you do so at your own risk.
2. We cannot promise that your information will remain absolutely secure in all circumstances. We are not responsible for the circumvention of any privacy settings or security measures we may provide.

Inviting Contacts

1. When you choose to use our invite feature to recommend WOM to your contacts, we request access to your contact list. We only use this information to:
• Identify contact data associated with existing WOM accounts so you can connect with them.
• Enable you to send invitations to contacts who are not yet on WOM.
2. We do not retain any of your contacts' information after you finish using the invite feature.

Section 3: Our disclosures of information to others

This section describes how and why we exchange personal information with contractors and third parties. It also describes exchanges made for certain purposes, like advertising, legal reasons and consensual direct marketing. We may also disclose deidentified and/or anonymized data for these purposes.

Functional disclosures

1. We contract with software providers and other companies to support the infrastructure, functionality and features of the Services, including payment processing, email and hosting services, software development, data management, and administration of promotions. We refer to them as “contractors.”
2. Contractors may receive information about you, such as activity data, device information, and user review data, as necessary for the provision of their service and support for us. Contractors are not permitted to use information about you for any other purpose. In the past twelve (12) months, the following types of contractors have received:
• Analytics providers, namely Google Analytics and UXCam, to help us understand how WOM is doing, such as which features interest visitors and how long they visit before leaving. Among other data, they may receive your IP address.
• Various hosting Services and data processors to provide the infrastructure of the Services, such as Amazon Web Services, to thwart malicious activity and ensure that traffic is from people, not computers. Among other data, they may receive your IP address.

For personalized ads

1. We share information with advertising partners to make the advertising presented to you more relevant to you. We also market the Services to you through ads facilitated by marketing vendors.
2. For example, we use Google to serve ads on the Services and we may market the Services to you on third party services through Google. Google uses cookies or unique device identifiers, in combination with their own data, to show you ads based on your visits to our webpages and to other sites. You can opt out of the use of the Google cookie by visiting the related Google privacy policy.
3. We try to limit how our third-party advertising technology vendors use information they collect from you. Most providers require us to enter contracts that allow them to optimize their ad services and products. Essentially, they combine any information they may gather about you through our Services with information they receive from their other clients. This helps them target ads to you on behalf of their other clients, not just us.
4. In the past twelve months, we have shared these categories of personal information with third parties to personalize advertising:
• Device Information (including Personal Identifiers)
• Commercial Information
• Internet Activity
• Imprecise Geolocation

With your consent or at your request

1. We may periodically ask for your consent to disclose your information to third parties, typically in connection with promotions, offers or events. Whenever we ask your consent for this reason, we will summarize the purpose and scope of the disclosure. For example, we or our partners may offer discounts to you if you consent to share your contact information. We only exchange information about you with third parties for direct marketing purposes if you opt in, and will only do so until you opt out.

For legal reasons

1. Finally, we may disclose personal information:
• In response to subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us;
• When we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of our company, our users, or others; and in connection with the enforcement of our Terms and other agreements; or
• In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

Section 4: How long we retain your information

1. We retain your information only as long as we need it for the purposes described under Information we collect & how we use it, except when longer retention is required by our compliance policies and efforts toward applicable legal, tax, accounting and regulatory requirements.
2. How long we need information for those purposes varies by category, and even within categories. These retention determinations always consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from its unauthorized use or disclosure and whether we can achieve those purposes without using the personal information.
• For example, we delete some Internet Activity and geolocation data as soon as you exit the Services, whereas we may retain records of your Subscription payments for Services for several years as required by law or contract, such as agreements with our payment processors or under our accounting standards.

Section 5: Use by minors

WOM is for adults. We do not knowingly collect information from anyone under the age of 16, and we do not share or sell information about anyone under 16 without affirmative authorization. If we learn that we have collected information from a person under age 16, we will delete that information as quickly as possible.

1. If you are under 16: Sorry, but please leave the Services. If you’ve already sent us information, please contact us at support@nomwithwom.com first so we can delete it.
2. If you are a parent or guardian of a person under 16 years of age and you believe that person provided information to us, please contact us at support@nomwithwom.com.

Section 6: How to control your privacy

In General

As a user of the Services, you have rights and choices about your personal information. We want you to be in control of your information, so we want to remind you of the following options and tools available to you:

1. Account controls: You can update the personal information in your Account through the Account settings made available on the Services. Any updated information will be reflected in our records and throughout the Services promptly.
2. Marketing opt-out: You may opt-out of any newsletters or promotional communications from us by following the unsubscribe instructions in the communication you receive. We may continue to send you communications regarding the Services, such as notices about administrative updates, transaction reports, and changes to the Services, this Policy or the Terms.
3. Push notifications. You can choose to receive mobile push notifications from our Services. The Services will send you push notifications from time to time in accordance with any notification preferences you have set on your device. If you later decide you no longer want to receive these notifications, you can use your device’s settings to turn them off.
4. Exercising rights: If any of the local privacy laws listed below apply to you, see Requesting Information to exercise your rights.
5. Disallowing location data collection: When you access our App, you may consent to share your geolocation with us so we can customize your experience. While we may receive your device’s precise geolocation (e.g., GPS coordinates), we do not disclose that information to anyone other than contractors who have a need to process or store it on our behalf. You may change your location sharing settings at the device level at any time.
6. Personalized ads: In addition to any choices the Services offer you, there are several ways to exercise choice regarding technologies that are similar to cookies, such as browser storage and plugins (for example, HTML5, IndexedDB, and WebSQL). For example, most email clients have settings that allow you to prevent the automatic downloading of images, including pixel tags, and the automatic connection to the web servers that host those images. Other technologies may be cleared from within your device. You can also download the AppChoices app to opt out on mobile.

International Data Transfers

1. If you reside outside the United States, we transfer information about you for processing in the United States. By providing your information to us, you consent to the processing of the information in the United States. The transfer of this information to the United States is necessary for the performance of our contract for use of the Services.
2. When we transfer personal data subject to GDPR outside of the Services, we use standard contract clauses approved by the EU for this purpose, or another appropriate transfer mechanism. Note that U.S. law is not equivalent to laws in other countries, such as GDPR in Europe or PIPEDA in Canada. As of the Last Update date, the U.S. has not been deemed an ‘adequate’ jurisdiction under GDPR for the purposes of international data transfers. However, the EU and the U.S. are negotiating the terms of an adequacy determination that may go into effect in the years to come.

Section 7: Information about local privacy laws

1. The Services operate from the United States, but this Policy applies worldwide. Our practices generally do not differ based on your location, but your rights and choices depend in part on the law where you live.
2. If any of these local privacy laws apply to you, that section overrides any contrary descriptions elsewhere in the Policy as they relate to you. If you have questions about your rights under other data privacy laws, please contact us. Please note that while we make every effort to honor all privacy requests, we reserve the right to decline requests under laws that do not apply to our business.

Requesting information

Submitting requests

To exercise any rights described in this Policy, please contact us. Your request must:

1. provide sufficient information to identify you and the law that applies to you, such as your name, e-mail address, home or work address, or other information we maintain.
2. not include social security numbers, driver’s license numbers, third-party account numbers, credit or debit card numbers, or health information.

Verifying requests

1. We verify requests by first confirming the source of the request and then by matching the information submitted to the information we maintain. If your request is unclear or we are unable to authenticate your identity, we will respond with direction on how to remedy the deficiencies, in accordance with laws that applies to you.
2. If we cannot verify the identity of the individual making the request (or, where applicable, their agent’s authority), we may deny it, in full or in part.

Responses to requests

We will respond to your request as quickly as we can, taking into account the nature of your request and the volume of pending requests. The content of our response will vary with the nature of your request, but will always respond in accordance with any deadlines or requirements specified by the laws that apply to you.

1. Under certain circumstances, we may be unable to provide responsive personal information. For instance, when disclosure would create a substantial, articulable and unreasonable risk to the security of the information, customers’ account with us, or the security of our systems or networks. We do not disclose passwords or any other non-personal information that enables access to an account.
2. Please understand, however, that we reserve the right to retain an archive of any deleted information, to the extent permitted by law. We may also retain deidentified or aggregate data derived from information about you.

Appealing decisions

Residents of California, Colorado, Connecticut, Virginia and other jurisdictions that provide for an appeal mechanism may appeal a decision we have made regarding their requests by contacting us.