WAI360 is an indoor wayfinding assistant — available as a mobile app — that helps you find your way around malls, hospitals, airports, and similar venues by talking or typing to an AI assistant. WAI360 is developed and operated by NavInMaps Pte. Ltd. ("NavInMaps," "we," "us," or "our"), a company based in Singapore.
This policy explains what information we collect through the WAI360 app and website, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies wherever WAI360 is distributed, including the Apple App Store and Google Play.
To create a WAI360 account you provide your name, phone number (with country code), and a password. We never store your password in readable form — it is stored as a one-way cryptographic hash. We do not currently require or use an email address for registration.
We use a third-party SMS gateway to send one-time passcodes (OTPs) to verify your phone number when you register, reset your password, change your phone number, or delete your account. Your phone number and the OTP message are transmitted to this provider for the sole purpose of delivering the SMS. OTP codes themselves are held only briefly in server memory (five minutes) and are never written to our database.
When you open the app, with your permission, WAI360 requests your device's approximate location once, at launch, and sends it to our servers to look up which building or venue you're near — so we can automatically select it for you and show you the right content straight away. We do not store this location, and we do not use it to track your movements or build a location history.
Location permission is optional: if you decline it or your device doesn't provide a location, WAI360 still works — you simply pick your building from a list yourself.
When you chat with the assistant — by typing or by speaking — we store:
You can use the WAI360 assistant without signing in. Conversations started this way are still stored on our servers to operate the service, but are not linked to an account identity.
If you leave a review of a shop or tenant, we store your star rating, written comment, and any photos you attach. Published reviews display your name alongside the rating and comment. Photos you upload are stored on our object storage and are reachable by anyone who has the image's direct link.
WAI360 does not track your real-time position once you're inside a building. Indoor GPS isn't reliable, so instead of tracking your device, the assistant asks you to describe where you are in words (e.g. "I'm at the food court on Level 2") and matches that to the venue's own floor-plan data. The one-time location check described above is used only to select your building at launch — not to follow you around inside it.
We also do not collect advertising identifiers, do not access your contacts or photo library beyond the specific photo you choose to attach to a review, and do not use third-party social login.
Our servers automatically log standard technical information needed to operate and secure the service (such as request and error events). We use an error-monitoring tool configured to minimize the personal information it captures, and it is only active on our live production systems.
When you speak to WAI360, your voice recording and its transcript are sent to third-party AI service providers that perform speech-to-text transcription, generate the assistant's spoken and written replies, and convert replies back into speech. These providers process your message content to return a result to WAI360 — they act on our behalf as service providers, not as independent owners of your data.
We also keep a copy of your voice recordings on our own servers for troubleshooting — for example, to tell whether something went wrong because of a transcription error or because of the audio itself. We don't use these recordings for anything beyond that, such as advertising, profiling, or building a voice profile of you.
We currently retain the audio recordings you submit for as long as your account and conversation history exist — we do not yet apply an automatic deletion schedule to voice recordings. You can request deletion at any time (see "Your rights and choices" below), and we are working toward a shorter, automatic retention window for raw audio.
We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing purposes. We share information only with service providers who process it on our behalf, under contract, to help us run WAI360:
| Provider type | What they receive | Purpose |
|---|---|---|
| SMS gateway | Phone number, OTP message | Delivering verification codes |
| AI language, speech-to-text & text-to-speech providers | Message text, voice recordings | Understanding requests and generating responses |
| Object storage | Review photos | Storing and serving uploaded images |
| Error-monitoring tool | Technical error/crash data (PII-minimized) | Diagnosing and fixing faults |
We may also disclose information where required to comply with applicable law, regulation, legal process, or a lawful government request, or to protect the rights, safety, and property of NavInMaps, our users, or the public.
Reviews you submit — your name, star rating, written comment, and any photos — are shown publicly to other users browsing that venue or tenant. Do not include information in a review that you are not comfortable making public.
| Data | Retention |
|---|---|
| Account details (name, phone number, password hash) | Until you delete your account |
| Conversation text & voice recordings | Until you delete your account — no automatic expiry currently applies |
| Reviews & photos | Until you delete the review |
| Location sent to select your building | Not stored — used for a single lookup, then discarded |
| OTP codes | 5 minutes, held in memory only, never persisted |
Subject to Singapore's Personal Data Protection Act (PDPA) and other applicable law, you have the right to:
You can also turn location or microphone access on or off at any time in your device settings — WAI360 will keep working, just with manual building selection and typed input instead.
To exercise any of these rights, use the in-app account deletion flow (Profile → Delete Account, verified by SMS OTP) or contact us at contact@navinmaps.com. We will respond within a reasonable time and in accordance with the PDPA.
When you delete your account, we remove the personal identifiers attached to it — your name, phone number, email, and password. Your account will no longer be able to sign in, and your name will no longer be displayed on your past reviews.
Some content you created — such as past conversation messages and review text — may remain stored in a de-identified form after your account is deleted, since it is not automatically erased alongside your account identifiers. If you would like specific past conversations or reviews permanently erased rather than de-identified, contact us at contact@navinmaps.com and we will action the request manually.
We use technical and organizational safeguards to protect your information, including encrypted transmission between the app and our servers, one-way hashing of passwords, and access controls on our production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Some of our service providers — including our AI language, speech-to-text, and text-to-speech providers — may process data on servers located outside Singapore. Where this occurs, we take steps to ensure the provider offers a comparable standard of protection to your personal data as required under the PDPA.
The WAI360 app may request the following device permissions. You can decline any of them; the related feature simply adjusts or won't be available.
WAI360 is not directed at children, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us at contact@navinmaps.com and we will take appropriate steps to remove it.
We may update this policy from time to time to reflect changes in our practices or for legal or operational reasons. We will update the "Effective" date at the top of this page, and where changes are material, we will provide additional notice in the app.
If you have questions, concerns, or requests regarding this policy or your personal data, contact:
NavInMaps Pte. Ltd.
Email:
contact@navinmaps.com
You may also lodge a complaint with Singapore's Personal Data Protection Commission (PDPC) if you believe your data protection rights have been infringed.
