Workflow & Automation · whacka.appWhacka
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Apps and code generated by the Service are created using AI models (including third-party AI services). You retain ownership of the ideas and descriptions you provide. You are granted a license to use, modify, and distribute the AI-generated output for your apps. We do not guarantee the accuracy, functionality, or safety of AI-generated code. You are…”
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Retaining all prompt/output logs indefinitely (until account deletion + 30 days) may conflict with GDPR's storage limitation principle (Art. 5(1)(e)), which requires data be kept 'no longer than necessary.' The stated purposes (debugging, abuse prevention) may not justify indefinite retention. EEA users have a colorable objection to this retention period.
Restricts the sale of personal information and enumerates the exhaustive list of permitted data-sharing recipients (Supabase, Stripe, AI providers, Cloudflare, Resend, Google OAuth, law enforcement), establishing both a prohibition and the permissible exceptions for third-party data disclosure.
Grants users the right to opt out of the arbitration agreement by sending timely written notice within 30 days of first acceptance, and specifies the required content of that notice and the limited effect of opting out.
Scores derived from 19 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Whacka's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
- Data handling is conditional — 3 privacy or retention clauses warrant review before using Whacka at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Whacka's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 42 verified, verbatim-cited findings below — read the citations.
Based on 55 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 24 citationsLast captured 2026-08-10
- Privacy PolicyVerified - read in full - 20 citationsLast captured 2026-08-07
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Affirms user retention of ownership over created content while granting Whacka a non-exclusive, worldwide, royalty-free license to host, display, and distribute published apps, and restricts publication of illegal or harmful content with a reserved right of removal.
" You retain ownership of content you create, upload, or publish through the Service (including app descriptions, comments, and profile information). By publishing an app on Whacka, you grant us a non-exclusive, worldwide, royalty-free lice..."
The no-training commitment is a contractual representation by Whacka about its own conduct. The downstream protection relies on sub-processor DPAs. If a sub-processor's API policy changes, Whacka's representation may become inaccurate unless Whacka updates its sub-processor contracts. No contractual cure mechanism for users is described.
"We do not train our own AI models on your data. Our AI sub-processors process prompts under their respective API-tier data usage policies, which do not use API inputs for model training. See their DPAs linked at whacka.app/legal/subprocesso..."
Defines the data controller (Promnes Lane Technology Inc d/b/a Whacka), the scope of the policy (collection, use, protection of information), and establishes the legal identity and contact mechanism for privacy inquiries, creating foundational definitional framing for all subsequent obligations.
" This Privacy Policy describes how Promnes Lane Technology Inc, doing business as Whacka (“we,” “us,” or “our”), collects, uses, and protects your information when you use our service at whacka.app (the “Service”). Promnes Lane Technology ..."
Retaining all prompt/output logs indefinitely (until account deletion + 30 days) may conflict with GDPR's storage limitation principle (Art. 5(1)(e)), which requires data be kept 'no longer than necessary.' The stated purposes (debugging, abuse prevention) may not justify indefinite retention. EEA users have a colorable objection to this retention period.
"Account data is retained for the duration of your active account plus 30 days after deletion. AI generation logs (prompts and outputs) are retained for the duration of the account, supporting debugging and abuse prevention. Payment record..."
Disclaims all warranties by offering the service 'as is', denies guarantees of uptime or error-free operation, and excludes liability for damages from AI-generated apps — limiting Whacka's legal exposure to users.
" The Service is provided “as is” without warranties of any kind. We do not guarantee uptime, availability, or error-free operation. We are not liable for any damages arising from the use of AI-generated apps."
Identifies the specific third-party AI subprocessors (Anthropic, OpenAI, Google) that receive user prompts for app generation, discloses that prompts are transmitted to these entities, and references the subprocessor list URL, establishing the data-sharing arrangement and the applicable processing governance.
" Your app descriptions and prompts are sent to third-party AI services (Anthropic, OpenAI, Google) to generate application code, images, and audio. We do not train our own AI models on your data. Our AI sub-processors process prompts under..."
Contains multiple operative general provisions: a severability clause modifying unenforceable terms to the minimum necessary extent; an entire-agreement clause incorporating the Privacy Policy and Data Processing Agreement and superseding prior communications; and an asymmetric assignment restriction permitting Whacka to freely assign the Terms while prohibiting user assignment or transfer.
" Severability: If any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect, and the unenforceable provision shall be modified to the minimum extent necessary to make it enforceable. Entir..."
Clause A states that if the class action waiver is unenforceable, the entire Dispute resolution section is void, which directly contradicts Clause B's general principle that unenforceable provisions should be modified and the remaining provisions remain in full force and effect.
" If the class action waiver is found to be unenforceable, the entire Dispute resolution section shall be void; otherwise, the remaining provisions remain in effect."
" Severability: If any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect, and the unenforceable provision shall be modified to the minimum extent necessary to make it enforceable. Entire agreement: These Terms, together with our Privacy Policy and Data Processing Agreement, constitute the entire agreement between you and Whacka regarding the Service and supersede all prior or contemporaneous communications. Assignment: We may assign or transfer these Terms, in whole or in part, without restriction. You may not assign or transfer these Terms or any rights or obligations under them without our prior written consent; any unauthorized assignment is void. Force majeure: Neither party shall be liable for any failure or delay in performance due to causes beyond its reasonable control, including acts of God, war, terrorism, civil unrest, government action, labor disputes, internet or telecommunications failures, or natural disasters. Waiver: Our failure to enforce any provision of these Terms shall not constitute a waiver of that provision or our right to enforce it in the future. Notice: We may provide notices to you by email (to the address associated with your account) or through in-app notification, and you agree such notices satisfy any legal notice requirement. You may provide notices to us at [email protected] . No third-party beneficiaries: These Terms do not create any third-party beneficiary rights. Survival: Sections that by their nature should survive termination (including intellectual property, disclaimers, limitation of liability, indemnification, and dispute resolution) shall survive termination of these Terms."
Within one documentClause A states that if the class action waiver is unenforceable, the entire Dispute resolution section is void, which directly contradicts Clause B's general principle that unenforceable provisions should be modified and the remaining provisions remain in full force and effect.
" If the class action waiver is found to be unenforceable, the entire Dispute resolution section shall be void; otherwise, the remaining provisions remain in effect."
" Severability: If any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect, and the unenforceable provision shall be modified to the minimum extent necessary to make it enforceable. Entire agreement: These Terms, together with our Privacy Policy and Data Processing Agreement, constitute the entire agreement between you and Whacka regarding the Service and supersede all prior or contemporaneous communications. Assignment: We may assign or transfer these Terms, in whole or in part, without restriction. You may not assign or transfer these Terms or any rights or obligations under them without our prior written consent; any unauthorized assignment is void. Force majeure: Neither party shall be liable for any failure or delay in performance due to causes beyond its reasonable control, including acts of God, war, terrorism, civil unrest, government action, labor disputes, internet or telecommunications failures, or natural disasters. Waiver: Our failure to enforce any provision of these Terms shall not constitute a waiver of that provision or our right to enforce it in the future. Notice: We may provide notices to you by email (to the address associated with your account) or through in-app notification, and you agree such notices satisfy any legal notice requirement. You may provide notices to us at [email protected] . No third-party beneficiaries: These Terms do not create any third-party beneficiary rights. Survival: Sections that by their nature should survive termination (including intellectual property, disclaimers, limitation of liability, indemnification, and dispute resolution) shall survive termination of these Terms."
Within one documentClause A states that if the class action waiver is unenforceable, the entire Dispute resolution section is void, which directly contradicts Clause B's general principle that unenforceable provisions should be modified and the remaining provisions remain in full force and effect.
" If the class action waiver is found to be unenforceable, the entire Dispute resolution section shall be void; otherwise, the remaining provisions remain in effect."
" Severability: If any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect, and the unenforceable provision shall be modified to the minimum extent necessary to make it enforceable. Entire agreement: These Terms, together with our Privacy Policy and Data Processing Agreement, constitute the entire agreement between you and Whacka regarding the Service and supersede all prior or contemporaneous communications. Assignment: We may assign or transfer these Terms, in whole or in part, without restriction. You may not assign or transfer these Terms or any rights or obligations under them without our prior written consent; any unauthorized assignment is void. Force majeure: Neither party shall be liable for any failure or delay in performance due to causes beyond its reasonable control, including acts of God, war, terrorism, civil unrest, government action, labor disputes, internet or telecommunications failures, or natural disasters. Waiver: Our failure to enforce any provision of these Terms shall not constitute a waiver of that provision or our right to enforce it in the future. Notice: We may provide notices to you by email (to the address associated with your account) or through in-app notification, and you agree such notices satisfy any legal notice requirement. You may provide notices to us at [email protected] . No third-party beneficiaries: These Terms do not create any third-party beneficiary rights. Survival: Sections that by their nature should survive termination (including intellectual property, disclaimers, limitation of liability, indemnification, and dispute resolution) shall survive termination of these Terms."
Within one documentClause A states that if the class action waiver is unenforceable, the entire Dispute resolution section is void, which directly contradicts Clause B's general principle that unenforceable provisions should be modified and the remaining provisions remain in full force and effect.
" If the class action waiver is found to be unenforceable, the entire Dispute resolution section shall be void; otherwise, the remaining provisions remain in effect."
" Severability: If any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect, and the unenforceable provision shall be modified to the minimum extent necessary to make it enforceable. Entire agreement: These Terms, together with our Privacy Policy and Data Processing Agreement, constitute the entire agreement between you and Whacka regarding the Service and supersede all prior or contemporaneous communications. Assignment: We may assign or transfer these Terms, in whole or in part, without restriction. You may not assign or transfer these Terms or any rights or obligations under them without our prior written consent; any unauthorized assignment is void. Force majeure: Neither party shall be liable for any failure or delay in performance due to causes beyond its reasonable control, including acts of God, war, terrorism, civil unrest, government action, labor disputes, internet or telecommunications failures, or natural disasters. Waiver: Our failure to enforce any provision of these Terms shall not constitute a waiver of that provision or our right to enforce it in the future. Notice: We may provide notices to you by email (to the address associated with your account) or through in-app notification, and you agree such notices satisfy any legal notice requirement. You may provide notices to us at [email protected] . No third-party beneficiaries: These Terms do not create any third-party beneficiary rights. Survival: Sections that by their nature should survive termination (including intellectual property, disclaimers, limitation of liability, indemnification, and dispute resolution) shall survive termination of these Terms."
Within one documentClause A states that if the class action waiver is unenforceable, the entire Dispute resolution section is void, which directly contradicts Clause B's general principle that unenforceable provisions should be modified and the remaining provisions remain in full force and effect.
" If the class action waiver is found to be unenforceable, the entire Dispute resolution section shall be void; otherwise, the remaining provisions remain in effect."
" Severability: If any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect, and the unenforceable provision shall be modified to the minimum extent necessary to make it enforceable. Entire agreement: These Terms, together with our Privacy Policy and Data Processing Agreement, constitute the entire agreement between you and Whacka regarding the Service and supersede all prior or contemporaneous communications. Assignment: We may assign or transfer these Terms, in whole or in part, without restriction. You may not assign or transfer these Terms or any rights or obligations under them without our prior written consent; any unauthorized assignment is void. Force majeure: Neither party shall be liable for any failure or delay in performance due to causes beyond its reasonable control, including acts of God, war, terrorism, civil unrest, government action, labor disputes, internet or telecommunications failures, or natural disasters. Waiver: Our failure to enforce any provision of these Terms shall not constitute a waiver of that provision or our right to enforce it in the future. Notice: We may provide notices to you by email (to the address associated with your account) or through in-app notification, and you agree such notices satisfy any legal notice requirement. You may provide notices to us at [email protected] . No third-party beneficiaries: These Terms do not create any third-party beneficiary rights. Survival: Sections that by their nature should survive termination (including intellectual property, disclaimers, limitation of liability, indemnification, and dispute resolution) shall survive termination of these Terms."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"Account data is retained for the duration of your active account plus 30 days after deletion. AI generation logs (prompts and outputs) are retained for the duration of the account, supporting debugging and abuse prevention. Payment records are retained for 7 years as required by US tax law. Published apps and their associated App Data may be retained for up to 90 days after account deletion to prevent disruption to end users, then deleted. Push notification tokens are deleted immediately upon opt-out or account deletion."
Retaining all prompt/output logs indefinitely (until account deletion + 30 days) may conflict with GDPR's storage limitation principle (Art. 5(1)(e)), which requires data be kept 'no longer than necessary.' The stated purposes (debugging, abuse prevention) may not justify indefinite retention. EEA users have a colorable objection to this retention period.
AI-generated interpretation, not legal advice.
" Apps and code generated by the Service are created using AI models (including third-party AI services). You retain ownership of the ideas and descriptions you provide. You are granted a license to use, modify, and distribute the AI-generated output for your apps. We do not guarantee the accuracy, functionality, or safety of AI-generated code. You are responsible for reviewing and testing any generated content before use. AI-generated content may not be unique; similar outputs may be generated for other users with similar inputs."
Allocates ownership of user-provided prompts to the user, grants a license to use, modify, and distribute AI-generated output, disclaims guarantees of accuracy or uniqueness of outputs, and places review responsibility on users — collectively defining rights and obligations over AI-generated content.
AI-generated interpretation, not legal advice.
" Published apps may collect and store data from their end users (“App Data”). App Data is stored in our database and is accessible to the app owner. App owners are responsible for informing their end users about data collection within their published apps."
Defines 'App Data' collected by published apps, specifies that it is stored in the controller's database and accessible to app owners, and assigns responsibility to app owners for end-user disclosure, creating a layered data controller/processor obligation structure.
AI-generated interpretation, not legal advice.
" When you publish an app, its name, description, icon, and your profile (name, handle, avatar) are publicly visible. Social interactions (likes, comments) are visible to other users. Your follower/following counts and total likes are publicly visible on your profile."
Establishes that app owners bear responsibility for informing their end users about data collection within published apps, creating a compliance obligation on app-owner users and defining the controller's role with respect to App Data stored in its database.
AI-generated interpretation, not legal advice.
" The Service uses a credit-based system for AI app generation. Credits may be obtained through subscription plans or one-time purchases. Payments are processed through Stripe. By making a purchase, you also agree to Stripe’s terms of service. Credits are non-transferable and non-refundable unless required by law. We reserve the right to modify pricing and credit allocations with reasonable notice."
Describes the credit-based monetization system, payment processing through Stripe with incorporation of Stripe's terms, and establishes that credits are non-transferable and non-refundable (with a statutory exception), and reserves Whacka's right to modify pricing — creating financial obligations and restrictions for users.
AI-generated interpretation, not legal advice.
" We do not sell your personal information. We share data only with: Supabase: database hosting and authentication. Stripe: payment processing. AI providers (Anthropic, OpenAI, Google): to process app generation and runtime requests. Cloudflare: edge proxy, static asset delivery, and DDoS protection. Resend: transactional email delivery. Google OAuth: if you choose to sign in with Google. Law enforcement: when required by law or to protect rights and safety."
Restricts the sale of personal information and enumerates the exhaustive list of permitted data-sharing recipients (Supabase, Stripe, AI providers, Cloudflare, Resend, Google OAuth, law enforcement), establishing both a prohibition and the permissible exceptions for third-party data disclosure.
AI-generated interpretation, not legal advice.
" Usage data: pages visited, features used, app generation requests. Device information: browser type, operating system, screen size. Push notification tokens: if you opt in to push notifications."
Enumerates automatically collected data categories (usage data, device information, push notification tokens), defining the scope of passive data collection and associated processing activities including opt-in notification token handling.
AI-generated interpretation, not legal advice.
" We use your information to: Provide and maintain the Service. Process app generation requests using AI services. Process payments and manage subscriptions. Send transactional emails (account verification, password reset). Send push notifications (if opted in). Display your profile and published apps to other users. Enable social features (likes, comments, follows, bookmarks). Improve the Service and develop new features. Prevent fraud and enforce our Terms of Service."
Enumerates the specific purposes for which the controller uses personal data—including AI service processing, payment processing, fraud prevention, and service improvement—establishing the controller's binding commitments as to lawful processing purposes and creating accountability for use limitation.
AI-generated interpretation, not legal advice.
" Published apps are accessible via subdomains (e.g., yourapp.whacka.app). We reserve the right to reclaim or reassign subdomains at our discretion. You are responsible for the content and behavior of apps you publish. End users of your published apps are subject to these Terms as well."
Establishes that published apps are hosted on subdomains subject to Whacka's discretion to reclaim or reassign, places responsibility for app content and behavior on the publishing user, and extends these Terms to end users of published apps.
AI-generated interpretation, not legal advice.
" We may suspend or terminate your account for violations of these Terms. You may delete your account at any time. Upon termination, your published apps may be taken offline."
Establishes the procedure for account termination by Whacka for Terms violations, the user's right to self-delete, and the consequence that published apps may be taken offline upon termination — defining enforcement mechanics and post-termination effects.
AI-generated interpretation, not legal advice.
" We may update these Terms from time to time. We will notify users of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance."
Establishes Whacka's right to unilaterally update the Terms, sets a notification obligation for significant changes via email or in-app notice, and deems continued use of the Service as acceptance of revised Terms, creating a binding amendment mechanism affecting user rights.
AI-generated interpretation, not legal advice.
" The Service is provided “as is” without warranties of any kind. We do not guarantee uptime, availability, or error-free operation. We are not liable for any damages arising from the use of AI-generated apps."
Disclaims all warranties by offering the service 'as is', denies guarantees of uptime or error-free operation, and excludes liability for damages from AI-generated apps — limiting Whacka's legal exposure to users.
AI-generated interpretation, not legal advice.
" You agree to indemnify, defend, and hold harmless Whacka, its officers, directors, and employees from any claims, damages, losses, or expenses (including reasonable attorneys’ fees) arising from: (a) your use of the Service; (b) your published apps and any data collected through them; (c) your violation of these Terms or any applicable law; or (d) your infringement of any third-party rights."
Obligates the user to indemnify, defend, and hold harmless Whacka and its officers from claims arising from service use, published apps, data collection, Terms violations, and third-party IP infringement — creating a broad indemnification obligation on the user.
AI-generated interpretation, not legal advice.
" Your app descriptions and prompts are sent to third-party AI services (Anthropic, OpenAI, Google) to generate application code, images, and audio. We do not train our own AI models on your data. Our AI sub-processors process prompts under their respective API-tier data usage policies, which do not use API inputs for model training. See their DPAs linked at whacka.app/legal/subprocessors . Third-party AI providers may have their own data processing policies."
Identifies the specific third-party AI subprocessors (Anthropic, OpenAI, Google) that receive user prompts for app generation, discloses that prompts are transmitted to these entities, and references the subprocessor list URL, establishing the data-sharing arrangement and the applicable processing governance.
AI-generated interpretation, not legal advice.
" You may opt out of this arbitration agreement by sending written notice to [email protected] within thirty (30) days of first accepting these Terms. Your notice must include your name, account email, and a clear statement that you wish to opt out of arbitration. Opting out does not affect any other provision of these Terms."
Grants users the right to opt out of the arbitration agreement by sending timely written notice within 30 days of first acceptance, and specifies the required content of that notice and the limited effect of opting out.
AI-generated interpretation, not legal advice.
" If 50 or more similar arbitration demands are filed by or with the assistance of the same or coordinated counsel against Whacka within a 90-day period (a “Mass Filing”), the following procedure applies notwithstanding the AAA Consumer Arbitration Rules: Claims are grouped into batches of up to 50 claimants. The parties select up to 5 representative (“bellwether”) cases per batch to proceed first; the remaining claims in each batch are stayed. After the bellwether cases conclude, the parties shall participate in good-faith mediation for the remaining claims using the bellwether outcomes as guidance. Statutes of limitations are tolled for claims stayed under this procedure. The party initiating a Mass Filing is responsible for any filing fees in excess of those required under AAA rules for a single individual claim."
Establishes a specific procedural mechanism for handling mass filings of 50 or more coordinated arbitration demands within 90 days, including batching of claims, bellwether case selection, and mandatory mediation after bellwether resolution, overriding standard AAA Consumer Arbitration Rules.
AI-generated interpretation, not legal advice.
" You and Whacka agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Service (a “Dispute”) shall be resolved exclusively through final and binding individual arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules. Arbitration shall be conducted in New York, New York, or remotely at the claimant’s option. The arbitrator’s decision shall be final and may be entered as a judgment in any court of competent jurisdiction."
Imposes a binding obligation on both parties to resolve disputes exclusively through individual arbitration administered by the AAA in New York or remotely, specifying the finality and enforceability of the arbitrator's decision as a court judgment.
AI-generated interpretation, not legal advice.
" These Terms, and any Dispute, are governed by the laws of the State of Delaware, United States, without regard to its conflict of law provisions. For matters not subject to arbitration, exclusive jurisdiction and venue lie in the state and federal courts located in Wilmington, Delaware."
Designates Delaware law as the governing law for the Terms and all disputes, and establishes exclusive jurisdiction and venue in Wilmington, Delaware courts for matters not subject to arbitration, binding both parties to that forum.
AI-generated interpretation, not legal advice.
Common questions about Whacka's policies
- Does Whacka train its AI models on your data?
- No training on your content by default — based on 1 verified finding from Whacka's published policy. Informational only, not legal advice.
- Who owns the content you create with Whacka?
- You own outputs — with license carve-outs — based on 1 verified finding from Whacka's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Whacka's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
16 verified clausesClauses in Whacka's policies that work in your favour — commitments the platform made to you.
- Privacy & data use
“You have the right to: Access the personal data we hold about you. Correct inaccurate personal data. Request deletion of your account and personal data. Opt out of non-essential communications. Withdraw consent for push notifications. Additional rights f…”
Enumerates data subject rights including access, correction, deletion, opt-out, consent withdrawal, and (for EEA users) portability, restriction of processing, and objection to legitimate-interests processing, establishi…
📍 § 11 (Your rights)Jump to exact text → - Privacy & data use
“If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases: Performance of a contract (Art. 6(1)(b) GDPR): to provide the Service, process app generation requests, manage your account, and process pay…”
Enumerates the GDPR legal bases (Art. 6(1)(b), (f), (a), and legal obligation) for processing EEA users' personal data, including the right to withdraw consent and the balancing test for legitimate interests, defining th…
📍 § 3 (Legal basis for processing (EEA users))Jump to exact text → - Audit rights, DPA & residency
“Your data is stored and processed in the United States (AWS us-west-2, Oregon). If you are located outside the United States, your personal data is transferred to the US. For transfers from the EEA, we rely on Standard Contractual Clauses (SCCs) approved by t…”
Discloses US data residency (AWS us-west-2), mandates reliance on Standard Contractual Clauses (SCCs, Module 2) as the legal mechanism for EEA-to-US transfers, requires SCCs to be annexed to the DPA, and confirms sub-pro…
📍 § 14 (International data transfers)Jump to exact text → - Moderation & enforcement
“If you believe your content was removed in error, you may submit a counter-notice to [email protected] containing: Identification of the removed material and the location at which it appeared before removal. A statement, under penalty of perjury, of your goo…”
Defines the procedure and required content for submitting a DMCA counter-notice, including identification of removed material, perjury statement, consent to jurisdiction, and signature — establishing the user's procedura…
📍 Terms of Service › “Counter-notification”Jump to exact text → - Audit rights, DPA & residency
“By publishing an app on Whacka, you acknowledge that you are the data controller for any personal data collected through your published app. Whacka acts as a data processor on your behalf, subject to our Data Processing Agreement at whacka.app/legal/dpa . Yo…”
Defines the data controller/processor relationship between the publishing user and Whacka, incorporates the DPA by reference, obligates users to ensure compliance with data protection laws including end-user privacy noti…
📍 § 6 (Data processing and privacy)Jump to exact text → - Prompt ownership
“You retain ownership of content you create, upload, or publish through the Service (including app descriptions, comments, and profile information). By publishing an app on Whacka, you grant us a non-exclusive, worldwide, royalty-free license to host, display,…”
Affirms user retention of ownership over created content while granting Whacka a non-exclusive, worldwide, royalty-free license to host, display, and distribute published apps, and restricts publication of illegal or har…
📍 § 4 (User-generated content)Jump to exact text →
+ 10 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
3 verified clausesWhat Whacka requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“You agree not to: Use the Service to generate malicious, harmful, or illegal applications. Attempt to circumvent usage limits or credit systems. Scrape, reverse-engineer, or interfere with the Service. Impersonate others or misrepresent your affiliation.…”
Enumerates specific prohibited activities including generating malicious applications, circumventing usage limits, scraping or reverse-engineering the service, impersonation, harassment, and IP infringement — imposing co…
📍 § 8 (Prohibited uses)Jump to exact text → - Moderation & enforcement
“You must provide accurate information when creating an account. You are responsible for maintaining the security of your account credentials. You must be at least 13 years of age to use the Service. One person may not maintain more than one account.”
Imposes obligations on users to provide accurate registration information, secure their credentials, meet a minimum age requirement of 13, and limit themselves to one account, establishing enforceable user conduct requir…
📍 § 2 (Account registration)Jump to exact text → - Moderation & enforcement
“The Whacka platform, brand, design, and underlying technology are owned by us. You may not use our trademarks without prior written permission.”
Asserts Whacka's ownership of the platform, brand, design, and underlying technology, and restricts users from using Whacka's trademarks without prior written permission — establishing IP ownership boundaries.
📍 § 9 (Intellectual property)Jump to exact text →
What the policies actually cover
12 topics- Product telemetry & usage tracking2 clauses
- Advertising & tracking1 protective2 clauses
- Children's data1 protective1 clause
- Data shared with other AI providers1 protective3 clauses
- Does not train on your content1 protective1 clause
- Arbitration & class-action waiver3 protective6 clauses
- Damages & liability cap1 clause
- Indemnity direction1 clause
- Terms can change at any time1 protective2 clauses
- Deletion rights & post-termination survival2 clauses
- Attribution requirements1 clause
- Conduct restrictions1 obligation1 clause
21 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, § 10 (Data retention) addresses how long content is retained, and the Privacy Policy, § 4 (AI processing) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, § 3 (AI-generated content) describes rights the platform takes in user content, and the Privacy Policy, § 5 (Data sharing) describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“If the class action waiver is found to be unenforceable, the entire Dispute resolution section shall be void; otherwise, the remaining provisions remain in effect.”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Before initiating arbitration, the parties agree to attempt informal resolution by sending written notice describing the Dispute to [email protected] and engaging in good-faith discussions for at least 30 days.”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“These Terms, and any Dispute, are governed by the laws of the State of Delaware, United States, without regard to its conflict of law provisions. For matters not subject to arbitration, exclusive jurisdiction and venue lie in the state and federal courts located in Wilmington, Delaware.”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“You may opt out of this arbitration agreement by sending written notice to [email protected] within thirty (30) days of first accepting these Terms. Your notice must include your name, account email, and a clear statement that you wish to opt out of arbitration. Opting out does not affect any other provision of these Terms.”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“If 50 or more similar arbitration demands are filed by or with the assistance of the same or coordinated counsel against Whacka within a 90-day period (a “Mass Filing”), the following procedure applies notwithstanding the AAA Consumer Arbitration Rules: Claims are grouped into batches of up to 50 claimants. The parties select up to 5 representative (“bellwether”) cases per batch to proceed first; the remaining cla...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | governing law disputes | conditional | MEDIUM | 31 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 8 |
| All applicable tiers | tier differences | worsens | HIGH | 2 |
| Free | data retention | conditional | MEDIUM | 6 |
| Free | prompt ownership | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
legal burden changed from medium/liability limited to medium/indemnity.
“The Service is provided “as is” without warranties of any kind. We do not guarantee uptime, availability, or error-free operation. We are not liable for any damages arising from the use of AI-generated apps.”Before citation
“You agree to indemnify, defend, and hold harmless Whacka, its officers, directors, and employees from any claims, damages, losses, or expenses (including reasonable attorneys’ fees) arising from: (a) your use of the Service; (b) your published apps and any data collected through them; (c) your violation of these Terms or any applicable law; or (d) your infringement of any third-party rights.”After citation
content ownership improved from high/platform claims or reserves rights to low/user retains rights.
“You retain ownership of content you create, upload, or publish through the Service (including app descriptions, comments, and profile information). By publishing an app on Whacka, you grant us a non-exclusive, worldwide, royalty-free license to host, display, and distribute your published apps through the platform. You must not publish apps that contain illegal, harmful, or infringing content. We reserve the right to remove any content that violates these Terms.”Before citation
“Apps and code generated by the Service are created using AI models (including third-party AI services). You retain ownership of the ideas and descriptions you provide. You are granted a license to use, modify, and distribute the AI-generated output for your apps. We do not guarantee the accuracy, functionality, or safety of AI-generated code. You are responsible for reviewing and testing any generated content before use. AI-generated content may not be unique; similar outputs may be generated for other users with similar inputs.”After citation
Latest stance: sublicensable or transferable on privacy data use
“The Service uses a credit-based system for AI app generation. Credits may be obtained through subscription plans or one-time purchases. Payments are processed through Stripe. By making a purchase, you also agree to Stripe’s terms of service. Credits are non-transferable and non-refundable unless required by law. We reserve the right to modify pricing and credit allocations with reasonable notice.”Open timeline citation
Latest stance: platform claims or reserves rights on privacy data use
“The Service uses a credit-based system for AI app generation. Credits may be obtained through subscription plans or one-time purchases. Payments are processed through Stripe. By making a purchase, you also agree to Stripe’s terms of service. Credits are non-transferable and non-refundable unless required by law. We reserve the right to modify pricing and credit allocations with reasonable notice.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“Before initiating arbitration, the parties agree to attempt informal resolution by sending written notice describing the Dispute to [email protected] and engaging in good-faith discussions for at least 30 days.”Open timeline citation
Latest stance: user retains rights on prompt ownership
“Apps and code generated by the Service are created using AI models (including third-party AI services). You retain ownership of the ideas and descriptions you provide. You are granted a license to use, modify, and distribute the AI-generated output for your apps. We do not guarantee the accuracy, functionality, or safety of AI-generated code. You are responsible for reviewing and testing any generated content before use. AI-generated content may not be unique; similar outputs may be generated for other users with similar inputs.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-08-10· verified 2026-08-10
- Privacy Policy:Last captured 2026-08-07· verified 2026-08-07
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 63 more findings this quarter vs last (120 vs 57). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Whacka's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Whacka's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.