← Back to home

Privacy Policy

Last updated: November 5, 2026

1. Who We Are

whatif? is run by WhatIf Labs Ltd, a company registered in England and Wales (company no. 17563559). WhatIf Labs Ltd ("we", "us", "our") is the data controller for, and operates, the website whatifbeta.com, an AI-powered scenario storytelling platform. This policy explains what data we collect, why, and how we use it.

2. Data We Collect

  • Account data: email address and display name when you register (via email/password or Google OAuth).
  • Content you create: scenarios, story prompts, and stories you save to your library.
  • Usage data: pages visited and features used, collected via PostHog analytics (anonymous where possible).
  • Technical data: IP address (used for rate limiting), browser type, and approximate location derived from IP.

3. How We Use Your Data

  • To provide and operate the platform (story generation, library, auth).
  • To enforce rate limits and prevent abuse.
  • To understand how people use the product so we can improve it.
  • To contact you about your account if necessary.

We do not sell your data to third parties.

4. Third-Party Services

We use the following third-party services which may process your data:

  • Supabase: database and authentication hosting.
  • Vercel: application hosting and CDN.
  • Google OAuth: optional sign-in via Google.
  • PostHog: product analytics and session recordings (how you interact with pages, such as clicks and scrolling).
  • Google Gemini: AI story, verdict, and image generation (your scenario prompt is sent to generate results).
  • OpenAI: backup AI story, verdict, and image generation, used when the primary provider is unavailable (your scenario prompt is sent to generate results).

5. Data Retention

We retain your account data and saved stories for as long as your account is active. You can delete your account at any time by contacting us, which will remove your personal data and saved content.

6. Cookies

We use cookies for authentication (session tokens) and analytics. No advertising cookies are used.

7. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at the email below.

8. Children

whatif? is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently done so, please contact us.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the platform after changes constitutes acceptance.

10. Contact

Questions about this policy? Reach us at hello@whatifbeta.com