privacy policy

Who operates this

What's Down is operated by Fedik, a sole proprietorship registered in Israel. For privacy questions, access, correction, or deletion requests, email [email protected].

What we collect

• Account identifier. When you use the app, we create an anonymous Firebase Authentication account. We store the Firebase user ID (UID). We do not require your name or email for the questionnaire.
• Optional email and password. If you save this account or sign in, Firebase Authentication stores the email address and the password credential. Linking an email keeps the same Firebase user ID and diagnosis history. What's Down does not store your password.
• Questionnaire selections. Your multiple-choice answers (stored as choice IDs).
• Optional free text. If you leave an optional note, that text is stored and may be included in the prompt sent to the AI narrator.
• Generated results. Deterministic scores, categories, summary fields (evidence, suggested actions, warnings), and related session metadata. The AI narrative is generated for your session response; we also store a narrator status (success, fallback, or failed) for operational measurement.
• Timestamps and operational fields. Server-side created/completed times, session/diagnosis IDs, schema version, and basic metadata such as app version and that the session came from the web client.
• Technical logs. Cloud Run writes structured operational logs. By design those logs use a hashed form of the user ID and do not include raw questionnaire answers, free-text notes, AI prompts, or AI response bodies. They may include session IDs and category identifiers needed to debug failures.

Why we use this information

• To run the questionnaire and return a diagnosis result.
• To recognize an optional paid subscription and provide access across sessions.
• To store session history associated with your anonymous account (when persistence is enabled).
• To measure aggregate usage and whether people return for another completed diagnosis (via operator tooling that reads Firestore; this is not exposed in the public app).
• To debug failures, maintain security, and improve the application.

Service providers

Your data is processed by Google Cloud services used to run the product:

• Firebase Authentication (anonymous accounts)
• Cloud Firestore (session and diagnosis storage)
• Cloud Run (API and frontend hosting)
• Vertex AI / Gemini (AI narrative generation from diagnosis context and optional free text)
• Cloud Logging (operational logs as described above)
• Creem (payment processing for the optional subscription). Creem receives the payment details needed to charge the card. What's Down does not store your card number.

Processing for the deployed environments is configured in the Google Cloud region europe-west1.

Payments

Paid access is an optional subscription at $3 per month, processed by Creem. What's Down stores the subscription status and paid-through date needed to provide access. What's Down does not store your card number.

Advertising and sale of data

We do not sell your questionnaire content or diagnosis results. We do not use your answers for advertising. This product does not include Firebase Analytics, Google Analytics, advertising trackers, or a cookie-consent banner.

Retention

Completed diagnosis records are kept for up to 6 months after completion. After that, the operator deletes them using operational tooling. Deletion is operator-managed for this beta (not a continuously scheduled cloud job). For earlier deletion, email [email protected] with your account ID (see "Access, correction, and deletion" for how to find it). There is currently no self-service delete button in the app.

Access, correction, and deletion

To request access to, correction of, or deletion of data associated with your use of the service, email [email protected] and include your anonymous account ID (Firebase UID). We do not store an email address with anonymous accounts, and there is no self-service delete button. Without your account ID, we may not be able to find your records.

How to find your account ID (same browser and device where you used What's Down, before clearing site data):

1. Open the What's Down site.
2. Open your browser's developer tools (on many browsers: right-click → Inspect, or press F12 / Cmd+Option+I).
3. Go to Application (Chrome/Edge) or Storage (Firefox/Safari).
4. Under IndexedDB, open firebaseLocalStorageDb (the name may vary slightly).
5. Open the stored Firebase auth entry (often a key starting with firebase:authUser:).
6. In the JSON, copy the "uid" value and include it in your email.

If you cleared site data, used a different browser or device, or the auth entry is missing, we may be unable to locate prior records.

Security

We rely on Google Cloud defaults and standard practices for the services listed above. No system is perfectly secure. We do not claim specific certifications, encryption guarantees beyond what those platforms provide, or absolute protection against unauthorized access.

Children and minors

What's Down is intended for adults. You must be at least 18 years old to use the service.

Anonymity

Questionnaire use is tied to an anonymous Firebase UID stored with your diagnosis records. That is not the same as having no identifier. Saving an email and password on that same account keeps the same user ID, so signing in on another device can restore the account and its usage. Clearing site data or using another browser without signing in typically creates a new anonymous account, which breaks continuity with prior history.

Changes

We may update this policy as the product changes. The effective date at the top will be updated when we do. Continued use after an update means the revised policy applies to new activity.