Privacy Policy

Last updated: October 28, 2026

wrka is operated by Kasino Inc., based in California, United States. You can reach us at support@wrka.ai.

The short version

wrka is a business tool for independent operators: barbers, nail techs, lash artists, stylists, detailers, trainers, cleaners, tattoo artists, photographers and anyone else running a business on their own. You use wrka to keep track of your own customers and leads. That means two kinds of people appear in this policy:

• You, the operator. You created a wrka account. This policy says what we collect about you.
• Your contacts. People you add to wrka, who message you, or who book you. They never signed up for wrka. Most of what wrka stores is about them, and you decided to put it there.

We do not sell anyone's data. We do not run ads. We do not track you across other apps or websites.

1. Information you give us about yourself

• Account details: your name, email address and password. Passwords are handled by our sign-in provider and we never see them in readable form.
• Your business profile: your trade, city, how long you have been in business, and your answers to our setup questions. Those answers include financial information about your business: recent revenue, average sale price, monthly and yearly income, and your largest sale.
• Your goals: what you want to fix, what is getting in your way, and how you feel about your business right now. Answering is up to you.
• Your sign-up answers: how you heard about wrka, the app you use today for clients and bookings, and where you work (for example a suite or a home studio), each picked from a short list when you sign up. We use them to see who signs up and how they found us, and to point you to the right way to bring your clients into wrka on your first day.
• Your Stripe connection: if you set up Stripe, the ID of your Stripe account and whether it can take payments. Your bank and identity details go to Stripe directly, never to wrka.
• Your Square connection: if you connect Square, your Square merchant ID and the ID of its main location, your business name as Square has it, whether it can take card payments, whether you picked it for card payments, and the OAuth access tokens Square gives wrka to take payments on your account, stored encrypted. Your bank and identity details go to Square directly, never to wrka.
• Your Instagram connection (Log in with Instagram): if you connect Instagram by logging in on Instagram's own page, your Instagram account's ID and username and the access token Instagram gives wrka to receive your DMs, stored encrypted. wrka never sees or stores your Instagram password.
• Your wrka plan: if you subscribe to wrka, your Stripe customer ID and your plan's status and dates (trial end, renewal, cancellation, a failed payment). Your card goes to Stripe directly, never to wrka.
• Your writing style: sample messages and phrases you use or avoid, so wrka can draft messages that sound like you.
• Your services and availability: what you offer, your prices and your working hours. Your booking page shows your services, your hours and any social links or website you add to it, to anyone who opens it.
• Your payment handles: the Zelle, Venmo, Cash App or PayPal details you choose to add. They are shown on the invoices you send, to anyone who has an unpaid invoice link.

2. Information about your contacts and customers

This is most of what wrka holds. It is here because you put it here, or because it arrived through an account you connected.

• Contact details: names, nicknames, email addresses, phone numbers, businesses and the city or area you record.
• Social handles and links: Instagram, TikTok, X, YouTube, Facebook, Yelp and websites.
• Messages: the full text of messages exchanged through accounts you connect, with subject lines and times. If you set up the iPhone Shortcut in Settings, your iPhone sends wrka every text it receives, with the sender's number. A text from a number saved on exactly one of your contacts is kept with that contact's messages. A text from a number saved on more than one contact is not kept.
• Messages from people you have not added yet: when someone new messages an account you connected, or texts you while the Shortcut is set up, wrka holds the message and their number, email address or handle in a pending list until you add or block them, and keeps a list of the senders you blocked. Messages from a blocked sender are still kept in that list, hidden from you, so unblocking brings them back. Anything still in the list after 14 days is deleted. When the message comes from Instagram, wrka looks up the sender's Instagram handle so you can see who it is, and remembers the answer. For an account connected with Log in with Instagram, that lookup asks Instagram once per sender, and the answer is kept for 30 days before it is asked again.
• Your notes: anything you write about a contact, plus deal stage, deal value and follow-up reminders.
• To-dos: the to-dos you write, their due dates, whether you starred them, the contact they are for and when you ticked them off.
• Quotes and invoices: the lines, prices, deposit and note on quotes and invoices you send, the name a client types when they accept a quote, and when and how an invoice was paid.
• Photos in Live chat: a photo you or your client sends in a Live chat is stored so you both can see it in the conversation. The device resizes it and saves it again as a JPEG before it is sent, which removes camera details such as location. Photos are kept in private storage, never at a public link, and are shown only through links that expire after 30 minutes.
• Your logo: if you upload a logo, we store it so it can appear on your booking, Live chat and contact pages, in link previews and on Home Screen shortcuts your clients save. Logos are public by design: anyone with the link can see them, and apps like Messages fetch them without signing in. The logo's web address does not contain your account ID. Your device crops and resizes the image before upload, which removes photo details such as location. Removing your logo, or deleting your account, deletes the stored file.
• Product photos: if you add photos to a product (up to three), we store them so they can appear on your booking page and on the quotes and invoices that include that product. Like your logo, product photos are public by design: anyone with the link can see them, and the web address does not contain your account ID. Your device resizes each photo and saves it again as a JPEG before upload, which removes photo details such as location. A photo is deleted once no product, quote or invoice uses it, and deleting your account deletes them all.
• Files you sell: if you sell a digital product (an MP3, WAV or ZIP file of up to 50 MB), we keep its file in private storage, never at a public link. Only a customer who paid for it can download it, through the download link described below. A customer keeps the exact file they paid for: if you later replace or remove the file, or delete the product, only orders paid after that get the change. When you replace or remove a file, or delete the product, the stored file is deleted at once unless a paid order still uses it. Any other file that no product and no paid order uses (a file kept for paid orders once the last of those orders is deleted, or one whose deletion failed) is deleted the next time you upload a file, once it is at least 3 hours old. Deleting your account deletes them all.
• Download links: when a customer pays for a digital product, we email them a download link (section 6). For each order, wrka keeps a scrambled (hashed) form of that link, never the link itself, along with when it stops working (7 days after it is sent) and how many times each file has been downloaded. With each paid order, wrka also notes which stored file it bought, with that file's name and size. Both stay with the order.
• Booking details: when someone books you through your wrka booking page, we collect the name, phone number, email address and any note they leave, the options and add-ons they pick, and the time zone their browser is set to, so emails can show a remote meeting's time on their clock. If a client chooses to meet at their own location, we also collect the street address, city and ZIP code they give and any note they add for it (like a gate code), so you know where to meet them. Only you see it, on that booking in the app and in the new-booking email we send you. It is never shown on your public pages or their booking link, and never put in an email or text to your client or in a notification. You can clear it from the booking at any time, and wrka deletes it automatically about 30 days after the appointment (section 8).
• Delivery addresses: when someone orders from your booking page and picks local delivery, we collect the street address, city and ZIP code they type, so you know where to bring the order. Only you see it, on that order in the app. It is never shown on your public pages or the invoice link, and never put in an email, text or notification. You can clear it from the order at any time, and wrka deletes it automatically about 30 days after the order is paid (section 8).
• Booking links: each booking confirmation and day-before reminder (email or text) carries the client's own booking link, wrka.ai/b followed by a code. It opens a page with your business name, the service, the day and time, and whether they have confirmed, where they can tap "I'll be there" or message you (with their Live chat link, if you use Live chat). Anyone who has the link sees the same page. wrka keeps a scrambled (hashed) form of the code, never the code itself, and the time the client confirmed, with the booking. A link stops working a day after the booking's time, and moving the booking clears the confirmation.
• Payment records: amounts, payment method and dates for work you log or invoices you mark paid. When a client pays an invoice online, Stripe or Square (whichever you use) takes the payment in its own secure form and wrka records that it was paid; wrka never receives card or bank numbers.
• AI-generated notes about contacts: summaries, suggested next steps and read-outs of tone, generated from the above.

Your responsibility as the operator

You are responsible for having a lawful basis to store your contacts' information in wrka and for telling them how you handle it where the law requires. If a contact asks you to remove their information, you can delete it in the app. If they contact us directly, we will refer them to you and help you act on it.

3. Information collected automatically

• Error data: when something breaks, our error monitoring records what went wrong, the page it happened on, and basic details about the browser or device, and may record an IP address. We switch off its collection of personal details and strip cookies, sign-in tokens and IP headers before anything is sent.
• Abuse protection on public pages: to stop automated spam on booking, booking link, lead, quote and invoice pages, we count requests by IP address and email address. Those records are deleted automatically after two days.
• Notifications: if you turn on notifications, your device gives us a delivery address for it. A message notification carries the sender's name and a short preview of the message; the morning to-do notification carries the titles of the to-dos due that day. Each one is encrypted before it leaves our servers and travels through your device maker's push service (Apple, Google or Mozilla), which cannot read it.
• How you found wrka: the first time you open one of our public pages (the homepage, sign-up, privacy or support page), your browser keeps a note of the campaign tags in the link you followed (such as "instagram" or "bio"), the name of the website that sent you (never the page on it), the first wrka page you saw and when. The note stays in your browser for 30 days and a later visit does not change it. It leaves your browser only if you create an account: then it is saved with your account, so we can see which posts and channels bring people to wrka. It is never kept on booking, lead, quote, chat or shop pages, or in the wrka iOS app.
• Your first steps in wrka: for an account made after October 24, 2026, the date and time you first start your free trial, connect Instagram, see your Brief, add a contact yourself (by hand or by import), take a deposit through Stripe or Square, start paying for wrka and choose to cancel. Each is recorded once, when it first happens, so we can see where new accounts get stuck and fix that part of wrka.

Our public pages (the wrka.ai homepage, sign-up, privacy and support pages) use Google Analytics to count visits and see which pages and links bring people to wrka. On those pages only, it sets first-party cookies and records the page you viewed (without any personal details from the web address), the site that sent you, your device and browser type, and an approximate location Google works out from your IP address. Google Analytics does not run inside the wrka app, on any booking, lead, quote or chat page, or in the wrka iOS app. We have Google's advertising features and Google signals turned off, and we honour the Global Privacy Control signal: if your browser sends it, analytics never loads. You can also opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout.

Our fonts are served from our own site, not from a third party.

4. What wrka does not collect

• No location from your device. Cities and areas in wrka are typed in by hand.
• No access to your device's contacts.
• The camera and microphone only when you choose. Where wrka lets you add a photo (a Live chat photo, your logo, a product photo, or a screenshot to read or import), your phone's own picker can offer to take a new photo, or in Live chat to record a video. The camera is used only then, and the microphone only while you record that video. wrka never turns either on by itself. From a video, wrka takes one still picture to send; the video and its sound never leave your phone.
• Contact imports are your pick. If you import contacts from a file you choose (a CSV or a contacts file), it is read in your browser and only the contacts you select are saved to your account.
• No photo library access. You can pick an image to upload with your device's standard file picker, but wrka cannot browse your photos.
• No advertising identifiers, no cross-app or cross-site tracking, no third-party cookies.
• No full card numbers or bank details. For a card saved at booking, wrka keeps only its brand and last four digits (section 6).
• No imported screenshots kept. A screenshot you upload to import a conversation is read and discarded. Only the text taken from it is saved. Photos sent in a Live chat, your logo, your product photos and the files you sell are the only files wrka keeps (section 2).

5. AI features

wrka uses AI to draft messages, summarise conversations and analyse your business. To do that, we send information to Anthropic, the company that makes Claude. What we send can include:

• For a draft reply or deal advice: up to the last 12 messages of your conversation with that contact, word for word.
• For a contact's memory summary: up to the last 40 messages of your conversation with that contact, word for word, with your notes about them and what they bought from you.
• For learning your writing style: up to 40 messages you sent, word for word. During setup, the texts you paste in (up to 20 texts).
• That contact's details: name, business, city, email address, phone number, Instagram handle, website, deal stage, deal value and your notes about them.
• Your business profile and writing samples, so the draft sounds like you.
• Images you choose to upload: one screenshot of a conversation at a time, up to 5 screenshots at once when you import contacts, and one screenshot at a time in your Conversation Vault.
• Text you paste in to be read, such as a conversation or a list of contacts.
• When you message several clients at once: your message and, for each client in a request of their own, their first name, a nickname if you gave one to a close client, how close you are, how you reach them, their usual service, how long since their last visit, whether they are booked again, and a short summary with up to three saved facts about them.
• Your business details, up to 20 of your services and their prices, and how many contacts you have, when you use the business analysis features. If you saved business answers earlier, including financial figures, those are sent too.

Anthropic processes this to generate a response and handles it under its terms as our service provider.

AI features run only after you allow them in the app. wrka asks before anything is first sent to Anthropic, and until you tap Allow, nothing is.

Once allowed, some AI features also run on their own: wrka updates a short summary of a contact when your conversation with them changes, learns your writing style from messages you sent, writes the ideas on your Brief, and writes a draft, deal advice or a contact report when you open them.

You can turn AI features off at any time in Settings, under AI features. From then on nothing more is sent to Anthropic until you turn them back on.

6. Who else receives information

Each service gets only what it needs to do its job. We never sell personal information and never share it for advertising.

We may also disclose information if the law requires it, or to protect our rights, our users or the public.

7. Text messages

The only texts wrka sends are appointment reminders the day before a booking. A reminder goes to a client only when the business has text reminders turned on and the client ticked "Text me a reminder the day before" when they booked on its wrka booking page. Ticking it is optional, and booking works the same without it. Texts come from wrka's own number, one per booking time (if a booking is moved after its reminder went, the new time gets its own), and never carry marketing.

• What a reminder says: what you booked, with whom and when, a link to your booking, where you can confirm you'll be there or message the business, and, if the business uses Live chat, your link to chat with them.
• To stop: reply STOP to any reminder. You get one text confirming it and no more texts from wrka's number, for any business. Reply START to get them again.
• For help: reply HELP, or contact us (section 14).
• Cost: Message and data rates may apply.
• What wrka keeps: the time you ticked the box, on your booking. If you reply STOP, your number goes on wrka's do-not-text list so no reminder is sent to it again, even if a business later deletes its account; replying START takes it off. Twilio passes your replies to wrka, which reads them only for STOP and START and does not store them or forward them to the business.

We do not share or sell mobile phone numbers or text message opt-in data and consent with third parties or affiliates for marketing or promotional purposes. For reminder texts, the only outside service that receives your mobile number to send them is Twilio.

8. How long we keep information

We keep your information for as long as your account is open.

Delivery addresses are deleted sooner. The address a buyer gives for a local delivery order is deleted automatically about 30 days after the order is paid. If the order is never paid, it is deleted about 30 days after the buyer gave it, or, if a payment for it was still clearing then, about a day after that payment fails. You can clear it from the order before then; once cleared it cannot be brought back. The order itself stays, without the address.

Service addresses are deleted sooner. The address a client gives for a visit at their location is deleted automatically about 30 days after the appointment. If the booking is cancelled, it is deleted about 30 days after the client gave it, or 30 days after the appointment day if that comes first. You can clear it from the booking before then; once cleared it cannot be brought back. The booking itself stays, without the address.

When you delete your account in Settings, we delete your data from our database immediately: your account, contacts, messages, bookings, payments, business profile and everything else, including the photos sent in your Live chats, your product photos and the files you sell. This is permanent. Photos are deleted when you delete your account. While your account is open, a photo is usually removed within a day of its message being deleted (deleting a contact deletes its messages), and a photo that was uploaded but never sent is usually removed within two days.

A few things can outlast that, and we would rather say so:

• Connected email or Instagram accounts at Unipile. We ask Unipile to remove them. If that request fails we do not hold up your deletion; email us and we will remove them by hand.
• Instagram connected with Log in with Instagram. Its stored token is deleted with your account. Instagram still lists wrka under your account's apps until you remove it there.
• Your wrka plan. Deleting your account cancels it straight away, so you are never billed again. Stripe keeps its own record of your past payments.
• Your Stripe account. It belongs to you, not to wrka, so it stays open with its payment history. Close it from your Stripe Dashboard if you want it gone.
• Your Square account. It belongs to you, not to wrka. We ask Square to end wrka's access to it; if that request fails we do not hold up your deletion, and you can remove wrka in your Square Dashboard. The account stays open with its payment history and saved cards, and any client subscriptions running there keep billing until you cancel them in your Square Dashboard.
• The do-not-text list. A number that replied STOP to a reminder stays on it (section 7), so it is never texted again.
• Error reports already recorded by Sentry, kept for its retention period.
• Internal alerts already delivered to our Slack.
• AI request records held by Anthropic under its retention terms.

Instagram connected with Log in with Instagram

Disconnect in Settings, or removing wrka in Instagram's settings, deletes the access token and your Instagram username right away, so wrka stops receiving your DMs and cannot reply. wrka keeps only your Instagram account's two ID numbers, so that a later data deletion request from Instagram can still find and delete what came through it. The messages already in wrka stay in your contacts' threads, like any other disconnected account.

A data deletion request from Instagram (removing wrka from your Instagram account and asking for your data to be deleted) deletes, before Instagram is given a confirmation code: every message and pending message wrka received or sent through that Instagram connection, the usernames wrka looked up for the people who messaged you, the access token, and your Instagram account's ID numbers and username. Your contacts, your notes about them and your blocked senders list stay, because you made them in wrka. If you have a confirmation code from Instagram, your request is complete: a code is only issued once that deletion has finished, or when wrka held nothing for that Instagram account (it was never connected, or it was already deleted along with a wrka account, which deletes everything at once). Questions about a request: support@wrka.ai.

9. Your rights

You can view and edit almost everything in the app, and delete your account at any time from Settings.

Depending on where you live, you may also have the right to request a copy of your information, ask us to correct or delete it, or object to how we use it. If you live in California, the CCPA gives you rights including access, deletion and correction, and the right not to be treated differently for using them. We do not sell or share personal information as the CCPA defines those terms.

To make a request, email support@wrka.ai. We will confirm it is you before we act.

10. Security

Your data is protected by row-level security, so one operator's records cannot be read by another. Sign-in is handled by our sign-in provider, and connections to wrka are encrypted. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

11. Children

wrka is a business tool and is not directed at children. We do not knowingly collect information from anyone under 13. If we learn that we have, we will delete it.

12. Where wrka operates

wrka is offered to businesses in the United States, and your information is stored there. If you use wrka from outside the US, your information is sent to the US, where privacy laws may differ from your own.

13. Changes

If we change this policy we will update the date at the top. Significant changes will be announced in the app.

14. Contact

Kasino Inc., California, United States. Email support@wrka.ai or call (559) 813-5313.