Wysa published Global Privacy Policy V7.2.2 and UK Privacy Policy V4.2.1, removing a sentence that said personal data did not include publicly available, anonymized or aggregated information. The new definition counts information about an identifiable person as personal data whether or not it is public, keeps pseudonymized data as personal data, and treats aggregated data as non personal only when no one can be identified from it. The policies also now point users to their regional data protection authority for complaints.
Our readThe change narrows what Wysa can treat as outside personal data rules, which matters to buyers reviewing how conversation data is handled. Wysa describes it as a correction made after user feedback, with no change listed to processing, retention, model training or residency.