Privacy Policy

How WeWa.Life collects, uses, and protects your information.

FERPA Compliant • Effective April 15, 2026

Plain Language Summary: Mimi is a wellness guide, not a clinical record system. We collect only what we need to personalize your experience and keep you safe. We do not sell your data. We do not share identifiable student information with your institution without your consent, except in documented safety situations.
‍

SECTION 01 | About This Policy

WeWa.Life, Inc. (“WeWa,” “we,” “us,” or “our”) operates the Mimi AI student wellness guide and the WeWa.Life platform(the “Service”). This Privacy Policy explains how we collect, use, store, and disclose information about you, and describes your rights. It applies to students accessing the Service through an institution, students who register directly, and institutional administrators.
‍

SECTION 02 | Information We Collect

You Provide Directly:

  • Account registration details (name, email, institution); onboarding responses about goals and wellness preferences
  • Conversation content submitted through Mimi’s chat interface; optional feedback and survey responses

Collected Automatically:

  • Usage data (features accessed, session frequency, pathway engagement); device and browser type
  • LMS integration event data if your institution connects WeWa.Life to Canvas or another LMS

We Do Not Collect:

  • GPA, grades, transcripts, financial aid, Social Security numbers, government ID, or biometric data
    ‍

SECTION 03 | How We Use Your Information

  • Deliver and personalize Mimi’s guidance across Academic, Social, and Emotional Regulation pathways
  • Adapt responses based on stated preferences and prior session context; monitor for safety signals (see Section 7)
  • Improve the Service via aggregated, de-identified analytics; communicate account updates; comply with FERPA

AI Note: Conversation history informs Mimi’s context within a session. Raw transcripts are not used in model retraining without your explicit, separate consent.
‍

SECTION 04 | Data Storage & Security

  • U.S.-based servers; encrypted in transit (TLS 1.2+) and at rest (AES-256)
  • Role-based access controls, regular security assessments, vulnerability scanning, and breach notification procedures
  • Data retained while your account is active; request deletion at any time via account settings or privacy@wewa.life
    ‍

SECTION 05 | FERPA & Student Records

The Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, governs the privacy of student education records. Where WeWa.Life is integrated with an Institution’s systems, FERPA protections apply.

Our FERPA Role: WeWa.Life acts as a “school official” under 34 C.F.R. § 99.31(a)(1)) with legitimate educational interest limited to providing and improving the Service.

LMS Data: If connected to Canvas, we receive name, institutional email, enrollment status, and course section IDs for authentication only — no grades or assignment data.

Not a Clinical Record: Mimi conversations are not mental health treatment records under FERPA or HIPAA; WeWa.Life is not a healthcare provider.

Your FERPA Rights: Inspect records we hold; request corrections; file complaints with the U.S. Dept. of Education SPPO.Contact ferpa@wewa.life.
‍

SECTION 06 | Data Sharing & Third Parties

We do not sell, rent, or trade your personal information.

Service Providers: Vendors (cloud, AI, analytics) are contractually limited to delivering services to WeWa.Life only.

Institutional Partners: Aggregated, de-identified usage reports only — individual students are never identified.

Legal / Safety: As required by law, court order, or to protect rights and safety. Safety disclosures governed by Section 7.
‍

SECTION 07 | Safety, Escalation & Mandatory Disclosures

Tier 1 | Supportive Response Mimi responds empathetically with campus resource information. No disclosure occurs.
Tier 2 | Resource Routing Mimi surfaces 988 Lifeline and campus counseling prominently. No disclosure occurs.
Tier 3 | Imminent Risk WeWa.Life may contact the Institution’s emergency contact under FERPA’s health & safety emergency exception (34 C.F.R. § 99.36). All disclosures are recorded. Reasonable effort is made to notify the student unless doing so compromises the safety response.

‍

SECTION 08 | Your Rights & How to Contact

  • Access, correct, export, or delete your data via account settings or privacy@wewa.life; FERPA requests toferpa@wewa.life
  • We respond to verifiable requests within 30 days; some requests may require coordination with yourinstitution

Privacy Team: privacy@wewa.life | FERPA: ferpa@wewa.life | 18 Cedar Road, Rehoboth Beach, DE 19971-1220