Privacy Policy
Last updated: January 24, 2026
Wiblo is committed to protecting your privacy and processing your personal data in a transparent, secure manner that complies with the General Data Protection Regulation (GDPR - EU 2016/679) and applicable laws in France.
This document explains:
Contact: hello.wiblo@gmail.com
Data Controller: SAS Hapy
Address: 60 Rue François 1er, 75008 Paris, France
Personal data contact: hello.wiblo@gmail.com
Wiblo processes data as:
Collected during registration and account creation:
| Data | Why? | Legal basis |
|---|---|---|
| Phone number | Anti-multi-account verification, 2FA, contact | Legitimate interest (security), consent |
| Email address | Primary identifier, notifications, account recovery | Necessary for contract |
| First name/Last name or pseudonym | User profile, public display (optional) | Legitimate interest (community functioning) |
| Password | Authentication (hashed, never stored in plain text) | Necessary for contract |
| Data | Why? | Legal basis |
|---|---|---|
| Banking information (card, IBAN) | Project publication payment | Necessary for contract (via Apple/Google) |
| Billing history | Tax compliance, support | Necessary for contract |
IMPORTANT: Wiblo NEVER stores banking information. It is processed exclusively by Apple (App Store) and Google (Play Billing).
| Data | Why? | Legal basis |
|---|---|---|
| Test history | Points allocation, levels, anti-fraud | Necessary for contract |
| Published reviews | Public display, quality analysis | Consent, legitimate interest |
| Points/Levels | Gamification, user progression | Necessary for contract |
| Claimed rewards | Delivery management and tracking | Necessary for contract |
| Data | Why? | Legal basis |
|---|---|---|
| IP address | Security, anti-fraud geolocation | Legitimate interest (security) |
| Device type/OS | Compatibility, analytics | Legitimate interest |
| Device identifier | User sessions | Legitimate interest |
| Cookies (see section 9) | Website/app functioning | Consent |
| Data | Why? | Legal basis |
|---|---|---|
| Geolocation (opt-in) | Reward eligibility verification | Explicit consent |
| ID document (rare) | Age/identity verification for Rewards >€50 | Legitimate interest + consent |
| Marketing preferences | Communication personalization | Consent |
NO SENSITIVE DATA: Wiblo does not collect health data, religion, sexual orientation, political opinions, etc.
We process your data ONLY for:
1. Wiblo service provision:
2. Rewards management:
3. Security & integrity:
1. Platform improvement:
2. Customer support:
3. Legal compliance:
1. Marketing communications:
| Purpose | GDPR legal basis | Details |
|---|---|---|
| Service provision | Article 6.1.b Necessary for contract |
Without this data, no service possible |
| Security | Article 6.1.f Legitimate interest |
Platform security priority |
| Improvement | Article 6.1.f Legitimate interest |
Anonymized A/B tests |
| Marketing | Article 6.1.a Consent |
Explicit opt-in required |
| Compliance | Article 6.1.c Legal obligation |
Invoices, authorities |
| Sensitive rewards | Article 6.1.a Consent |
Geolocation, identity verification |
| Partner | Role | Data shared | Contract type |
|---|---|---|---|
| Apple/Google | IAP payments | Banking data | Store contracts |
| Firebase/AWS | Hosting | Technical data | Signed GDPR DPA |
| Stripe (future direct payments) | Billing | Payment data | Signed DPA |
| Reward Partners (Amazon) | Gift delivery | Name, email, address | Specific contract |
| Google Analytics | Analytics | Anonymized data | Analytics DPA |
ALL SUB-CONTRACTORS SIGN A GDPR DPA (DATA PROCESSING AGREEMENT).
WIBLO NEVER SELLS YOUR PERSONAL DATA TO THIRD PARTIES.
| Destination | Legal basis | Guarantees |
|---|---|---|
| USA (Google Analytics) | SCC (Standard Contractual Clauses) | IP anonymization + DPA |
| Partners outside EU | Consent + SCC | Case by case |
| Data type | Retention period | Reason |
|---|---|---|
| Active account | Duration of your use + 3 years | Support, legal, reactivation |
| Points/Rewards | 5 years after last activity | Tax, disputes |
| Invoices/Payments | 10 years | French tax obligations |
| Security logs | 6 months | GDPR + security |
| Public reviews | Indefinitely (except deletion request) | Historical value |
| Deleted data | 30 days max (backup) | Complete deletion |
AFTER ACCOUNT DELETION: All personal data is deleted within 30 days, except legal obligations or security backups (anonymized).
You have the following rights (Articles 15 to 22 GDPR):
| Right | Description | How to exercise |
|---|---|---|
| ACCESS (Art. 15) |
Obtain a copy of your data | Form in app or email hello.wiblo@gmail.com |
| RECTIFICATION (Art. 16) |
Correct inaccurate data | Account settings or support |
| OBJECTION (Art. 21) |
Refuse marketing/analytical processing | Unsubscribe link or settings |
| ERASURE ("right to be forgotten" Art. 17) |
Request deletion of your data | Form in app or email |
| PORTABILITY (Art. 20) |
Retrieve your data in a structured format (JSON, CSV) | Request by email |
| RESTRICTION (Art. 18) |
Temporarily freeze processing of your data | Request by email |
| COMPLAINT | File a complaint with CNIL if rights not respected | https://www.cnil.fr/fr/plaintes |
RESPONSE TIME: Maximum 30 days after receipt of your request.
ID DOCUMENT: May be requested to verify your identity before processing your request (security).
A cookie is a small text file stored on your device when you visit our application or website. It allows us to remember your preferences and improve your experience.
| Type | Purpose | Duration | Legal basis |
|---|---|---|---|
| ESSENTIAL COOKIES | • User session • Login • Security |
Session | Necessary for contract |
| ANALYTICAL COOKIES | • Google Analytics (anonymized) • Usage statistics |
13 months | Consent |
| MARKETING COOKIES (if applicable) |
• Targeted advertising • Retargeting |
13 months | Consent |
You can refuse non-essential cookies:
REFUSING COOKIES = possible impact on certain features.
Wiblo may also use:
You can disable advertising tracking:
Wiblo implements technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration.
In case of a data breach affecting your rights and freedoms, Wiblo commits to:
NO SYSTEM IS INFALLIBLE: Despite our efforts, no transmission over the Internet is completely secure. You use Wiblo at your own risk.
Wiblo may modify this Privacy Policy at any time to reflect changes in our practices, legislation or services.
In case of IMPORTANT changes (new data collected, new recipients, purpose change):
For minor modifications (corrections, clarifications):
Previous versions of this Policy are archived and available upon request by email at hello.wiblo@gmail.com.
For any questions regarding the processing of your personal data or to exercise your GDPR rights:
Email subject: [GDPR] followed by your request (e.g., [GDPR] Access request)
We commit to responding to any request within a maximum of 30 calendar days from receipt.
If your request is complex or requires additional verification, we may extend this period by 2 months, informing you of the reasons for this extension.
If you believe your rights are not respected or that the processing of your data is not compliant with GDPR, you have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):
IMPORTANT: We encourage you to contact us BEFORE filing a complaint with CNIL so we can resolve your issue amicably.
For any other questions (technical, billing, usage):
This Privacy Policy complies with:
Wiblo — Your privacy is our priority.
Last updated: January 24, 2026