.svg)
.svg)
.svg)
This document was automatically translated from French.
Last updated March 5, 2025
WeWard SAS
WeWard SAS, data controller, (hereinafter referred to as "WeWard SAS") is a simplified joint-stock company with a share capital of €1203.32, headquartered at 111 Avenue Victor Hugo 75016 Paris, registered under the SIRET number 85361417000035 in the Paris Trade and Companies Register. This personal data protection policy applies to the use of the WeWard Mobile Application (the "Mobile Application"), access to the Services we provide, and aims to inform you about the collection, use, and broader processing of your personal data. All capitalized terms not defined herein shall have the meaning attributed to them in the Terms of Use. Please note that you must be 15 years or older to use the Services.
1/ WeWard SAS collects and processes personal information including your name, mobile phone number, email address, IP address, unique device identifiers, and other identification identifiers, photographs, and/or payment information. The legal basis for processing lies in the execution of the contract (Terms of Use you have agreed to) concluded between you and the Company.
Specifically:
| Data | Purposes |
|---|---|
| Email address, unique identifiers related to the user's account Consents Your time zone Language | Allow connection to the Service (create an account), authenticate users, and ensure proper use of the app Know which time zone you are connected to (to reset your step counter from midnight) Translate texts based on your language |
| Number of steps and geolocation data | Count the user's steps, evaluate the distance traveled, verify eligible physical activities, assign rewards, position the user on the map, and display nearby Virtual Products |
| Number of consecutive days on the application | Calculate and display the number of flames |
| Number of consecutive days on the application, username, number of XP, number of Wards, number of steps, number of flames | Rank users within leagues, among friends, within championships, and communities. |
| Name, first name, postal address Mobile phone | Provide "physical" gifts (data transmitted to merchants who must deliver gifts) Assist the delivery person in case of issues. Manage potential purchases |
| IP address (city level) | Provide the service by awarding points based on actions with partners or on the application. |
| Transaction history, earnings, and virtual objects | Provide you with the history of transactions, your earnings, and your collections |
| In the case of a connection with the Facebook Connect or Google service: email address, name, first name, and profile picture of the Facebook or Google account | Connection to the service and completion of the user profile |
| Your identification data, including your email address, your journey on the app, the messages you send us, the problems encountered, the IP address | Support, proper functioning of the app, and compliance with our commitments Sending emails (transactional) |
As part of the Services, we may provide you with a feature allowing you to search for friends using their phone number, name, first name, username, or using your Facebook and/or Google identifiers. If you wish, you will be invited to authorize the WeWard Application to access your directory or certain information associated with your Facebook and/or Google account, such as your name, profile picture, gender, and friends list. To the extent that you consent, this information will be processed by us to identify your friends who are users of the Application or to allow you to invite friends to install the WeWard Application. WeWard SAS will never directly contact your friends who are non-users of the platform.
2/ With your consent (legal basis), we will collect information about your location and physical activity to (i) personalize the reward offers visible on the Application based on your profile and position, (ii) offer you virtual objects to collect. You can enable and disable location using your mobile device's operating system settings. However, when you disable this feature, you will only have access to limited features of the Application, and specifically, it will be technically impossible for us to collect information related to your physical activity and location, which will prevent the tracking and/or conversion of your movements into Wards. However, you can still earn Wards by performing other actions (watching ads, making purchases, participating in surveys, etc.).
With your consent, we also process:
| Data | Purposes |
|---|---|
| Email address | Sending emails about partner offers (personalized ads) |
| Data necessary for targeted advertising: account creation date, number of Wards, country, age (if provided), Advertising ID (information from your phone that you can reset), journey on the app, clicks, IP address | Data transferred by WeWard to advertising partners for advertising targeting purposes. The non-exhaustive list of partners is as follows: Facebook Google, Ironsource, Adcolony, Vungle, Applovin… |
| Gender and date of birth (optional) | Commercial targeting |
You can withdraw your consent at any time by contacting us at the email address provided at the end of this Policy or directly from the Mobile Application settings.
3/ WeWard being a community of users, each person can view certain information related to other users (number of steps, number of Wards, number of flames, number of XP, Wards used to support associative projects, their followers, CO2 saved). To not share this data, you can choose to make your account "private" in the application's "settings" so that you are only visible to your followers and no longer to all users. You can also remove followers from your account at any time.
WeWard may ask you to upload a photograph. The purpose of this processing is to provide social features allowing for an identifiable profile by another user. The interest is solely to make the App more "friendly."
WeWard being present on social networks, exchanged messages and publications are also analyzed and taken into account for the proper functioning of the company.
The legal basis for these processes is WeWard's legitimate interest, noting that sending the requested photo is not mandatory and refusal has no consequences.
Other processes are based on WeWard's legitimate interest:
| Data | Purposes | Company's Legitimate Interest |
|---|---|---|
| Photograph of your ID, your IBAN, your date of birth, your name, your first name, and your address. | Traceability and compliance with legal obligations in the case of a bank transfer | Ability to respond to banks' questions as part of their legal obligations |
| Activity time and calories Step data up to 12 months before app installation | Provide statistics on the person's physical activity to improve their performance | Provide additional content to users and allow the user to track their performance. Measure the app's effectiveness on user motivation and develop motivational factors. |
| IP address (city level) | Conduct anonymous statistical studies on user geolocation | Know the number of users in each city |
| Email address | Communicate with you, especially to inform you of new features, updates to the Application, the Website, our Terms of Use, and/or this Privacy Policy | Provide additional information |
| Referral code, referral links, Referee's Wards balance | Offer referral offers | Increase the number of users and enhance user experience |
| History of visited places | Conduct anonymous statistics | Know the number of users in certain locations |
| Type and model of mobile device, browser type, device identification, connection times, and pages viewed | Enable the Application's operation, detect malfunctions to maintain its quality, and for general anonymous statistics | Maintain Service quality and improve general customer knowledge |
| Statistical data (number of views, number of clicks, generated revenue) by partner | Conduct general statistics and improve partner knowledge Transfer this information to partner businesses, in an anonymous form | Improve service knowledge and performance Allow partner businesses to evaluate WeWard's performance |
| Device identifier Cheat score* Number of referrals | Verification of suspicious actions Fraud detection (people with multiple IPs for one phone, having an abnormal number of referrals, having the same IBAN for multiple accounts) | Detect fraud |
| Photographs of receipts corresponding to purchases made at recommended locations | Know conversion rates between a visit and a purchase Transfer this information to partner businesses (as proof of your visit and for billing the said partner) | Evaluate the service and manage commercial activity Allow partner businesses to evaluate WeWard's performance |
| Email exchanges and banking transaction and reward distribution data. | Access your transaction and earnings history | Comply with contractual and regulatory obligations. Keep evidence in case of disputes |
| Advertising ID, journey on the app, impressions, clicks | Measure marketing campaign effectiveness | Conduct business |
| Purchases made on the marketplace | Marketplace management and compliance with accounting obligations | Keep commercial documents |
| File of rights exercise requests (right of access, opposition, erasure, etc.) | Respond to your requests within the legal timeframe | Comply with our legal obligations (GDPR) |
*A cheat detection algorithm is used by WeWard as soon as a user requests a transfer, a gift card, requests to exchange their Wards for certain gifts, or makes a donation. The goal is to detect suspicious behavior (e.g., artificial simulation of steps, artificial simulation of geolocation points, inconsistent ad viewing, sending falsified or non-belonging receipts, falsification of purchases or actions made with our partners, falsification of referrals). If the user uses such methods, their account will be suspended. They will be informed beforehand.
4/ We work with third parties (local businesses, advertising networks, analytics providers, affiliate platforms hereinafter "Partners") who may provide us with or receive information about you.
| Data | Purposes |
|---|---|
| Responses to survey company questionnaires (data for which Weward is not responsible for processing) Weward only sends a customer ID to the partner. | Only when the user responds to a survey: data collected and processed by partner survey companies (e.g., tap research and Theoremreach responsible for processing) for their own statistical study purpose. Questionnaires allowing the user to earn Wards. The non-exhaustive list of partners is as follows: Tap Research, InBrain, Pollfish… |
| Advertising ID (information from your phone that you can reset) | Provide rewards based on viewed videos (legal basis: contract execution) Offer targeted advertising (legal basis: consent): ID collected by WeWard and transferred to advertising partners for advertising targeting purposes. The non-exhaustive list of partners is as follows: Facebook, Ironsource, Adcolony, Vungle, Applovin… |
| Unique account identifier and purchases made with partners | Provide rewards based on viewed videos and purchases made (legal basis: contract execution) Provide statistics on the person's physical activity to improve their performance. |
| Unique identifier (email, database identifier) and user sessions (pages visited, clicks…) | Provide statistics on app usage (pages viewed, clicks, retention…) and allow support and engineers to resolve bugs to improve app performance. The non-exhaustive list of partners is as follows: Amplitude, Google (Firebase), Onesignal, Datadog… |
You can obtain the exhaustive list of these partners upon request at the email address provided at the end of this Policy.
Your personal data is processed by WeWard for the purposes described above, and for this purpose, WeWard may transmit your data to third parties belonging to the following categories:
On the one hand, to our subcontractors: WeWard may engage trusted partners acting as subcontractors, particularly:
in the context of providing the Services by analyzing your data to account for your Wards and to allow us to provide you with the Wards you wish to convert into Rewards;
To our advertising partners, such as Ironsource https://developers.ironsrc.com/ironsource-mobile/air/ironsource-mobile-privacy-policy/. Ironsource shares data with the following advertising partners: https://developers.is.com/ironsource-mobile/general/ironsource-exchange-programmatic-partners/, who act as data controllers.
more generally, during the use of the Application to provide support and respond to your requests, to send you an email, assist you in using the Service, or help us perform statistical analyses.
These third parties are contractually prohibited from using the personal data transmitted by WeWard, except to provide the services for which they have been mandated, and they are required to maintain the security and confidentiality of your information with protection equal to or greater than that offered by WeWard. A contract compliant with Article 28 of the GDPR is concluded with each of our subcontractors. You can obtain the list of these subcontractors upon request at the email address provided at the end of this Policy.
On the other hand, to our Partners: WeWard ensures as much as possible that the Services are offered transparently by the Partners with whom WeWard collaborates. For example, in this regard, Partners may request WeWard to obtain information as confirmation of a click to allow you to benefit from the Services offered (Rewards). WeWard ensures that Partners with access to your personal data only process it for the purposes described at the time of converting Wards into Rewards.
You can obtain additional information about these Partners by sending an email to the address provided below.
In any case: In addition to the scenarios described above, WeWard will only disclose your personal data without notice if required by current regulations, or if such disclosure is necessary to comply with the law or current regulations, a judicial procedure, and/or an administrative or judicial injunction; to protect and defend the rights or property of the Company and/or to act in urgent circumstances to protect the personal safety of Application Users or third parties. WeWard will never transmit the list of its Users to third parties without your prior consent. Subject to your express and prior agreement, WeWard's partners may contact you directly or through us to offer you commercial offers.
WeWard ensures the processing of your data in complete confidentiality and security by implementing the necessary technical and organizational measures to preserve their security, confidentiality, and integrity under optimal conditions.
Only persons strictly authorized by WeWard will have access to your data. No unauthorized third party will have access, except for legal or union obligations incumbent on the data controller.
WeWard retains your personal data for the period necessary to provide the Services. Then, the data is kept in the active database for a maximum of 7 days after account deletion, or after 24 months of inactivity (then 5 years in intermediate archiving).
Particularities:
| Data | Retention |
|---|---|
| IP address (city level) | Only the last IP is retained for the duration of the relationship. However, it is deleted after 3 months of inactivity on the Application or 7 days after your account deletion. |
| Information that you participated in a survey | WeWard only retains the fact that you earned x Wards for a survey on such a day and at such a time, and this for the duration of the relationship, 7 days after account deletion, and/or after 24 months of inactivity. |
| Facebook or Google username, Facebook or Google profile picture, gender, and Facebook or Google friends list | Weward does not retain the friends list. You can delete the Facebook-Google/Weward link from your Facebook/Google account. WeWard retains the link for the duration of the account's existence |
| (Geo)location data | Location data related to the collection of a virtual object is retained as long as your account is active, 7 days after account deletion, and/or after 24 months of inactivity. Geolocation points are not retained. |
| Identity document | 1 month after uploading your identity document. The information that your identity document is validated is retained for the duration of the relationship, 7 days after account deletion, and/or after 24 months of inactivity. |
| Cheat score | WeWard does not retain the cheat score after deleting your account. |
| Messages (content) | 4 years |
| File of GDPR rights exercise requests | 3 years from the end of the calendar year of your request. 1 month for the copy of your identity document if requested. |
Trackers are small text files (called "cookies" in English) placed on your device by your browser and/or the websites and applications you visit, including the site edited by WeWard.
Mobile applications do not use cookies, as a website would. They use SDKs (software development kits).
Cookies and SDKs are primarily used to allow the site and application to function, or to function more efficiently, but also to provide information to partner website owners or to improve your user experience and display personalized content or ads.
On the site www.wewardapp.com, we only use a functional cookie (Datadog) to identify malfunctions.
No cookie is placed by third parties, and WeWard does not use any advertising cookies on this site.
On the WeWard app, we use:
trackers necessary for the application to function correctly and improve your experience: trackers (Facebook Sign In, Apple Sign In, Google Sign In, Firebase) to recognize you upon arrival on the application and an "IPbase" tracker to identify your country and offer you a version of the app corresponding to your country and language (trackers necessary for providing a service you request).
We also use trackers (Firebase Crashlytics, datadog) to detect application malfunctions.
The CodePush tracker to update the application, which does not collect any personal data.
Trackers (Firebase) to manage the sending of notifications. You can disable notifications by going to your device settings.
Audience measurement trackers, not subject to consent (Amplitude and Firebase) and strictly necessary for providing the service (performance measurement, navigation problem detection, technical performance optimization of the site or its ergonomics, estimation of necessary server power, analysis of viewed content), and which meet the criteria for consent exemption.
Advertising trackers (Ironsource, Applovin, Adcolony, Unity, Fyber, Tapjoy, Facebook, SupersonicAds, Inbrain, TheoremReach, CPX, Pollfish, TapResearch, Adjoe) to collect data on the performance and exposure of advertising campaigns and to display advertising or surveys when you wish to obtain rewards.
Attribution trackers (Adjust and Facebook Ads) to analyze and manage acquisition campaigns. You can consult the Facebook advertising settings and update your preferences at any time.
You can object to one or more trackers by sending your request to privacy@wewardapp.com.
You can contact WeWard at any time (privacy@wewardapp.com) to access the privacy policies related to these trackers.
The information collected by the trackers is retained for a maximum of 6 months.
The processing of data from these cookies is carried out in accordance with our Privacy Policy, which we invite you to consult.
As part of providing the Services, WeWard may use analytics and notification providers whose headquarters or servers are located in non-European Union countries that have not been subject to an adequacy decision by the European Commission. These countries (USA, Madagascar, UK) provide a lower level of protection than the existing framework in Europe. In these cases, WeWard ensures that this transfer is carried out under conditions compliant with current regulations by taking all appropriate measures and within a legal, technical, and operational framework to ensure the confidentiality and security of these data. These third parties commit to respecting the European Commission's Standard Contractual Clauses.
You can obtain information about the transfers by sending an email to the address provided below.
You can delete your data at any time by going to the application, on the profile page, via the "delete my account" button, or by sending an email to contact@wewardapp.com. These data will be deleted in their entirety within 7 days.
In accordance with current regulations, you have the right to access, oppose, rectify, erase your personal data, as well as the right to limit the processing carried out, data portability, and to define the fate of your data in the event of death. Finally, regarding profiling operations, you have the right to object to the use of such a process. You can also withdraw a previously granted consent. However, exercising some of these rights (opposition to profiling, withdrawal of consent to geolocation) may result in WeWard being unable to provide you with access to the Application or the use of all or part of the Services.
These rights can be exercised by contacting us at the following address privacy@wewardapp.com. Furthermore, you are reminded that you can directly exercise some of these rights through your account settings (deleting documents, deleting requested optional information, and even general account deletion). You can delete the Facebook-Google/WeWard link from your Facebook/Google account. If you are not satisfied, you have the right to file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the supervisory authority responsible for compliance with personal data obligations:
Commission nationale de l’informatique et des libertés (CNIL) 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 Tel: 01 53 73 22 22