Privacy Policy
This document was automatically translated from French.
In the event of any discrepancies between the translated version and the original French version, the French version shall prevail.
Last updated October 14, 2026
WeWard SAS
WeWard SAS, the data controller (hereinafter referred to as “WeWard SAS” or “WeWard”) is a French simplified joint-stock company (société par actions simplifiée) with share capital of €1,203.32, having its registered office at 111 Avenue Victor Hugo 75016 Paris, registered under SIRET number 85361417000035 in the Paris Trade and Companies Register. This privacy policy applies to the use of the WeWard Mobile Application (the “Mobile Application”), to access to the Services we provide and has the purpose of informing you about the collection, use and more generally the processing of your personal data. All capitalized terms not defined herein shall have the meaning assigned to them in the Terms and Conditions.
Please note that you must be of legal age to use the Services, in accordance with the law applicable in your country of residence. In particular, if you reside in a country of the European Economic Area, you must be at least 16 years old (or the minimum age permitted by your national legislation, if lower — 15 years in France for example) to be able to give valid consent alone to the processing of your personal data.
Personal data processed, legal bases and purposes
1/ WeWard SAS collects and processes personal information including, in particular, your name, mobile phone number, email address, IP address, unique device identifiers and other identification identifiers, photographs and/or payment information. The legal basis for the processing is performance of the contract (the Terms and Conditions to which you have agreed) concluded between you and WeWard.
More specifically:
| Data | Purposes |
|---|---|
| Email address, account unique identifiers, consents, your time zone, language, date of birth (optional), phone number. | Allow access to the Service (create an account), authenticate users and enable proper use of the application, know which time zone you are connected to (to reset your step counter at midnight), translate texts based on your language |
| Number of steps and geolocation data (optional) | Count the user's steps, evaluate the distance traveled, verify eligible physical activities, award rewards, place the user on the map and display nearby Virtual Objects as well as the areas explored by the user on the map |
| Number of consecutive days on the application | Calculate and display the number of flames |
| Number of consecutive days on the application, username, amount of XP, number of Wards, number of steps, number of flames | Rank users within leagues, among their friends, within championships and communities. |
| First name, last name, postal address, mobile phone | Provide physical gifts (data transmitted to merchants who must deliver gifts), manage participation in sweepstakes, organize events, assist the delivery person in case of issue. Manage any purchases. |
| IP address (city-level) | Provide the service by awarding points based on actions with partners or on the application. |
| Transaction history, rewards and virtual items | Provide you with the history of transactions, your rewards and your collections. |
| In the case of a Google or Apple sign-in: email address, first name, last name and account profile picture. | Sign in to the service and complete the user profile. |
| Your identification data, including your email address, your journey on the app, the messages you send us, encountered issues, IP address | Support, proper functioning of the app and compliance with our commitments, sending transactional emails. |
| Phone number, first name, last name, IP address, technical information related to the mobile device and content of messages sent | Sending communications related to the Service |
| Email address | Sending emails about offers, challenges, promotions, events related to earning Wards. |
| User-generated data, such as photos, images, blog comments, questions, messages, original works and any other content or information you generate, transmit or make available on the Service, as well as associated metadata. Metadata includes information about how, when, where and by whom the content was created, and about its formatting or modification. Metadata also includes information you may add, or that may be added to your content, such as keywords, geographic or location data and other similar information. | Performance of the service, proper functioning of the application and compliance with our commitments, community management of the WeWard community. |
As part of the Services, we may provide you with a feature allowing you to search for friends using their phone number, first name, last name, username or by using your Facebook and/or Google credentials. If you wish, you will be asked to authorize the WeWard Application to access your address book or certain information associated with your Facebook and/or Google account, such as your name, profile picture, gender and friends list. If you consent, this information will be processed by us to identify your friends who are users of the Application or to allow you to invite friends to install the WeWard Application. WeWard SAS will never contact your friends who are not users of the platform directly.
2/ With your consent (legal basis), we will collect information about your location and physical activity in order to (i) personalize the reward offers visible on the Application according to your profile and position, (ii) offer you virtual items to collect, and (iii) display on the map the areas you have explored. For purpose (iii), and only if you authorize it in your device settings, your location may also be collected when the Application is closed; in that case, we retain only the areas of the map you have unlocked, and not your precise position. You can enable and disable location (including background location) using your mobile device’s operating system settings. However, when you disable this feature, you will only have access to limited features of the Application and it will be technically impossible for us to collect information about your physical activity and location, which will prevent tracking and/or converting your movements into Wards. You can still earn Wards by performing other actions (watching ads, making purchases, participating in surveys, etc.).
With your consent, we also process:
| Data | Purposes |
|---|---|
| Data necessary for targeted advertising and campaign performance measurement: account creation date, number of Wards, country, age (if provided), advertising identifier (information from your phone that you can reset), in-app journey, clicks, IP address, web browsing history, device data (such as OS type and version, manufacturer and model, browser type and version, screen resolution, language settings), unique identifiers, IP address, email address, survey responses, account identifier, email address | Improve our understanding of usage and the performance of our service, produce general statistics, aggregate and produce anonymized results for the defense of WeWard’s interests. Data transferred by WeWard to advertising partners for targeting and performance measurement. The non-exhaustive list of partners is as follows: Facebook, Google, Ironsource, Adcolony, Vungle, Applovin, Meta Platforms, TikTok, Unity, Adjoe, Adjust… |
| Gender and date of birth (optional) | Commercial targeting |
| Profile photograph (optional) | Update the user profile |
You may withdraw your consent at any time by contacting us at the email address shown at the end of this Policy or directly from the Mobile Application settings.
3/ As WeWard is a user community, each person can view certain information related to other users (number of steps, number of Wards, number of flames, amount of XP, Wards used to support charitable projects, their followers, CO2 saved). To avoid sharing these data, you can choose to make your account “private” in the Application “settings” so that you are visible only to your followers and not to all users. You can also remove followers from your account at any time. Note that the amount of XP remains visible to other users at all times even in private mode.
As WeWard is present on social networks, exchanged messages and posts are also analyzed and taken into account for the normal operation of the company.
The legal basis for these processing operations is WeWard’s legitimate interest, it being specified that sending the requested photo is not mandatory and that a refusal has no consequences.
Other processing operations are based on WeWard’s legitimate interest:
| Data | Purposes | Company’s legitimate interest |
|---|---|---|
| Photograph of your identity document, your IBAN, your date of birth, your first and last name and your address. | Traceability and compliance with legal obligations in the case of a bank transfer | Be able to respond to banks’ questions within the scope of their legal obligations |
| Active time and calories Data on steps up to 12 months prior to the app installation. | Provide statistics on the person’s physical activity in order to improve their performance | Provide additional content to users and allow the user to track their performance. Measure the effectiveness of the app on user motivation and develop motivational factors. |
| IP address (city-level) | Conduct anonymous statistical studies on users’ geolocation | Know the number of users in each city |
| Email address | Communicate with you, in particular to inform you of news, offers, challenges, surveys carried out by WeWard, promotions, updates to the Application, the Website, our Terms of Use and/or this Privacy Policy, invitations to events | Provide additional information, improve knowledge and performance of the service, R&D |
| Referral code, referrer-referee links, referee’s Wards balance. | Offer referral promotions | Increase the number of users and enhance user experience |
| History of visited places. | Carry out anonymous statistics | Know the number of users in certain locations |
| Type and model of mobile device, browser type, device identification, connection times and pages viewed, mobile OS and version, and network connection type | Allow the Application to function, detect malfunctions to maintain quality and for general anonymous statistics purposes | Maintain Service quality and improve overall customer knowledge, R&D |
| Statistical data (number of views, number of clicks, revenue generated) per partner. | Perform general statistics and improve knowledge of partners. Transfer of this information to merchant partners, in anonymized form | Improve knowledge and performance of the service, R&D. Allow merchant partners to evaluate WeWard’s performance |
| Device identifier (plain and hashed), device technical information, first and last name, IP address, network data, telemetry data, behavioral signals (sampled interactions such as clicks and touch contacts), temporal information related to session initiation (e.g., account creation, login, session start), cheat score*, number of referees, the set of all identifiers having used the WeWard account, source apps for steps, all transactions with partners, number and amount of transfers, surveys and offerwall executed. | Verification of suspicious actions Fraud detection (e.g., people having multiple IPs for one phone, an abnormal number of referees, the same IBAN for multiple accounts) | Secure the Application and its reward mechanisms, prevent abuse and fraud, ensure fairness between users, protect WeWard’s economic interests and ensure the proper functioning of the Services, which may require the use of specialized technical service providers and tools in fraud prevention. |
| Email exchanges and banking transaction and reward distribution data. | Access your transaction and reward history | Comply with contractual and regulatory obligations, including for internal audits. Retain evidence in case of disputes |
| Advertising identifier, in-app journey, impressions, clicks. | Measure the effectiveness of marketing campaigns | Conduct business, R&D |
| Purchases made on the Top Deals page | Manage the Top Deals page and meet its accounting obligations | Retain commercial documents |
| File of rights exercise requests (access, objection, erasure, etc.) | Respond to your requests within the legal time limit | Comply with our legal obligations (GDPR) |
| Identification data (first and last name), contact data (email address, billing and delivery addresses), technical data (IP address) and transactional data related to purchases of vouchers. | Detection, prevention and securing of fraud related to payment operations made in connection with the purchase of vouchers on the application. | Secure payment operations, protect WeWard’s economic interests, prevent payment fraud and limit the risk of losses and payment disputes. |
*A cheat detection algorithm is used by WeWard as soon as a user requests a transfer, a gift card, requests to exchange their Wards for certain gifts or makes a donation. The objective is to detect suspicious behavior (e.g.: artificial simulation of steps, artificial simulation of geolocation points, incoherent viewing of advertisements, falsification of purchases or actions carried out with our partners, falsification of referrals). If the user uses such methods, their account will be suspended. They will be informed in advance.
All of the data in the table above may be used by WeWard in order to comply with its contractual and regulatory obligations, including for internal audits and to retain evidence in the event of litigation.
4/ We work with third parties (local merchants, advertising networks, analytics providers, affiliate platforms hereinafter “Partners”) who may provide us with or receive information about you.
| Data | Purposes |
|---|---|
| Responses to questionnaires from survey companies (data for which WeWard is not the data controller). WeWard only sends a customer ID to the partner. | Only when the user answers a survey: data collected and processed by partner survey companies (for example Tap Research and Theoremreach acting as controllers) for their own statistical study purpose. Questionnaires allowing the user to earn Wards. The non-exhaustive list of partners is as follows: Tap Research, InBrain, Pollfish… |
| Advertising identifier (information from your phone that you can reset) | Provide rewards based on videos watched (legal basis: performance of the contract). Offer targeted advertising (legal basis: consent): ID collected by WeWard and transferred to advertising partners for targeting. The non-exhaustive list of partners is as follows: Facebook, Ironsource, Adcolony, Vungle, Applovin… |
| Unique identifier of your account and purchases made with partners | Provide rewards based on videos watched and purchases made (legal basis: performance of the contract). Provide statistics on the person’s physical activity to improve performance. |
| Unique identifier (email, database identifier) and user sessions (pages visited, clicks…) | Provide statistics on application usage (pages consulted, clicks, retention…) and allow support and engineers to resolve bugs in order to improve the Application’s performance, R&D. The non-exhaustive list of partners is as follows: Amplitude, Google (Firebase), Datadog… |
Users for whom the law of their country of residence allows it may obtain the exhaustive list of these partners on simple request to the email address indicated at the end of this Policy. They may obtain the identity of third parties to whom we have disclosed their personal data during the previous calendar year for direct marketing purposes.
Please note that we do not accept requests by phone, postal mail or fax, and we are not responsible for mislabelled, misaddressed or incomplete requests.
Recipients
Your personal data are processed by WeWard for the purposes described above and, to this end, WeWard may transmit your data to third parties belonging to the following categories:
1/ To our processors: WeWard may engage trusted partners acting as processors, in particular:
- in the provision of the Services by analyzing your data to count your Wards and to enable us to grant you the Wards you wish to convert into a Reward;
- for the prevention and detection of fraud;
- for sending communications related to the operation of the Service;
- to our mapping and location service providers for displaying the map in the Application;
- to our advertising partners, such as Ironsource https://developers.ironsrc.com/ironsource-mobile/air/ironsource-mobile-privacy-policy/. Ironsource shares data with the following advertising partners: https://developers.is.com/ironsource-mobile/general/ironsource-exchange-programmatic-partners/, who act as data controllers;
- more generally, in connection with the use of the Application to provide support and respond to your requests, to send you an email, assist you in using the Service or help us perform statistical analyses.
These third parties are contractually prohibited from using the personal data transmitted by WeWard except to provide the services for which they were contracted, and they are required to maintain the security and confidentiality of your information with protection equal to or greater than that offered by WeWard. A contract compliant with Article 28 of the GDPR is concluded with each of our processors. You can obtain the list of these processors on simple request at the email address indicated at the end of this Policy.
2/ To our Partners: WeWard seeks as much as possible that Services are offered transparently by the Partners with whom WeWard collaborates. For example, Partners may request WeWard to obtain information to confirm a click so that you can benefit from the offered Services (Rewards). They may also receive the information necessary to validate an action or a challenge so that Wards can be awarded to you. WeWard may also transmit certain data to payment partners in order to combat fraud related to payment operations, notably when purchasing vouchers.
WeWard ensures that the data it transmits to Partners is provided only for the purposes necessary to provide the Services. Any processing carried out beyond those purposes is exclusively governed by the relationship between you and the Partner, in accordance with its privacy policy.
You can obtain additional information about these Partners by sending an email to the address provided below.
3/ To our affiliated companies
In the course of providing our Services and for the purposes described in this Policy, we may share your personal data with our affiliates or group companies located within the European Economic Area or in the United States, when necessary to ensure continuity of our operations or to improve our Services. These transfers are governed in accordance with applicable law.
In any case: apart from the situations described above, WeWard will only disclose your personal data without prior notice if required by applicable law, or if such disclosure is necessary to comply with the law or regulation in force, a judicial proceeding and/or an administrative or judicial order; to protect and defend the Company’s rights or property; and/or to act in urgent circumstances to protect the personal safety of the Application’s Users or third parties. WeWard will never disclose its Users’ list to third parties without your prior consent. Subject to your express prior consent, WeWard partners may contact you directly or via us to offer you commercial offers.
Security
WeWard processes your data confidentially and securely by implementing the necessary technical and organizational measures to optimally preserve their security, confidentiality and integrity.
Only persons strictly authorized by WeWard will have access to your data. No unauthorized third party may have access to them, except as required by law or under a legal obligation incumbent on the data controller.
Security risk is inherent to any internet and information technology. We take all necessary measures to ensure the security of personal data but cannot guarantee it.
Retention period
WeWard retains your personal data for the period necessary to provide the Services. Afterwards, data is kept in the active database for a maximum of 7 days after account deletion, or after 24 months of inactivity (then 5 years in intermediate archiving), subject to legal and regulatory retention obligations.
Particulars:
| Data | Retention |
|---|---|
| IP address | The IP address is retained for the duration of the relationship. It is nevertheless deleted after 3 months of inactivity on the Application or 7 days after deletion of your account. |
| Information that you participated in a survey | WeWard only keeps the fact that you earned x Wards for a survey on a given day and at a given time, and this for the duration of the relationship, 7 days after account deletion, and/or after 24 months of inactivity. |
| Facebook or Google username, Facebook or Google profile picture, Facebook or Google gender and friends list | WeWard does not retain the friends list. You can remove the Facebook-Google/WeWard link from your Facebook/Google account. WeWard retains the link for the lifetime of the account |
| (Geo)location data | Location data related to collection of a virtual item or map exploration are retained while your account is active, 7 days after account deletion, and/or after 24 months of inactivity. Geolocation points are not retained. |
| Identity document | 1 month after uploading your identity document. The information that your identity document has been validated is retained for the duration of the relationship, 7 days after account deletion, and/or after 24 months of inactivity. |
| Cheat score | WeWard retains the anonymized cheat score after deleting your account. |
| Messages (content) | 4 years |
| File of rights exercise requests under GDPR | 3 years from the end of the calendar year of your request. 1 month for the copy of your identity document if it was requested from you. |
COOKIES/TRACKERS
Trackers are small text files (known as “cookies” in English) placed on your device by your browser and/or the websites and applications you visit, including the site published by WeWard.
Mobile applications do not use cookies as a website would. They use SDKs (software development kits).
Cookies and SDKs are mainly used to allow the site and application to function, or to function more efficiently, but also to provide information to partner site owners or to improve your user experience and to display personalized content or ads.
On the site www.wewardapp.com, we use only one functional cookie (Datadog) to detect malfunctions.
No cookies are placed by third parties and WeWard does not use any advertising cookies on this site.
On the WeWard app, we use:
- trackers necessary for the application to function properly and to improve your experience: trackers (Facebook Sign In, Apple Sign In, Google Sign In, Firebase) to recognize you when you arrive on the application and an “IPbase” tracker to identify your country and offer you a version of the app corresponding to your country and language (trackers necessary for the provision of a service you request).
We also use trackers (Firebase Crashlytics, Datadog) to detect application malfunctions. - the CodePush tracker to update the application which does not collect any personal data.
- trackers (Firebase) to manage sending notifications. You can disable notifications in your device settings.
- audience measurement trackers, exempt from consent (Amplitude and Firebase) and strictly necessary for the provision of the service (performance measurement, detection of navigation issues, optimization of technical performance or ergonomics, estimation of server capacity needed, analysis of viewed content), and which meet the exemption criteria for consent.
- advertising trackers (Ironsource, Applovin, Adcolony, Unity, A4G, Bidmachine, DT Exchange, Google AdMob, InMobi, Liftoff, Meta, Mintegral, Ogury, Verve, Pangle, Line, App Prizes, Ayet Studio, MyChips, Tapjoy, Bitlabs, CPX, PrimeSurvey, TapResearch, Theorem Reach) to collect data on the performance and exposure of advertising campaigns and to display ads or surveys when you wish in order to obtain rewards.
- attribution trackers (Adjust and Facebook Ads) to analyze and manage acquisition campaigns. You may consult the Facebook ad settings and update your preferences at any time.
You can object to one or more trackers by sending your request to privacy@wewardapp.com.
You can contact WeWard at any time (privacy@wewardapp.com) to access the privacy policies related to these trackers.
Information collected by trackers is retained for a maximum of 6 months.
The processing of data from these cookies is carried out in accordance with our Cookie Policy, which we invite you to consult.
Transfer(s) of data outside the European Union
In the course of providing the Services, WeWard may use analytics, mapping and notification providers whose headquarters or servers are located in countries outside the European Union and which have not received an adequacy decision from the European Commission. These countries (USA, Madagascar, UK) provide a lower level of protection than the framework existing within the European Union. In such cases, WeWard ensures that such transfers are carried out in accordance with applicable law by taking all appropriate measures and within a legal, technical and operational framework designed to ensure the confidentiality and security of these data. These third parties commit to comply with the European Commission’s Standard Contractual Clauses.
You can obtain information about transfers by sending an email to the address indicated below.
Deletion of data
You can delete your data at any time by going to the application, to the profile page, via the “delete my account” button or by sending an email to contact@wewardapp.com. These data will be archived in full within 7 days and deleted after 3 months.
Third-party sites and services
Our Services may contain links to websites, mobile applications or online services operated by third parties. We may also integrate certain content or features from these third parties. These links or integrations do not constitute endorsement or affiliation with these third parties.
We exercise no control over these third-party sites, applications or services and cannot be held responsible for their personal data practices. We recommend that you consult each third party’s privacy policy to understand how your personal data are processed there.
Your rights
In accordance with applicable law, you have the right of access, objection, rectification, erasure of your personal data as well as the right to restrict processing, the right to data portability and to determine the fate of your data in the event of death. Finally, regarding profiling operations, you have the right to object to the use of such a process. You may also withdraw any prior consent given. However, the exercise of certain of these rights (objection to profiling, withdrawal of consent for geolocation) may make it impossible for WeWard to provide you access to the Application or to use all or part of the Services.
These rights may be exercised by contacting us at the following address privacy@wewardapp.com. In addition, you are reminded that you can exercise certain of these rights directly via your account settings (deletion of documents, deletion of optionally requested information and even general deletion of your account). You can remove the Facebook-Google/WeWard link from your Facebook/Google account.
You can unsubscribe from commercial emails by following the unsubscribe instructions at the bottom of those emails, or by contacting us. Please note that if you choose not to receive marketing emails, you may still receive service-related emails or other non-commercial communications.
Advertising choices. In some cases you can limit the use of your information for targeted advertising based on your interests by setting the following options:
Browser settings. You can change your internet browser settings to block third-party cookies.
Privacy-focused browsers or extensions. You can use privacy-focused browsers and/or extensions (modules) that block ad-tracking technologies.
Platform settings. Some platforms like Google and Facebook offer opt-out features for targeted advertising, accessible at the following addresses:
- Google: https://adssettings.google.com/
- Facebook: https://www.facebook.com/about/ads
Industry-provided tools. You can also choose not to receive targeted advertising from companies participating in the following opt-out programs:
Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
Digital Advertising Alliance: https://optout.aboutads.info/
Mobile settings. You can configure your mobile device settings to limit the use of your device advertising identifier for targeted advertising.
Please note that these opt-out settings must be applied separately on each device and each browser you use.
We cannot guarantee that the companies we work with participate in the opt-out programs mentioned above.
Do Not Track. Some internet browsers can be configured to send “Do Not Track” signals to online services you visit. Currently, we do not respond to these “Do Not Track” signals. To learn more about “Do Not Track,” please consult your local authorities’ websites (for the US: http://www.allaboutdnt.com)
If you are not satisfied, you have the right to lodge a complaint with your local data protection authority, which you can find by following the link: https://www.edpb.europa.eu/about-edpb/about-edpb/members_fr
For France, WeWard’s lead supervisory authority:
Commission nationale de l’informatique et des libertés (CNIL) 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 Tel.: 01 53 73 22 22
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, our Services or legal requirements. In the event of a substantial change that impacts your rights or requires your consent, you will be notified by appropriate means (for example, an in-app notification or by email) and, if necessary, we will request your consent again.
The updated version of the Privacy Policy will be posted on our Services with the revised date. We invite you to consult this Policy regularly to become aware of any changes.