Privacy Policy

This document was automatically translated from French. In the event of any discrepancies between the translated version and the original French version, the French version shall prevail.

Last updated June 6, 2025

WeWard SAS

WeWard SAS, data controller (hereinafter referred to as "WeWard SAS"), is a simplified joint-stock company with a share capital of €1203.32, headquartered at 111 Avenue Victor Hugo, 75016 Paris, registered under SIRET number 85361417000035 in the Paris Trade and Companies Register. This privacy policy applies to the use of the WeWard Mobile Application (the "Mobile Application"), access to the Services we provide, and aims to inform you about the collection, use, and, more generally, the processing of your personal data. All capitalized terms not defined within this document shall have the meaning assigned to them in the Terms of Use.

Please note that you must be of legal age to use the Services, in accordance with the applicable legislation in your country of residence. In particular, if you reside in a country of the European Economic Area, you must be at least 16 years old (or the minimum age allowed by your national legislation, if lower - 15 years in France, for example) to consent alone to the processing of your personal data.

1/ WeWard SAS collects and processes personal information, including your name, mobile phone number, email address, IP address, unique device identifiers, and other identification identifiers, photographs, and/or payment information. The legal basis for the processing lies in the performance of the contract (Terms of Use you have agreed to) concluded between you and the Company.

More specifically:

Data Purposes
Email address, unique identifiers related to the user account, consents, your time zone, language, date of birth (optional) Allowing connection to the Service (creating an account), authenticating users, and allowing proper use of the app. Knowing which time zone you are connected to (to reset your step counter at midnight), translating texts based on your language.
Number of steps and geolocation data (optional) Counting user steps, evaluating the distance traveled, verifying eligible physical activities, awarding rewards, positioning the user on the map, and displaying nearby Virtual Objects.
Number of consecutive days on the application Calculating and displaying the number of flames.
Number of consecutive days on the application, username, number of XP, number of Wards, number of steps, number of flames Ranking users within leagues, among friends, within championships and communities.
Name, first name, postal address, mobile phone Providing "physical" gifts (data transmitted to merchants who must deliver gifts), managing participation in contests, organizing events, assisting the delivery person in case of issues. Managing potential purchases.
IP address (city level) Providing the service by awarding points based on actions with partners or on the application.
History of transactions, winnings, and virtual items Providing you with the history of transactions, your winnings, and your collections.
In the case of a connection with the Facebook Connect or Google service: email address, name, first name, and profile picture of the Facebook or Google account Connecting to the service and completing the user profile.
Your identification data, including your email address, activity history on the app, messages you send us, issues encountered, the IP address Support, proper functioning of the app, and compliance with our commitments, sending transactional emails.
Email address Sending emails about offers, challenges, promotions, events related to earning Wards.
User-generated data, such as photos, images, comments on blogs, questions, messages, original works, and any other content or information you generate, transmit, or make available on the Service, as well as the associated metadata. Metadata includes information about how, when, where, and by whom the content was created, as well as formatting or modification details. Metadata also includes information you may add or may be added to your content, such as keywords, geographical or location data, and other similar information. Executing the service, ensuring the proper functioning of the application, and upholding our commitments, fostering the WeWard community.

As part of the Services, we may provide you with a feature allowing you to search for friends using their phone number, name, first name, username, or by using your Facebook and/or Google credentials. If you wish, you will be prompted to allow the WeWard Application to access your contacts or certain information associated with your Facebook and/or Google account, such as your name, profile picture, gender, and friend list. To the extent that you consent, this information will be processed by us to identify your friends who are users of the Application or enable you to invite friends to install the WeWard Application. WeWard SAS will never directly contact your non-user friends.

2/ With your consent (legal basis), we will collect information about your location and physical activity in order to (i) personalize the reward offers visible on the Application according to your profile and position, (ii) offer you collectible virtual items. You can activate and deactivate location services using your mobile device's operating system settings. However, when you disable this feature, you will only have access to limited features of the Application, and it will be technically impossible for us to collect information related to your physical activity and location, preventing the tracking and/or conversion of your movements into Wards. You can still earn Wards by completing other actions (watching ads, making purchases, participating in surveys, etc.).

With your consent, we also process:

Data Purposes
Data required for targeted advertising: account creation date, number of Wards, country, age (if provided), Advertising Identifier (information from your phone that you can reset), app usage, clicks, IP address Data transferred by WeWard to advertising partners for targeted advertising purposes. The non-exhaustive list of partners includes: Facebook, Google, Ironsource, Adcolony, Vungle, Applovin, Meta Platforms, TikTok, Unity, Adjoe, Adjust, etc.
Gender and date of birth (optional) Commercial targeting
Profile picture (optional) Updating the User profile

You can withdraw your consent at any time by contacting us at the email address indicated at the end of this Policy or directly from the Mobile Application settings.

3/ WeWard being a community of users, each person can view certain information related to other users (number of steps, number of Wards, number of flames, number of XP, Wards used to support charity projects, subscribers, CO2 saved). To avoid sharing this data, you can choose to make your account "private" in the application settings so that you are only visible to your subscribers and not to all users. You can also remove subscribers from your account at any time. Note that the number of XP remains visible to other Users even in private mode.

As WeWard is present on social networks, exchanged messages and posts are also analyzed and taken into account for the smooth running of the business.

The legal basis for these processes is WeWard's legitimate interest, noting that sending the requested photo is not obligatory and that a refusal has no consequences.

Other processes are based on WeWard's legitimate interest:

Data Purposes Legitimate Interest of the Company
Photograph of your ID, your IBAN, your date of birth, your name, your first name, and your address. Traceability and compliance with legal obligations in case of a bank transfer Being able to answer banks’ questions in the course of their legal obligations
Activity time and calories. Step data up to 12 months before the installation of the app. Providing statistics on the person's physical activity to improve their performance Providing additional content to users and enabling users to track their performance. Measuring the application's effectiveness on user motivation and developing motivational factors.
IP address (city level) Performing anonymous statistical studies on users' geolocation Knowing the number of users in each city
Email address Communicating with you, particularly to inform you about news, offers, challenges, promotions, updates of the Application, the Website, our Terms of Use, and/or this Privacy Policy, inviting you to events Providing additional information
Referral code, referrer-referral links, Referral Wards balance. Proposing referral offers Increasing the number of users and enhancing user experience
History of locations visited. Conducting anonymous statistics Knowing the number of users in certain locations
Device type and model, browser type, device identification, connection times, and pages visited. Ensuring the operation of the Application, detecting malfunctions to maintain quality, and for general anonymous statistics Maintaining the quality of the Service and improving general knowledge of customers, R&D
Statistical data (number of views, number of clicks, revenue generated) by partner. Conducting general statistics and improving knowledge of partners Transferring this information to partner merchants, in an anonymous form Improving knowledge and service performance, R&D Allowing partner merchants to evaluate WeWard's performance
Device identifier, cheating score*, number of referrals, all identifiers having used the WeWard account, the apps source of steps, all transactions with partners, the number and amount of transfers, surveys and executed offerwalls. Verifying suspicious actions Detecting fraud (people having multiple IPs for 1 phone, having an abnormal number of referrals, having the same IBAN for multiple accounts) Detecting fraud
Email exchanges and banking transaction data and reward distributions. Accessing your transaction and winnings history Complying with contractual and regulatory obligations, including for internal audits. Keeping records in case of disputes
Advertising identifier, app usage, impressions, clicks. Measuring the effectiveness of marketing campaigns Conducting business, R&D
Purchases made on the deals page Managing deals page and complying with accounting obligations Keeping commercial documents
File of requests for the exercise of rights (right of access, objection, deletion...) Responding to your requests within the legal timeframe Complying with our legal obligations (GDPR)

*WeWard uses a cheating detection algorithm whenever a user requests a transfer, a gift card, requests to exchange their Wards for certain gifts, or donates. The goal is to detect suspicious behaviors (e.g., artificial simulation of steps, artificial simulation of geolocation points, inconsistent ad viewing, falsification of purchases or actions performed with our partners, falsification of referrals). If the user employs such methods, their account will be suspended. They will be informed in advance.

All the data in the above table may be used by WeWard to fulfill its contractual and regulatory obligations, including for internal audits and to retain evidence in case of disputes.

4/ We work with third parties (local businesses, advertising networks, analytics providers, affiliate platforms, hereinafter referred to as "Partners") who may provide us with or receive information about you.

Data Purposes
Responses to surveys from survey companies (data for which WeWard is not responsible for processing). WeWard only sends a customer ID to the partner. Only when the user responds to a survey: data collected and processed by partner survey/research companies (e.g., Tap Research and Theorem Reach responsible for processing) for their own statistical study purposes. Questionnaires allowing users to earn Wards. The non-exhaustive list of partners includes: Tap Research, InBrain, Pollfish, etc.
Advertising identifier (information from your phone that you can reset) Providing rewards based on viewed videos (legal basis: performance of the contract) Offering targeted advertising (legal basis: consent): ID collected by WeWard and transferred to advertising partners for targeted advertising purposes. The non-exhaustive list of partners includes: Facebook, Ironsource, Adcolony, Vungle, Applovin, etc.
Unique identifier of your account and purchases made with partners Providing rewards based on viewed videos and purchases made (legal basis: performance of the contract) Providing statistics on the person's physical activity in order to improve their performance.
Unique identifier (email, database identifier) and user sessions (visited pages, clicks...) Providing statistics on the application usage (visited pages, clicks, retention...) and allowing support and engineers to resolve bugs to improve the Application's performance, R&D. The non-exhaustive list of partners includes: Amplitude, Google (Firebase), Datadog, etc.

Users for whom their country of residence law allows it can obtain the complete list of these partners upon request at the email address provided at the end of this Policy. They can obtain the identity of the third parties to whom we have communicated their personal data during the previous calendar year for direct marketing purposes.
Please note that we do not accept requests by phone, postal mail, or fax, and we are not responsible for mislabelled, misaddressed, or incomplete requests.

Recipients

Your personal data are processed by WeWard within the framework of the purposes described above, and for this purpose, WeWard may transmit your data to third parties belonging to the following categories:

1/ To our subcontractors: WeWard may engage trusted partners acting as subcontractors, particularly:

These third parties are contractually prohibited from using the personal data transmitted by WeWard, except to provide the services for which they have been mandated, and they are required to maintain the security and confidentiality of your information with protection equal to or greater than that offered by WeWard. A contract compliant with Article 28 of the GDPR is concluded with each of our subcontractors. You can obtain a list of these subcontractors upon simple request at the email address provided at the end of this Policy.

2/ To our Partners: WeWard ensures as much as possible that the Services are offered transparently by the Partners with whom WeWard collaborates. For example, in this capacity, Partners may request WeWard for confirmation of a click to allow you to benefit from the services offered (Rewards). WeWard ensures that Partners with access to your personal data only process it for the purposes described at the time of converting the Wards into Rewards.

You can obtain additional information about these Partners by sending an email to the address indicated below.

3/ To our affiliated companies

In the context of providing our Services and for the purposes described in this Policy, we may share your personal data with our affiliated companies or members of our group, located within the European Economic Area or in the United States, when necessary to ensure the continuity of our operations or improve our Services. These transfers are governed in accordance with applicable regulations.

‍In any case: apart from the hypotheses described above, WeWard will only disclose your personal data without notice if required by the applicable regulations, or if such disclosure is necessary to comply with the law or the applicable regulations, a judicial procedure, and/or an administrative or judicial injunction; to protect and defend the rights or property of the Company and/or to act in urgent circumstances to protect the personal safety of Application Users or third parties. WeWard will never provide the list of its Users to third parties without your prior consent. Subject to your express prior agreement, WeWard's partners may contact you directly or through us to present commercial offers to you.

Security

WeWard guarantees the processing of your data in complete confidentiality and security by implementing the necessary technical and organizational measures to preserve their security, confidentiality, and integrity under optimal conditions.

Only personnel strictly authorized by WeWard will have access to your data. No unauthorized third party shall have access, except as required by law or contractual obligation of the data controller.

The security risk is inherent to any technology related to the Internet and information. We strive to ensure the security of personal data but cannot guarantee it.

Retention Period

WeWard keeps your personal data for the period necessary to provide the Services. After that, the data are kept in active storage for a maximum of 7 days after account deletion or after 24 months of inactivity (then archived for 5 years), subject to legal and regulatory retention obligations.

Specifics:

Data Retention
IP address The IP address is retained for the duration of the relationship. It is deleted after 3 months of inactivity on the Application or 7 days after account deletion.
Information indicating you participated in a survey WeWard only retains the fact that you earned x Wards for a survey on such day and at such time, for the duration of the relationship, 7 days after account deletion, and/or after 24 months of inactivity.
Facebook or Google username, profile picture, gender, and friend list WeWard does not retain the friend list. You can delete the Facebook-Google/WeWard link from your Facebook/Google account. WeWard retains the link for as long as the account exists.
Geolocation data Location data related to the collection of a virtual object are kept as long as your account is active, 7 days after account deletion, and/or after 24 months of inactivity. Geolocation points are not retained.
Identity document 1 month after uploading your identity document. The information that your identity document is validated is retained for the duration of the relationship, 7 days after account deletion, and/or after 24 months of inactivity.
Cheating score WeWard retains the anonymized cheating score after your account is deleted.
Messages (content) 4 years
File of requests to exercise GDPR rights 3 years from the end of the calendar year of your request. 1 month for a copy of your identity document if it was requested.

COOKIES/TRACKERS

Trackers are small text files (known as "cookies" in English) placed on your device by your browser and/or the websites and applications you visit, including the site published by WeWard.

Mobile applications do not use cookies as a website would. They use SDKs (Software Development Kits).

Cookies and SDKs are primarily used to enable the site and the application to function or to function more efficiently, but also to provide information to partner website owners or to improve your user experience and display personalized content or advertisements.

On the site www.wewardapp.com, we only use a functional cookie (Datadog) to identify malfunctions.

No cookie is placed by third parties, and WeWard does not use any advertising cookies on this site.

On the WeWard app, we use:

  • trackers necessary for the application to function properly and improve your experience: trackers (Facebook Sign-In, Apple Sign-In, Google Sign-In, Firebase) to recognize you upon entering the application, and a tracker "IPbase" to identify your country and offer you a version of the app corresponding to your country and language (trackers necessary for providing a service you request).

    We also use trackers (Firebase Crashlytics, Datadog) to detect application malfunctions.

  • The CodePush tracker to update the application and which does not collect any personal data.

  • Trackers (Firebase) allow managing notifications. You can disable notifications in your device settings.

  • Auditing trackers, not subject to consent (Amplitude and Firebase) and strictly necessary for providing the service (measurement of performance, detection of navigation problems, optimization of technical performance of the site or its ergonomics, estimating the power of servers needed, analyzing viewed content), which meet consent exemption criteria.

  • Advertising trackers (Ironsource, Applovin, Adcolony, Unity, A4G, Bidmachine, DT Exchange, Google AdMob, InMobi, Litfoff, Meta, Mintegral, Ogury, Verve, Pangle, Line, App Prizes, Ayet Studio, MyChips, Tapjoy, Bitlabs, CPX, PrimeSurvey, TapResearch, Theorem Reach) collect data on the performance and exposure of advertising campaigns and serve advertising or surveys as you wish to obtain rewards.

  • Attribution trackers (Adjust and Facebook Ads) enable the analysis and management of acquisition campaigns. You can consult the Facebook ad settings and update your preferences at any time.

You can opt out of one or more trackers by sending your request to privacy@wewardapp.com.
You can contact WeWard at any time (privacy@wewardapp.com) to access the privacy policies related to these trackers.

The information collected by the trackers is retained for a maximum of 6 months.

The processing of data from these cookies is carried out in accordance with our Cookie Policy that we invite you to consult.

Transfer(s) of Data Outside the European Union

As part of providing the Services, WeWard may use analytics and notification providers whose headquarters or servers are located in non-European Union countries and have not been subject to an adequacy decision of the European Commission. These countries (USA, Madagascar, UK) ensure a level of protection lower than the framework existing within the European Union. In these cases, WeWard ensures that this transfer is carried out under conditions compliant with the regulations in force by taking all appropriate measures and within a legal, technical, and operational framework aimed at ensuring the confidentiality and security of this data. These third parties undertake to respect the European Commission's Standard Contractual Clauses.

You can obtain information about the transfers by sending an email to the address indicated below.

Deletion of Data

You can delete your data at any time by going to the application, on the profile page, via the "delete my account" button, or by sending an email to contact@wewardapp.com. These data will be fully archived within 7 days and deleted after 3 months.

Third-Party Sites and Services

Our Services may contain links to websites, mobile applications, or online services operated by third parties. We may also integrate certain content or features from these third parties. These links or integrations do not constitute approval or affiliation with these third parties.

We exercise no control over these third-party sites, applications, or services and cannot be held responsible for their practices regarding personal data protection. We recommend consulting each of these third parties' privacy policies to understand how your personal data are processed there.

Your Rights

In accordance with the applicable regulations, you have the right to access, object to, rectify, erase your personal data, as well as the right to limit processing, data portability, and define the fate of your data in case of death. Finally, regarding profiling operations, you have the right to object to the use of such a process. You can also withdraw any prior consent granted. However, exercising some of these rights (opposing profiling, withdrawing consent to geolocation) may result in WeWard being unable to provide you access to the Application or to use all or part of the Services.

These rights can be exercised by contacting us at the following address: privacy@wewardapp.com. Furthermore, you are reminded that you can exercise certain of these rights directly through your account settings (deleting documents, deleting optionally requested information, and even total deletion of your account). You can delete the Facebook-Google/WeWard link from your Facebook/Google account.

You can unsubscribe from commercial emails by following the unsubscription instructions provided at the bottom of these emails, or by contacting us. Please note that if you choose not to receive marketing emails, you may still continue to receive service-related emails or other non-commercial communications.

Advertising Choices. In some cases, you can limit the use of your information for targeted advertising based on your interests by adjusting the following options:

  • Browser Settings. You can modify your Internet browser settings to block third-party cookies.

  • Privacy-Focused Browsers or Extensions. You can use privacy-oriented browsers and/or extensions (modules) that block advertising tracking technologies.

  • Platform Settings. Some platforms like Google and Facebook offer targeted advertising opt-out features, accessible at the following addresses:

  • Tools Provided by the Advertising Industry. You can also choose not to receive targeted advertisements from companies participating in the following opt-out programs:

  • Mobile Settings. You can configure your mobile device settings to restrict the use of your device's advertising identifier for targeted advertising purposes.

Please note that these opt-out settings must be applied separately on each device and browser you use.
We cannot guarantee that the companies we collaborate with participate in the mentioned opt-out programs.

Do Not Track. Some Internet browsers may be configured to send "Do Not Track" signals to the online services you visit. Currently, we do not respond to these "Do Not Track" signals. For more information about "Do Not Track," please consult the websites of your local authorities (for the US: http://www.allaboutdnt.com).

If your concerns are not addressed, you have the right to lodge a complaint with the local data protection authority which you can find by following the link below: https://www.edpb.europa.eu/about-edpb/about-edpb/members_fr

For France, the lead authority of WeWard:
National Commission for Informatics and Freedoms (CNIL) 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 Phone: 01 53 73 22 22

Modifications to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect the evolution of our practices, Services, or legal requirements. In the event of a substantial modification impacting your rights or requiring your consent, you will be informed by appropriate means (for example, a notification in the application or by email), and if necessary, we will seek your consent again.

The updated version of the Privacy Policy will be published on our Services with the updated revision date. We invite you to regularly consult this Policy to be aware of any modifications.

Scan the QR code with your phone to download Weward’s app