Personal Data Protection Policy

This document was automatically translated from French.
In the event of any discrepancies between the translated version and the original French version, the French version shall prevail.

Last updated November 5, 2026

WeWard SAS

WeWard SAS, data controller (hereinafter referred to as "WeWard SAS" or "WeWard") is a simplified joint-stock company with share capital of €1,203.32, whose registered office is 111 Avenue Victor Hugo 75016 Paris, registered under SIRET number 85361417000035 with the Paris Trade and Companies Register. This personal data protection policy applies to the use of the WeWard Mobile Application (the "Mobile Application") and the WeWard browser extension (the "Extension"), to access the Services we provide, and is intended to inform you about the collection, use and more broadly the processing of your personal data. All capitalized terms not defined herein shall have the meaning given to them in the Terms and Conditions.

Please note that you must be of the legal age required to use the Services, in accordance with the applicable law in your country of residence. In particular, if you reside in a country of the European Economic Area, you must be at least 16 years old (or the minimum age permitted by your national legislation, if lower — 15 years in France for example) to be able to consent alone to the processing of your personal data.

1/ WeWard SAS collects and processes personal information including, in particular, your name, your mobile phone number, your e-mail address, your IP address, unique device identifiers and other identifying identifiers, photographs and/or payment information. The legal basis for the processing lies in the performance of the contract (Terms and Conditions to which you have agreed) concluded between you and WeWard.

More specifically:

Data Purposes
E-mail address, unique identifiers related to the user account, consents, your time zone, language, date of birth (optional), phone number. Enable access to the Service (create an account), authenticate users and enable proper use of the application, determine which time zone you are connected to (to reset your step counter from midnight), translate texts according to your language
Number of steps and geolocation data (optional) Count the user's steps, estimate distance travelled, verify eligible physical activities, award rewards, position the user on the map and display nearby Virtual Objects as well as the zones explored by the user on the map
Number of consecutive days on the application Calculate and display the number of flames
Number of consecutive days on the application, username, XP amount, number of Wards, number of steps, number of flames Rank users within leagues, among their friends, within championships and communities.
Last name, first name, postal address, mobile phone Provide "physical" gifts (data transmitted to merchants who must deliver gifts), manage participation in sweepstakes, organize events, assist the delivery person in case of issues. Manage any purchases.
IP address (city-level) Provide the service by awarding points based on actions at partners or on the application.
Transaction history, gains and virtual items Provide you with the history of your transactions, gains and collections.
In the case of a Google or Apple login: e-mail address, name, first name and profile picture of the account. Login to the service and completion of the user profile.
Your identification data, including your e-mail address, your activity within the app, the messages you send us, issues encountered, IP address Support, proper functioning of the app and compliance with our commitments, sending transactional e-mails.
Phone number, last name, first name, IP address, technical information related to the mobile device and content of messages sent Sending communications related to the Service
E-mail address Sending e-mails about offers, challenges, promotions, events related to earning Wards.
User-generated data, such as photos, images, blog comments, questions, messages, original works and any other content or information that you generate, transmit or make available on the Service, as well as the associated metadata. Metadata includes information about how, when, where and by whom the content was created, as well as formatting or modification of it. Metadata also includes information you may add, or that may be added to your content, such as keywords, geographic or location data and other similar information. Execution of the service, proper functioning of the application and compliance with our commitments, animation of the WeWard community.
Extension: domain names of Partner Merchant sites visited, responses to Extension proposals, choices made on the Partner Merchant cookie banner (read, never modified), technical data (installation status, permission level, browser, Extension version, deactivation or uninstallation). Detect Partner Merchants and propose the Wardback, link purchases to the Account and attribute Wards, comply with affiliate platform rules (no intervention when another partner brought the user to the site), handle claims. Domains of sites that are not Partner Merchants are not retained. Browsing data is never sold, nor used for targeted advertising or to train models.

As part of the Services, we may provide a feature that allows you to search for friends using their phone number, last name, first name, username, or by using your Facebook and/or Google credentials. If you wish, you will be asked to authorize the WeWard Application to access your address book or certain information associated with your Facebook and/or Google account, such as your name, profile picture, gender and friends list. To the extent you consent, this information will be processed by us to identify your friends who are users of the Application or to allow you to invite friends to install the WeWard Application. WeWard SAS will never contact your non-user friends directly.

2/ With your consent (legal basis), we will collect information about your location and your physical activity in order to (i) personalize the reward offers visible in the Application according to your profile and position, (ii) offer you virtual objects to collect, and (iii) display on the map the zones you have explored. For purpose (iii), and only if you authorize it in your device settings, your location may also be collected when the Application is closed; in that case, we retain only the areas of the map you have unlocked, and not your precise position. You can enable and disable location (including background location) using your mobile device operating system settings. However, if you disable this feature, you will have access only to limited functionality of the Application and it will be technically impossible for us to collect information about your physical activity and location, which will prevent tracking and/or converting your movements into Wards. You will still be able to earn Wards by performing other actions (watching ads, making purchases, participating in surveys, etc.).

With your consent, we also process:

Data Purposes
Data necessary for targeted advertising and campaign performance measurement: account creation date, number of Wards, country, age (if provided), advertising identifier (information from your phone that you can reset), app journey, clicks, IP address, web journey, device data (such as OS type and version, manufacturer and model, browser type and version, screen resolution, language settings), unique identifiers, IP address, e-mail address, survey responses, account identifier, e-mail address Improve our understanding of usage and service performance, produce general statistics, aggregate and produce anonymized results in defense of WeWard's interests. Data transferred by WeWard to advertising partners for targeting and performance measurement. Non-exhaustive list of partners: Facebook, Google, Ironsource, Adcolony, Vungle, Applovin, Meta Platforms, TikTok, Unity, Adjoe, Adjust…
Gender and date of birth (optional) Commercial targeting
Profile picture (optional) Update user profile
Extension: usage events (screens viewed, clicks, merchant sites where a proposal was displayed) linked to your Account Measure and improve the Extension
Extension: domain names of non-partner merchant sites visited, transmitted without link to your Account or your device Count visits in an aggregated and anonymous way in order to identify sites where an alternative should be proposed

You may withdraw your consent at any time by contacting us at the e-mail address at the end of this Policy or directly from the Mobile Application settings or, for the Extension, from its settings (Privacy Settings).

3/ As WeWard is a user community, each person can view certain information related to other users (number of steps, number of Wards, number of flames, amount of XP, Wards used to support charitable projects, their followers, CO2 saved). To avoid sharing these data, you can choose to make your account "private" in the Application "settings" so that you are visible only to your followers and not to all users. You can also remove followers from your account at any time. Note: XP remains visible to other users at all times even in private mode.

WeWard being present on social networks, messages exchanged and posts are also analyzed and taken into account for the proper running of the company.

The legal basis for these processes is WeWard's legitimate interest, it being specified that sending the requested photo is not mandatory and that refusal has no consequences.

Other processes are based on WeWard’s legitimate interest:

Data Purposes Company legitimate interest
Photograph of your identity document, your IBAN, your date of birth, your name, your first name and your address. Traceability and compliance with legal obligations in the case of a bank transfer Be able to respond to bank inquiries in the context of their legal obligations
Activity time and calories. Step data up to 12 months before app installation. Provide statistics on the person's physical activity to improve their performance Provide additional content to users and allow the user to track their performance. Measure the application's effectiveness on user motivation and develop motivational factors.
IP address (city-level) Conduct anonymous statistical studies on users' geolocation Know the number of users in each city
E-mail address Communicate with you, notably to inform you of news, offers, challenges, surveys carried out by WeWard, promotions, updates to the Application, the Website, our Terms and Conditions and/or this Privacy Policy, invitation to events Provide additional information, improve knowledge and performance of the service, R&D
Referral code, referrer–referee links, Wards balance of the referred. Propose referral offers Increase the number of users and enhance user experience
History of places visited. Conduct anonymous statistics Know the number of users in certain locations
Mobile device type and model, browser type, device identification, connection times and pages viewed, mobile device OS and version, and type of network connection Enable the Application to function, detect malfunctions to maintain quality and for general anonymous statistics Maintain Service quality and improve general customer knowledge, R&D
Statistical data (number of views, number of clicks, revenue generated) per partner. Produce general statistics and improve knowledge of partners. Transfer of this information to merchant partners in an anonymized form Improve service knowledge and performance, R&D. Allow merchant partners to evaluate WeWard's performance
Device identifier (clear and hashed), device technical information, name, first name, IP address, network data, telemetry data, behavioral signals (sampled interactions such as clicks and touch contacts), temporal information related to session initiation (e.g.: account creation, login, session start), cheat score*, number of referees, all identifiers that have used the WeWard account, source apps for steps, all transactions with partners, number and amount of transfers, surveys and offerwall completed. Verify suspicious actions. Detect fraud (e.g.: multiple IPs for one phone, abnormal number of referees, same IBAN for multiple accounts) Secure the Application and its reward mechanisms, prevent abuse and fraud, ensure fairness between users, protect WeWard's economic interests and ensure proper functioning of the Services, which may require the use of specialized technical service providers in fraud prevention.
Email exchanges and banking transaction and reward distribution data. Access history of your transactions and your rewards Respect contractual and regulatory obligations, including for internal audits. Retain evidence in case of disputes
Advertising identifier, in-app journey, impressions, clicks. Measure marketing campaign effectiveness Conduct business, R&D
Purchases made on the Top Deals page Manage the Top Deals page and comply with its accounting obligations Retain commercial documents
File of requests to exercise rights (access, objection, deletion…) Respond to your requests within the legal time limit Comply with our legal obligations (GDPR)
Identification data (name, first name), contact data (e-mail address, billing and shipping addresses), technical data (IP address) and transactional data related to voucher purchases. Detection, prevention and securing of fraud related to payment operations carried out when purchasing vouchers on the application. Secure payment operations, protect WeWard's economic interests, prevent payment fraud and limit the risk of losses and payment disputes.
Extension installation and permission status, installation rewards obtained, responses to proposals. Prevent fraud (e.g.: use of multiple Accounts or repeated installations to obtain rewards), present the Extension in the Application and by e-mail. Secure our reward mechanisms, improve the Service and inform users of its features.

*An anti-cheat detection algorithm is used by WeWard as soon as a user requests a transfer, a gift card, requests to exchange their Wards for certain rewards, or makes a donation. The aim is to detect suspicious behavior (e.g.: artificial simulation of steps, artificial simulation of geolocation points, incoherent viewing of ads, falsification of purchases or actions carried out at our partners, falsification of referrals). If the user uses such methods, their account will be suspended. They will be notified in advance.

All the data in the table above may be used by WeWard to comply with its contractual and regulatory obligations, including for internal audits and to retain evidence in the event of disputes.

4/ We work with third parties (local merchants, advertising networks, analytics providers, affiliate platforms hereinafter "Partners") that may provide us with or receive information about you.

Data Purposes
Responses to questionnaires from survey companies (data for which WeWard is not the data controller). WeWard only sends a customer ID to the partner. Only when the user responds to a survey: data collected and processed by partner survey/research companies (for example Tap Research and Theoremreach acting as data controllers) for a statistical study purpose of their own. Questionnaires allowing the user to earn Wards. Non-exhaustive list of partners: Tap Research, InBrain, Pollfish…
Advertising identifier (information from your phone that you can reset) Provide rewards based on videos watched (legal basis: performance of the contract). Offer targeted advertising (legal basis: consent): ID collected by WeWard and transferred to advertising partners for targeting purposes. Non-exhaustive list of partners: Facebook, Ironsource, Adcolony, Vungle, Applovin…
Unique identifier of your account and purchases made with partners Provide rewards based on videos watched and purchases made (legal basis: performance of the contract). Provide statistics on the person's physical activity in order to improve performance.
Unique identifier (e-mail, database identifier) and user sessions (pages visited, clicks…) Provide statistics on app usage (pages viewed, clicks, retention…) and enable support and engineers to resolve bugs to improve Application performance, R&D. Non-exhaustive list of partners: Amplitude, Google (Firebase), Datadog…
Identifier linked to your Account and purchase tracking information, transmitted when you activate Wardback. Track your purchase on the Partner Merchant's site and attribute your Wards (legal basis: performance of the contract). Affiliate platforms (e.g., CJ, Impact, Awin, Rakuten Advertising, Tradedoubler) and Partner Merchants process these data as independent data controllers, according to their own privacy policies. Their tracking cookies depend on the consent collected by the Partner Merchant.

Users for whom the law of their country of residence permits may obtain the exhaustive list of these partners on simple request to the e-mail address indicated at the end of this Policy. They may obtain the identity of third parties to whom we have disclosed their personal data during the previous calendar year for direct marketing purposes.
Please note that we do not accept requests by phone, postal mail or fax, and that we are not responsible for requests that are mislabelled, misaddressed or incomplete.

Recipients

Your personal data are processed by WeWard for the purposes described above and, for this purpose, WeWard may transmit your data to third parties belonging to the following categories:

1/ To our subprocessors: WeWard may engage trusted partners acting as subprocessors, in particular:

These third parties are contractually prohibited from using the personal data transmitted by WeWard except to provide the services for which they were engaged, and they are required to maintain the security and confidentiality of your information with protection equal to or greater than that offered by WeWard. A contract compliant with Article 28 of the GDPR is concluded with each of our subprocessors. You may obtain the list of these subprocessors on simple request to the e-mail address indicated at the end of this Policy.

2/ To our Partners: WeWard ensures as far as possible that Services are offered transparently by the Partners with which WeWard collaborates. For example, Partners may ask WeWard for confirmation of a click in order to allow you to benefit from the offered Services (Rewards). They may also receive the information necessary to validate an action or a challenge so that you can be awarded Wards. WeWard may also transmit certain data to payment partners to fight payment-related fraud, notably when purchasing vouchers.
WeWard ensures that the data it transmits to Partners are provided only for the purposes necessary for the provision of the Services. Any processing carried out beyond these purposes is exclusively the relationship between you and the Partner, in accordance with their privacy policy.

You can obtain additional information about these Partners by sending an email to the address indicated below.

3/ To our affiliated companies

In the context of providing our Services and for the purposes described in this Policy, we may share your personal data with our affiliated companies or group entities located within the European Economic Area or the United States, when necessary to ensure continuity of operations or improve our Services. These transfers are governed in accordance with applicable law.

In any event: apart from the scenarios described above, WeWard will disclose your personal data without prior notice only if required by applicable law, or if such disclosure is necessary to comply with the law or regulation in force, a legal procedure and/or an administrative or judicial order; to protect and defend the Company's rights or property; and/or to act in urgent circumstances to protect the personal safety of Application Users or third parties. WeWard will never disclose its Users list to third parties without your prior consent. With your express prior agreement, WeWard partners may contact you directly or through us to offer commercial offers.

Security

WeWard processes your data with confidentiality and security by implementing the necessary technical and organizational measures to optimally preserve their security, confidentiality and integrity.

Only persons strictly authorized by WeWard will have access to your data. No unauthorized third party may access them, except under legal obligation or union obligation incumbent on the data controller.

Security risk is inherent to any Internet and information-related technology. We do our best to ensure the security of personal data but cannot guarantee it.

Retention period

WeWard retains your personal data for the period necessary to provide the Services. Afterwards, data are kept in the active database for a maximum of 7 days after account deletion, or after 24 months of inactivity (then 5 years in intermediate archiving), subject to legal and regulatory retention obligations.

Particulars:

Data Retention
IP address The IP address is retained for the duration of the relationship. It is nevertheless deleted after 3 months of inactivity on the Application or 7 days after deletion of your account.
Information that you took part in a survey WeWard retains only the fact that you won x Wards for a survey on a given day and at a given time, and this for the duration of the relationship, 7 days after account deletion, and/or after 24 months of inactivity.
Facebook or Google username, Facebook or Google profile picture, gender and Facebook or Google friends list WeWard does not keep the friends list. You can remove the Facebook–Google–WeWard link from your Facebook/Google account. WeWard retains the link for as long as the account exists
(Geo)location data Location data related to collecting a virtual object or exploring the map are retained as long as your account is active, 7 days after account deletion, and/or after 24 months of inactivity. Geolocation points are not retained.
Identity document 1 month after uploading your identity document. The information that your identity document is validated is retained for the duration of the relationship, 7 days after account deletion, and/or after 24 months of inactivity.
Cheat score WeWard retains the anonymized cheat score after deleting your account.
Messages (content) 4 years
File of GDPR rights exercise requests 3 years from the end of the calendar year of your request. 1 month for the copy of your identity document if it was requested.

COOKIES/TRACKERS

Trackers are small text files (called "cookies" in English) placed on your device by your browser and/or the websites and applications you visit, including the site operated by WeWard.

Mobile applications do not use cookies as a website would. They use SDKs (software development kits).

Cookies and SDKs are mainly used to allow the site and the app to function, or function more efficiently, but also to provide information to partner site owners or to improve your user experience and to show you personalized content or ads.

On the site www.wewardapp.com, we only use a functional cookie (Datadog) to detect malfunctions.

No cookie is set by third parties and WeWard does not use any advertising cookie on this site.

On the WeWard app, we use:

  • trackers necessary for the application to function correctly and improve your experience: trackers (Facebook Sign In, Apple Sign In, Google Sign In, Firebase) to recognize you when you arrive on the application and an "IPbase" tracker to identify your country and offer a version of the app corresponding to your country and language (trackers necessary for the provision of a service you request).
    We also use trackers (Firebase Crashlytics, Datadog) to detect application malfunctions.
  • The CodePush tracker to update the application which does not collect any personal data.
  • Trackers (Firebase) to manage the sending of notifications. You can disable notifications in your device settings.
  • Audience measurement trackers, not subject to consent (Amplitude and Firebase) and strictly necessary for the provision of the service (performance measurement, detection of navigation problems, optimization of technical performance or ergonomics, estimation of server capacity needed, analysis of content viewed), and which meet exemption criteria from consent.
  • Advertising trackers (Ironsource, Applovin, Adcolony, Unity, A4G, Bidmachine, DT Exchange, Google AdMob, InMobi, Litfoff, Meta, Mintegral, Ogury, Verve, Pangle, Line, App Prizes, Ayet Studio, MyChips, Tapjoy, Bitlabs, CPX, PrimeSurvey, TapResearch, Theorem Reach) collect data on campaign performance and exposure and serve ads or surveys when you choose to access them to earn rewards.
  • Attribution trackers (Adjust and Facebook Ads) to analyze and manage acquisition campaigns. You can consult Facebook ad settings and update your preferences at any time.

On the WeWard Extension, we use an affiliation cookie set only when you activate Wardback, so that the affiliate platform can attribute your purchase to WeWard and your Wards can be allocated. It is not used for advertising purposes.

You can object to one or more trackers by sending your request to privacy@wewardapp.com.
You can contact WeWard at any time (privacy@wewardapp.com) to access the privacy policies related to these trackers.

Information collected by trackers is retained for a maximum of 6 months.

The processing of data from these cookies is carried out in accordance with our Cookie Policy, which we invite you to consult.

Transfers of data outside the European Union

In the context of providing the Services, WeWard may use analytics, mapping and notification providers whose headquarters or servers are located in countries that are not members of the European Union and that have not received an adequacy decision from the European Commission. These countries (USA, Madagascar, UK) provide a level of protection lower than the framework existing within the European Union. In such cases, WeWard ensures that the transfer is carried out in conditions compliant with applicable regulations by taking all appropriate measures and under a legal, technical and operational framework to ensure the confidentiality and security of such data. These third parties commit to respect the European Commission’s Standard Contractual Clauses.

You can obtain information about transfers by sending an email to the address indicated below.

Deletion of data

You can delete your data at any time by going to the app, to the profile page, via the "delete my account" button or by sending an e-mail to contact@wewardapp.com. These data will be archived in full within 7 days and deleted after 3 months.

Third-party sites and services

Our Services may contain links to websites, mobile applications or online services operated by third parties. We may also integrate certain content or features from these third parties. These links or integrations do not constitute an endorsement or affiliation with these third parties.

We exercise no control over those third-party sites, applications or services and cannot be responsible for their personal data protection practices. We recommend that you consult the privacy policy of each of these third parties to understand how your personal data is processed there.

Your rights

In accordance with applicable law, you have the right of access, objection, rectification, erasure of your personal data as well as the right to restrict processing, data portability and to define the fate of your data in the event of death. Finally, regarding profiling operations, you have the right to object to the use of such a process. You may also withdraw a previously given consent. However, exercising some of these rights (opposition to profiling, withdrawal of consent to geolocation) may make it impossible for WeWard to provide you access to the Application or the use of all or part of the Services.

These rights may be exercised by contacting us at the following address privacy@wewardapp.com. In addition, you are reminded that you can exercise some of these rights directly via your account settings (delete documents, delete optionally requested information and even general deletion of your account). You can remove the Facebook–Google–WeWard link from your Facebook/Google account.

You can unsubscribe from commercial emails by following the unsubscribe instructions at the bottom of those emails, or by contacting us. Please note that if you choose not to receive marketing emails, you may still continue to receive service-related or other non-commercial communications.

Advertising choices. In some cases you can limit the use of your information for interest-based advertising by configuring the following options:

  • Browser settings. You can change your web browser settings to block third-party cookies.

  • Privacy-focused browsers or extensions. You can use privacy-focused browsers and/or extensions (plugins) that block advertising tracking technologies.

  • Platform settings. Some platforms like Google and Facebook offer features to opt out of interest-based ads, accessible at:

  • Industry opt-out tools. You can also choose not to receive interest-based ads from companies in the following opt-out programs:

  • Mobile settings. You can configure your mobile device settings to restrict the use of your device advertising identifier for interest-based advertising.

Please note that these opt-out settings must be applied separately on each device and each browser you use.
We cannot guarantee that the companies we work with participate in the opt-out programs mentioned above.

Extension proposals. You can at any time close a proposal, refuse the proposed Wardback, or disable or uninstall the Extension from your browser.

Do Not Track. Some web browsers can be configured to send "Do Not Track" signals to online services you visit. Currently, we do not respond to these "Do Not Track" signals. To learn more about "Do Not Track", please consult your local authorities' websites (for the US: http://www.allaboutdnt.com)

If you are not satisfied, you have the right to lodge a complaint with the local data protection authority, which you can find by following this link: https://www.edpb.europa.eu/about-edpb/about-edpb/members_fr

For France, the lead supervisory authority for WeWard:
Commission nationale de l’informatique et des libertés (CNIL) 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 Tel.: 01 53 73 22 22

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, our Services or legal requirements. In the event of a material change that affects your rights or requires your consent, you will be notified by appropriate means (for example, notification in the application or by e-mail) and, if necessary, we will request your consent again.

The updated version of the Privacy Policy will be posted on our Services with the revised date. We invite you to consult this Policy regularly to be informed of any changes.

Scan the QR code with your phone to download Weward’s app