Privacy Policy

This Privacy Policy describes how the Wildone application (hereinafter the "Application") processes your personal data, as well as how we handle the messages you send us directly (section 9). Wildone is published by Roman Wenzel Brunaux (auto-entrepreneur, SIRET 108 093 105 00014), whose contact details appear in section 16 (hereinafter "we", "our", the "Publisher").

Wildone was designed on a local-first approach: your data stays on your device and we have no access to your content. This policy explains, in full transparency, what that means in practice — including for users who have subscribed to Wildone Premium.

This policy complies with Regulation (EU) 2016/679 (GDPR), the French Data Protection Act and the requirements of Apple's App Store Review Guidelines.

1. Data controller

The data controller within the meaning of the GDPR is:

• Publisher: Roman Wenzel Brunaux (auto-entrepreneur, SIRET 108 093 105 00014)
• Address: 8 rue du dessus, 52360 Orbigny-au-Mont, France
• Contact email: contact@wildone.app
• Telephone: +33 6 19 96 15 49
• Legal representative: Roman Wenzel Brunaux (natural person, auto-entrepreneur)

Wildone has not appointed a Data Protection Officer (DPO), not being required to do so. Any question about your data can be sent to us by email.

2. Data processed by the Application

2.1 Data entered by the user (local storage)

Wildone processes only the data you enter or generate by using the app. That data never leaves your device, unless you explicitly enable iCloud sync (see section 4).

Data processed locally includes:

• Your tasks: title, icon, category (group), effort level, importance, completion status, creation date.
• Your recurring tasks: title, icon, category, recurrence rule (weekly, periodic, monthly, yearly), last run dates.
• Your rewards: title, icon, cost in points, status (favourite, owned, used).
• Your categories (groups): name, icons, settings (pays points, has a difficulty level).
• Your statistics: number of tasks completed per day, points earned per day, cumulative total of tasks completed.
• Your in-app profile: display name, profile picture (if you add one).
• Your appearance preferences: theme, accent colour, aura (style, variant, custom colours), language.
• Your notification preferences: daily reminders, recurring task reminders, quiet hours, etc.
• Your sort and filter preferences: sort mode, filter by effort.

2.2 Data NOT collected

The Application does not collect:

• advertising identifiers (IDFA);
• location data (GPS, Wi-Fi, cell towers);
• biometric data;
• information from your address book, calendar or photos (other than the profile picture you explicitly choose);
• data from other applications;
• sensor data (accelerometer, gyroscope, etc.);
• usage statistics, telemetry or behavioural analytics;
• IP addresses (the Application makes no request to our servers — for visits to the wildone.app website, see section 9.6);
• payment or banking information (handled exclusively by Apple — see section 5).

2.3 Technical data

Wildone makes no network call to servers of our own; we have no servers. The only possible network exchanges are:

• iCloud sync with Apple's servers (if you enable it);
• StoreKit communications with Apple for Premium purchases;
• updating the Application through the App Store.

3. Local storage on your device

All the data listed above is stored on your device through standard iOS mechanisms:

• UserDefaults (iOS system preferences) for most of the data: tasks, rewards, statistics, profile, preferences, etc.
• A shared App Group (group.romanwenzelbrunaux.wildone) so that the widget and the App Intents can reach the same data as the main app, on your device only.
• The Application's file system (iOS sandbox) for any backups you export manually.

That data is accessible only to the Application, in accordance with the iOS security model (sandboxing). It is encrypted at rest by iOS when your device is locked. It is deleted in full when you uninstall the Application.

Legal basis for processing: performance of the service you requested by using the Application (article 6.1.b of the GDPR).

4. iCloud sync (optional, Premium only)

If you enable iCloud sync in Settings → Data in the Application, your data is synchronised between your devices through the iCloud Key-Value Store (Apple's key-value storage service).

• This feature is opt-in: off by default.
• It is reserved for Premium users (see section 5).
• The data travels through and is stored on Apple's iCloud servers, under your own personal iCloud account.
• We have no access to that data. Encryption in transit and at rest, as well as server management, are Apple's responsibility.
• Apple acts here as a technical infrastructure provider for your own iCloud account; we are not joint controllers with Apple for that processing.
• For more information, see Apple's privacy policy and Apple's iCloud terms.

You can turn sync off at any time from the Application's settings. You can also delete the data stored on iCloud from iOS Settings → [Your Apple Account] → iCloud → Manage Account Storage.

Legal basis: your explicit consent, given by turning on the toggle in the Application (article 6.1.a of the GDPR).

5. In-app purchases and Wildone Premium subscriptions

The Application offers a paid service called Wildone Premium in three plans: monthly, yearly and lifetime. See the Premium Terms for the commercial detail.

5.1 Apple's role

All Premium transactions are handled by Apple Inc. through the App Store and StoreKit. In practice:

• Apple collects your payment details (card, Apple Pay, iTunes balance).
• Apple charges your payment method and issues the invoice.
• Apple handles renewals, cancellations and, where applicable, refunds.
• We receive no banking data, no card number, no billing address.

Apple's processing of your payment data is governed by Apple's privacy policy.

5.2 Data we process through StoreKit

Apple's StoreKit API passes us, on your device and only there, cryptographically signed "entitlements" indicating whether you have an active purchase. In practice, we read:

• the identifier of the product purchased (for example com.wildone.premium.yearly);
• the expiry date where applicable (for subscriptions);
• the revocation date where applicable (if Apple refunds you).

That information never leaves your device. We simply cache a boolean isPremium flag locally to avoid a display delay at launch.

We do not process your Apple Account, your name, your email or any other personal information held by Apple.

5.3 Aggregated App Store Connect data

Apple makes available to us, in the App Store Connect console, anonymised and aggregated statistics: number of installs, number of active subscriptions, revenue, conversion rate, etc. That data is never nominative and cannot be traced back to an identifiable user.

5.4 Family Sharing

If a Wildone Premium product is eligible for Apple Family Sharing (the App Store then says so on the product listing), sharing is handled exclusively by Apple. We see neither the identifiers of the family group members nor their activity.

Legal basis: performance of the Premium contract of sale (article 6.1.b of the GDPR).

6. Local notifications

The Application can send you local notifications (daily reminders, recurring task reminders) if you allow it. Those notifications are scheduled and triggered by your device, never by a remote server. No push notification service (APNs, Firebase, etc.) is used.

You can:

• grant or refuse permission the first time the Application asks;
• change that choice at any time in iOS Settings → Notifications → Wildone;
• turn off each type of reminder individually in the Application's settings;
• set quiet hours.

Legal basis: your consent (article 6.1.a of the GDPR), obtained through the iOS system dialogue.

7. Backups and data export

The Application lets you export all of your data manually as a .wildone file (JSON format). That file remains under your exclusive control: you decide where to store it (Files, iCloud Drive, AirDrop, etc.) and who to share it with.

You can also import such a file to restore your data on a new device. Importing overwrites the current state; we recommend making a backup first.

The backup file is neither encrypted nor password-protected. If you share it with someone else, they will have access to all of its contents.

8. Widgets and App Intents

The Application provides widgets and App Intents (app intents, Siri, Shortcuts) allowing you to interact with your tasks from the Home Screen, the Lock Screen or Siri. These features use the app's local data stored in the shared App Group and transmit no information outside your device.

A task ticked off from the widget is credited to the main app the next time it launches.

9. Data you send us directly

The previous sections describe the Application, which sends us nothing. This one covers the only case where we actually receive information about you: when you write to us.

9.1 What we receive

When you contact us at contact@wildone.app — support, question, complaint, exercise of your rights — or when you join the Android waiting list from the website, we receive:

• your email address;
• the content of your message;
• any attachments you choose to send (screenshot, .wildone export file).

We never ask you for a password, an Apple Account or any banking information. If you send us any of that unprompted, we invite you to change the item concerned and we delete the message.

9.2 Why, and on what legal basis

9.3 Where those messages are stored

The wildone.app domain and the website are hosted by OVHcloud SAS (2 rue Kellermann, 59100 Roubaix, France), which also provides the domain's email addresses. The mailbox is however configured as an iCloud+ custom domain: the messages you send us are received and kept on Apple's servers, and not at OVHcloud nor on any server belonging to us.

For residents of the European Economic Area, the iCloud service is provided by Apple Distribution International Ltd (Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). Processing carried out by Apple is governed by its own privacy policy; any transfers outside the European Union rely on the standard contractual clauses adopted by the European Commission.

9.4 How long we keep them

• Support, questions and complaints: the exchange is kept for 3 months after the case is closed, then deleted.
• Android waiting list: your address is kept until a decision is made about the port, or until you ask to be removed if that comes first. A simple email is enough to be removed, with no justification needed.
• Exception: an exchange may be kept longer where a legal obligation requires it — an ongoing dispute, a limitation period applicable to a warranty, or an accounting obligation.

9.5 Who we pass them on to

Nobody. This information is neither sold, nor rented, nor shared. Addresses collected through the waiting list are used only for the stated purpose: there is no newsletter, and no address is reused for anything else.

9.6 Visiting the wildone.app website

The website you are reading uses no cookies, no trackers and no analytics tool, and sends no request to any outside service: nothing is stored in your browser, and we do not know who visits which page.

Like any website, it is however served by a host. OVHcloud records technical access logs — IP address, date and time, page requested, browser used — which are necessary for the operation and the security of the server. Those logs are kept by OVHcloud for a limited time, under its own hosting rules. We use them for no statistical, advertising or commercial purpose, and they are never matched with your data in the Application — which would be impossible in any case, since the Application sends nothing to this website.

Legal basis: legitimate interest — ensuring the security and availability of the website (article 6.1.f of the GDPR).

10. Third-party services

Wildone integrates no third-party SDK for measurement, advertising, analytics, crash reporting, marketing, A/B testing or personalisation. No data is passed to third parties for commercial or statistical purposes.

The only third-party entities liable to interact with the Application are:

11. Retention periods

We run no servers: the Application's data never passes through us. The only items we hold are the messages you send us, covered in section 9.

• The messages you send us are kept for 3 months after the case is closed; Android waiting list sign-ups, until the decision on the port or until you withdraw.
• Data stored locally on your device persists for as long as the Application is installed and you do not delete it.
• Data stored on iCloud persists under Apple's rules and for as long as you have not turned sync off or deleted the app.
• Premium transaction data is kept by Apple under its own statutory periods (generally 10 years for accounting obligations).
• Website access logs are kept by our host for a limited time, under its own rules (see section 9.6).

12. Security

As your data is stored locally on your device (and possibly on iCloud if you enable it), its security rests mainly on:

• the security mechanisms of iOS: app sandboxing, encryption of the device's storage (Data Protection), Secure Enclave;
• the security of your iCloud account (if sync is enabled);
• the physical security of your device: passcode, Face ID, Touch ID.

We recommend that you:

• set a strong passcode on your device;
• enable two-factor authentication on your Apple Account;
• keep iOS up to date.

In the event of a data breach affecting the service, we undertake to notify the CNIL within 72 hours and, if necessary, the users concerned, in accordance with articles 33 and 34 of the GDPR.

13. Your rights

Under the GDPR, you have the following rights:

• Right of access (article 15): you can view all of your data from the Application's interface.
• Right to rectification (article 16): you can change every piece of data (task, reward, profile, etc.) from the Application.
• Right to erasure / "right to be forgotten" (article 17): you can delete each item from the Application, or uninstall the app entirely.
• Right to portability (article 20): you can export your data in an open format (JSON) through the backup function.
• Right to object (article 21): you can object to the processing of your messages based on our legitimate interest, and withdraw your consent to the Android waiting list at any time. No processing is based on legitimate interest for commercial or advertising purposes.
• Right to restriction (article 18): you can turn off the optional features (iCloud, notifications) at any time.

We have no access to the Application's data: for that data, your rights are exercised directly through the features described above, without going through us. For the messages you have sent us (section 9), write to contact@wildone.app: we reply within one month, in accordance with article 12.3 of the GDPR.

If you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL):

• Website: www.cnil.fr
• Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
• Telephone: +33 1 53 73 22 22

14. Children and minors

The Application is not specifically directed at children under 13 and knowingly collects no data from them. Since no data is collected remotely, the risk of non-compliant processing is inherently very low.

In accordance with article 8 of the GDPR, processing the personal data of a child under 15 (in France) on the basis of consent is lawful only with the agreement of the holder of parental authority. Outside the European Union, the applicable age of digital consent is the one set by the law of the user's country of residence. Parents who notice non-compliant use by their minor child are invited to contact us or to uninstall the Application.

15. Changes to this policy

This policy may be updated to reflect changes in the Application, in regulations or in industry practice. The date of the last update appears at the top of this document.

• Minor changes (editorial clarifications) are published without notice.
• Substantial changes affecting your rights or the processing carried out will be signalled through:
  • the release notes on the App Store;
  • an in-app notice at the next launch;
  • where applicable, a request for explicit acceptance before you continue using the app.

Continued use of the Application after notice of a change constitutes acceptance of the revised version.

16. Contact

For any question relating to this policy, to the exercise of your rights or to a report:

• Email: contact@wildone.app
• Publisher: Roman Wenzel Brunaux (auto-entrepreneur, SIRET 108 093 105 00014)
• Telephone: +33 6 19 96 15 49
• Postal address: Roman Wenzel Brunaux, 8 rue du dessus, 52360 Orbigny-au-Mont, France

We undertake to answer any request within a maximum of one month, in accordance with article 12 of the GDPR. That period may be extended by two months for a complex request; you will be told if it is.

17. Governing law and jurisdiction

This Privacy Policy is governed by French law and European Union law. In the event of a dispute relating to data protection, the French courts have jurisdiction, without prejudice to your right to lodge a complaint with the CNIL or any other competent supervisory authority.

Users outside the European Union. Wildone is distributed worldwide. The same guarantees apply whatever your country of residence: the Publisher collects, stores and transmits none of the data you enter in the Application. The rights described in section 13 are therefore exercised in the same way everywhere, directly from the Application, without needing to ask us.

This privacy policy is written in French. This English text is a courtesy translation: in the event of any discrepancy, the French version prevails.