This Privacy Policy explains how personal data is collected, used and protected when you and your child use the Weebou mobile application (the “App”), the Weebou website (the “Website”) and the related services (together, the “Service”).
Weebou is made for children, but accounts are created and managed by parents and legal guardians. If you use the Service on behalf of a child, you confirm that you are that child’s parent or legal guardian and that you have read this policy.
1. Who we are
The Service is operated by Omyteq SAS, a French company registered under SIREN number 942 915 778 (“Omyteq”, “we”, “us”). Omyteq is the data controller for the personal data described in this policy, within the meaning of the EU General Data Protection Regulation (“GDPR”) and the French Data Protection Act (Loi Informatique et Libertés).
For any question about your data, you can reach us at [email protected].
2. The data we collect
2.1 Data you give us
- Your child’s profile: a first name or nickname and an age range, so the App can greet your child and suggest age-appropriate activities. A nickname works perfectly well.
- Your email address: when you create a parent account, restore a purchase or contact us.
- Your messages: the content of the requests you send to our support team.
2.2 Data collected automatically
- Device and technical data: device type and model, operating system and version, language, time zone, app version, IP address and crash reports.
- Usage data: the activities, games, videos and stories used, progress, session length and the features used in the App.
- Subscription data: the subscription purchased, its status and its renewal date, as reported to us by Apple or Google. We do not receive your card details.
- Notification token: if you allow notifications, a technical identifier that lets us send them to your device.
We do not collect precise geolocation, we do not use advertising identifiers for advertising purposes, and we do not build advertising profiles of children or parents.
3. How and why we use your data
We only use personal data for clear purposes, each based on a legal ground provided by the GDPR:
| Purpose | Legal basis |
|---|---|
| Providing the Service: running the App, saving progress, personalising content to your child’s age | Performance of our contract with you |
| Managing your subscription and restoring purchases | Performance of our contract with you |
| Answering your support requests | Performance of our contract, or our legitimate interest in helping our users |
| Sending service messages (important updates, changes to these documents) and, if you allow them, notifications | Performance of our contract; your consent for notifications, which you can withdraw in your device settings |
| Measuring how the Service is used, fixing bugs and improving our content | Our legitimate interest in improving the Service, or your consent where the law requires it |
| Keeping the Service secure and preventing fraud or misuse | Our legitimate interest in protecting the Service and its users |
| Complying with our legal obligations (accounting, responding to authorities) | Legal obligation |
4. Children’s privacy
Protecting children is at the heart of Weebou. In particular:
- Accounts are created by a parent or legal guardian. In France, children under 15 need the consent of a parent to the processing of their data; we rely on the parent who sets up the App to give that consent.
- We collect as little information about children as possible, and nothing that would allow a stranger to contact them.
- There is no advertising in Weebou, and children’s data is never used for advertising or sold.
- You can view, change or delete your child’s profile at any time, from the App where available or by writing to us.
If you believe that a child has given us personal data without a parent’s consent, please contact us at [email protected] and we will delete it.
5. Who we share data with
We do not sell or rent personal data. We only share it with:
- Service providers working on our behalf and under contract with us: cloud hosting, our analytics provider, email delivery for support, and push notification services. They may only use the data to provide their services to us.
- Apple and Google, which distribute the App, process payments and manage subscriptions under their own privacy policies.
- Authorities, when we are legally required to, or to protect our rights, our users or the public.
- A buyer or successor, if Omyteq is involved in a merger, acquisition or sale of assets. You would be informed and this policy would continue to protect your data.
6. Transfers outside the European Union
Some of our providers may process data outside the European Economic Area, for example in the United States. When this happens, we make sure the data stays protected, by relying on a European Commission adequacy decision (such as the EU–US Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission.
7. How long we keep data
- Account and child profile data: for as long as your account is active. If you delete your account, we delete this data within 30 days. If an account stays inactive for 3 years, we delete it.
- Support messages: 3 years after our last exchange.
- Analytics data: no longer than 25 months.
- Transaction records: for as long as French accounting and tax law requires (up to 10 years).
8. How we protect data
We use technical and organisational measures appropriate to the sensitivity of the data, including encrypted connections, restricted access for our team on a need-to-know basis, and careful selection of our providers. No system is perfectly secure, but we work continuously to keep your family’s data safe, and we will notify you and the authorities of any data breach where the law requires it.
9. Your rights
Under the GDPR and French law, you have the right to:
- access your data and receive a copy of it;
- correct inaccurate or incomplete data;
- delete your data;
- restrict or object to certain uses, including analytics based on our legitimate interest;
- receive your data in a portable format;
- withdraw your consent at any time, where we rely on it;
- give instructions about what happens to your data after your death.
To exercise these rights, write to [email protected]. We will answer within one month. We may ask you to confirm your identity before acting on your request.
You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of the EU country where you live.
10. Cookies on our website
The Website does not use advertising cookies. It only uses what is strictly necessary for it to work. Our fonts are provided by Google Fonts, which means your browser connects to Google’s servers and shares your IP address with them when you visit. The latest videos from our YouTube channel are displayed on the Website. When you choose to play one, it is loaded from YouTube in privacy-enhanced mode (youtube-nocookie.com), and YouTube processes the related data under Google’s privacy policy. If we ever add analytics or other non-essential cookies to the Website, we will ask for your consent first.
11. Changes to this policy
We may update this policy as the Service evolves or the law changes. We will change the date at the top of this page and, for significant changes, let you know in the App or by email before they take effect.
12. Contact us
For any question about this policy or your personal data:
Omyteq SAS — SIREN 942 915 778
Email: [email protected]