Skip to content

Privacy

Version 1.4, in force since 7 October 2026.

This policy applies from the effective date shown in the app. It explains which data Weejo processes, why, for how long, with whom, and what you can do about it. It is a translation of the French text, which prevails in case of discrepancy.

1. In short

  • Weejo is published by Weejo Labs, which is the controller of your data. One address for every question: contact@weejo.app.
  • We process what you give us (your profile, your outings, your messages) and what using the app produces (your relationships, your participations, your settings). Nothing is sold, nothing is used for advertising.
  • No audience analytics tool, no advertising tracker, no advertising identifier. No background location.
  • Your profile is visible to signed-in members only. It shows your age, never your date of birth, your e-mail, your phone or your gender.
  • You delete your account yourself, in the app, immediately. Your messages remain in the discussions with nothing leading back to you.
  • Documents sent to verify an organisation are stored separately and deleted thirty days after our decision.

2. Who is responsible

The controller is Weejo Labs, a French simplified joint-stock company (SAS) with a share capital of 200 euros, whose registered office is at 6 rue Général Jouan 50100 Cherbourg-en-Cotentin, registered with the RCS of Cherbourg-en-Cotentin under number 130 536 337.

For any question about your data or to exercise your rights: contact@weejo.app, or by post at the address above.

Google and Apple are each, on their own account, controllers of the processing tied to signing in with their service, under their own policies.

3. The data we process

3.1 What you give us

  • Sign-in: the identifier of your account with Google or Apple and the e-mail address it passes to us. Weejo holds no password.
  • Profile: username, display name, photo, date of birth, gender, short bio, town, interests, maximum search distance, device language.
  • Phone: your number, if you choose to provide it. It is neither verified nor shown to anyone.
  • Outings: title, description, category, date, place, cover photo, settings (public or private, seats, age range, approval of requests).
  • Discussions: your messages, polls and answers, reactions, and the messages you delete (their text is erased, a "message deleted" trace remains).
  • Relationships: friend requests and friendships, follows, blocks, badges given and received.
  • Matchmaking, if you use it: days and half-days you are free, desired age range and gender mix, categories, accepted distance, and your position at the moment you declare yourself free (or, failing that, your town's).
  • Reports: the target, the reason, your explanation and a copy of the reported content as it was at that moment.
  • Feedback on the app: your message, its kind (bug, idea, other), the app version and the system (iOS or Android). Nothing else about your device.
  • Professional file, for an organisation: legal name, SIREN or SIRET number, public contact details (website, e-mail, phone, social networks), proof of existence and an identity document of the director.

3.2 What using the app produces

  • Your participations, requests to join, bookmarks, hidden outings and messages, read state of discussions.
  • The notifications addressed to you and your notification settings.
  • Your device's notification token, its platform and its language.
  • An installation identifier: a random value created by our servers and kept in your phone's secure storage. It derives from no characteristic of the device. It lets us see that one phone has been used for several accounts.
  • Your session tokens (kept in hashed form) and the dates of creation and last sign-in.
  • The versions of the legal texts you accepted, with the date.
  • The moderation decisions concerning you: reminders, suspensions, removals, and the date on which you acknowledged a reminder.
  • Your IP address is used, in memory only, to limit the number of requests when you are not signed in. It is not recorded in any of our tables. Our infrastructure's technical logs may hold it for at most one year, under our legal obligations to retain connection data.

3.3 What we do not collect

No phone contacts, no advertising identifier, no audience analytics, no background or continuous location, no microphone audio. The app sets no cookies. The content of your messages, your notification token and your installation identifier are never written to our logs.

4. Why, and on what legal basis

  • Providing the Service: creating and keeping your account, showing your profile to members, publishing your outings, managing participations, running the discussions, friends, badges, and the notifications that concern you. Basis: performance of the contract between us (the terms of use).
  • Finding what is near you: your device's position, when you allow it, is used to compute distances and order outings. Basis: your consent, given through the system permission and withdrawable at any time in your phone's settings; failing that, your profile's town is the starting point.
  • Matchmaking: forming groups of members who are free at the same times, close to one another, compatible in age, gender mix and interests, and offering them to open a discussion. Basis: performance of the contract, for a feature you switch on yourself and can leave at any time.
  • Verifying an organisation: reviewing its file and documents to grant it the verification badge and publish its contact details. Basis: performance of the contract with the organisation and our legitimate interest in events being published by real organisers.
  • Moderating: receiving and handling reports, detecting through a word list the content a person should read, taking and recording decisions, informing the people concerned. Basis: our legal obligations as a hosting provider (French law on confidence in the digital economy, EU Digital Services Act) and our legitimate interest in members' safety.
  • Securing and preventing abuse: sessions, request limiting, detection of multiple accounts through the installation identifier, blocking suspended or deleted accounts. Basis: our legitimate interest in protecting the Service and its members, and our legal obligations.
  • Complying with the law: keeping proof of your acceptances, answering authorities' requests, keeping the data the law requires us to keep. Basis: our legal obligations.
  • Improving the Service: reading your feedback and compiling aggregate statistics from our own database, without any third-party tool. Basis: our legitimate interest.

We take no decision based solely on automated processing that would produce legal effects or significantly affect you. The word list only draws a person's attention. Matchmaking applies criteria you set yourself, commits you to nothing and is declined with one tap. No profiling is carried out for advertising purposes.

5. Who sees what in the app

  • Your profile is visible to signed-in members only. It shows your username, display name, photo, computed age, town, bio, interests, counts (outings, friends, badges), how long you have been here, and your mutual friends. Your date of birth, gender, e-mail and phone never appear. Your gender is used only for the gender mix in matchmaking.
  • A public outing and its list of participants are visible to members. A private outing is visible to those who have its code. Two discovery screens can be browsed without an account, and no profile can.
  • A discussion is visible to the people admitted to the outing.
  • A badge is counted on your profile; only you know who gave it to you.
  • A report is never revealed to the person reported.
  • A block is never notified to the person blocked.
  • A verified organisation publishes the contact details it has chosen.
  • Our moderation team sees what it needs to decide: your profile, the reports you received, the history of measures concerning you, your acceptances, the accounts that shared the same device, and, only around reported or flagged content, the few messages surrounding it. It has no screen giving a member's message history. Every action by a team member is journalled.

6. Recipients and processors

We neither sell nor rent any data. We share your data only with the providers that make the Service work, each for the single task entrusted to it:

  • OVHcloud (OVH SAS, Roubaix, France): hosting of our servers and database, in France.
  • Cloudflare (Cloudflare, Inc., United States): storage of profile and cover photos in a public space with unguessable addresses, and of professional documents in a separate, private space located in EU jurisdiction.
  • Expo (650 Industries, Inc., United States): routing of notifications to Apple's and Google's notification services. A message notification contains a preview of its text.
  • Apple (Apple Inc. and Apple Distribution International Ltd) and Google (Google LLC and Google Ireland Ltd): signing in with your account, delivering notifications to your device, and displaying maps (Apple Maps on iOS, Google Maps on Android), under their own privacy policies.

We may also disclose data to judicial or administrative authorities that request it under the conditions provided by law, and to a company succeeding us in operating the Service, informing you.

7. Transfers outside the European Union

Our servers and database are in France. Some providers are established in the United States (Cloudflare, Expo, Apple, Google). These transfers are framed either by the provider's certification under the EU–US Data Privacy Framework recognised by the European Commission, or by the European Commission's standard contractual clauses, supplemented by technical measures: encryption in transit, storage of sensitive documents in EU jurisdiction, pseudonymisation of the identifiers transmitted. Write to us to obtain a copy.

8. For how long

  • Your account and profile: as long as your account exists. An account with no sign-in for three years is deleted after a warning by notification.
  • Your outings, participations, relationships, settings, notifications: as long as your account exists; deleted with it.
  • Your messages and polls: as long as the discussion exists. They survive the deletion of your account in a form that no longer leads to you.
  • Matchmaking: your availabilities expire with the slot concerned; a group that has organised nothing by the day in question is deleted with its discussion; the history of proposals is deleted with your account.
  • Sessions: an access token lives fifteen minutes, a refresh token sixty days; all are deleted at sign-out or with the account.
  • An organisation's documents: thirty days after our decision, or ninety days after the last upload for a file never submitted. The file itself (legal name, number, decision and reason) is kept as long as the account exists.
  • Reports, alerts and moderation decisions: five years from their closure, including after deletion of the account, to handle repeat behaviour and meet our obligations.
  • Acceptances of the legal texts: five years after deletion of the account, as evidence.
  • Feedback on the app: two years.
  • Identification data the law requires a hosting provider to keep: the period set by the applicable regulations, from deletion of the account.
  • Backup copies: at most thirty days after deletion of the primary data.

9. Security

All communications are encrypted (HTTPS). Session tokens are kept hashed on the server, and in your phone's secure storage on the device. Professional documents are in a private space with no public address, opened to our team through links valid for five minutes. Our team's access rights are re-checked on every request and each of its actions is journalled. Photos are re-encoded on upload, which strips their metadata. In the event of a data breach likely to result in a high risk to you, we will inform you and notify the CNIL within the legal deadlines.

10. Your rights

At any time you may:

  • access your data and obtain a copy;
  • rectify it, directly in the app for your profile;
  • erase it, directly in the app by deleting your account, or by writing to us;
  • restrict its processing or object to it for processing based on our legitimate interest;
  • receive your data in a machine-readable format (portability): we provide an export on request;
  • withdraw your consent to location or notifications in your phone's settings, without affecting the rest;
  • give instructions on what happens to your data after your death;
  • lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr), the French data protection authority, if you believe your rights are not respected.

To exercise a right, write to contact@weejo.app from your account's e-mail address, or from the app. We may ask you to confirm your identity by a proportionate means. We reply within one month, extendable by two months for a complex request, informing you of it.

11. What happens when you delete your account

Deletion is immediate and irreversible.

  • Erased: display name, username, bio, date of birth, gender, town, phone, profile photo (the file itself is deleted), interests, settings, Google or Apple sign-in and e-mail address, sessions, notification tokens, bookmarks, hides, read states, friends, follows, blocks, badges given and received, notifications received, professional file and documents.
  • Cancelled: your upcoming outings, whose participants are told; your upcoming participations, whose seats are released.
  • Kept with no link to you: your messages and polls in the discussions, under an anonymous author; the notifications sent to others about your actions, without your name.
  • Kept: your past outings, as the other participants experienced them; the reports you made or received, the moderation decisions and their journal; your acceptances of the legal texts; the data the law requires a hosting provider to keep, for the period it sets.

12. Minors

Weejo is for people aged sixteen and over. In France, a person aged fifteen or over may consent alone to the processing of their data by an online service; you therefore need no authorisation to sign up. A parent or guardian wishing to ask us about a minor's account may write to us. Matchmaking is reserved for adult members. Your profile shows your age to other members, which lets them know they are dealing with a minor.

13. Changes

This policy may change with the Service or the law. Each version bears a number and an effective date and will be presented to you in the app. The version in force can always be read there.