Privacy Policy
This policy describes the data collected by the Whozee app (published by Mickaël Ohayon), how it is used, shared and retained, and how you can exercise your rights.
1. Data we collect
| Data | Source | Why |
|---|---|---|
| Email address | Sign in (Sign in with Apple) | Account identification, purchase restore, support |
| Anonymous Apple user identifier | Sign in with Apple | Linking in-app purchases to the right account |
| Camera images | Phone camera, on a manual action | Identifying on-screen faces (see §2) |
| Scan history | Generated by your usage | Displaying the "History" screen |
| Credit balance + Premium status | IAP + rewarded ad views | Counting allowed scans |
| Advertising identifier (IDFA/AAID) | iOS / Android | Personalised ads with consent only (ATT + UMP) |
| Aggregated technical data | Apple / Google / AdMob | Stability diagnostics, ad fill rate |
Whozee does not collect: name, surname, phone number, location, contacts, microphone, camera-roll photos, calendar, health data.
2. Actor recognition — image processing
When you tap the scan button, Whozee sends the captured image to our secure servers, which analyse it to identify known faces. The image:
- is transmitted over an encrypted connection (TLS);
- is not retained: it is analysed and then immediately deleted, with no storage beyond processing;
- is not associated with your account in our logs.
Only the result of the recognition (identified actor names, confidence level) is kept in your history so you can find your scans again.
3. Sub-processors
| Service | Role | Policy |
|---|---|---|
| Supabase | Database hosting + auth | supabase.com/privacy |
| Image analysis provider | Face identification (transient processing, no retention) | — |
| The Movie Database (TMDb) | Public film/actor data | themoviedb.org/privacy-policy |
| Google AdMob | Advertising | policies.google.com/privacy |
| RevenueCat | In-App subscriptions | revenuecat.com/privacy |
| Apple | Sign in with Apple, IAP | apple.com/legal/privacy |
4. Advertising and tracking
On first launch on iOS, Whozee asks for your permission to use the advertising identifier (Apple's standard "App Tracking Transparency" prompt). If you accept, personalised ads may be shown via Google AdMob. If you decline (or do not respond), only non-personalised ads are served.
In the European Economic Area, the United Kingdom and Switzerland, the Google UMP consent form is also shown to comply with the GDPR and the ePrivacy directive. You can withdraw this consent at any time in the app's Settings.
Premium users see no ads at all.
5. Retention and deletion
- Account data: kept for as long as your account exists.
- Scan history: kept for as long as your account exists.
- Camera images: not retained (see §2).
- Technical logs: 30 days maximum.
You can permanently delete your account from the Settings → Delete my account screen. This deletes all associated data within 30 days. RevenueCat retains purchase receipts in line with accounting obligations.
6. Your rights (GDPR / CCPA)
If you are a resident of the European Union, the United Kingdom, Switzerland or California, you have the following rights:
- Access to the data concerning you;
- Rectification of inaccurate data;
- Erasure ("right to be forgotten");
- Portability;
- Objection to processing;
- Withdrawal of consent to ad tracking.
To exercise these rights, contact us at the address below. We will respond within a maximum of 30 days.
7. Security
Communications between the app and our servers are encrypted via TLS. Passwords are never collected (authentication is delegated to Apple). Database access is restricted by row-level security rules (Row-Level Security, Supabase) ensuring you only access your own data.
8. Children
Whozee is not intended for children under 13 and does not knowingly collect data about them. If you believe a child has provided us with data, contact us so we can delete it.
9. Changes
Any change to this policy will be published on this page with the update date. Substantial changes will be notified within the app.
10. Contact
For any question about this policy or your data:
Email: mickael.ohayon@gmail.com
Publisher: Mickaël Ohayon