Privacy Policy

Wibou is an iOS app published by MingoLabs, the controller for the processing described here. This page explains in plain words what the app processes, why, and what you can do about it. The principle: your family's data is there to serve you — it is never sold and never used for advertising.

What we process

• Account — your email address and an encrypted password, or the identifier Sign in with Apple gives us if you go through Apple.
• Baby — first name, date of birth, and a photo if you add one.
• Daily tracking — nursing, bottles, pumping, sleep, diapers, baths, measurements and growth curves, teeth, and the health information you log (medication, appointments, allergies, symptoms).
• Memories — photos, notes and places you attach to a moment. Places come from a text search: the app never asks for your GPS location.
• Family — the invitations you send and the people who have access to a profile.
• Technical data — device model and iOS version, install identifier, notification token, error logs and usage statistics.
• Subscription — the status of your Premium subscription. Payment is handled by Apple: we never see or store your payment details.

Why, and on what basis

This data is used to deliver the service you ask for: logging activities, computing trends, syncing tracking with the people you invite, sending the reminders you turn on, and managing your subscription. Your child's health information is sensitive data: we process it only because you choose to enter it and consent to it, and only to show it back to you. Usage statistics and crash reports are used to fix bugs, on the basis of our legitimate interest in improving the app; you can object by writing to us.

Your child's data

Wibou is made for parents, not for children: the account belongs to an adult, who enters their child's information and decides who to share it with. That information is never sold, never passed to data brokers, and never used for advertising.

Who has access

First, the people you invite: a co-parent, a relative or a sitter sees the profile you open up to them in real time, and you can revoke that access at any time. Then a small number of providers acting on our behalf: Supabase (database and photo storage), Railway (API servers), Apple (App Store, notifications, Sign in with Apple), RevenueCat (subscriptions), Mixpanel and Google Firebase (analytics and crash reports). Some are based in the United States; those transfers are covered by the European Commission's standard contractual clauses. Beyond that we share nothing, unless the law requires it.

Storage and security

Data is hosted with our infrastructure providers, encrypted in transit (TLS) and at rest. Access is limited to the people and processes that need it to run the service.

Retention and deletion

We keep your data for as long as your account exists. You can delete an activity, a profile or your whole account from the app: deleting the account revokes access immediately, then the associated data is permanently purged from our servers within 30 days. Technical logs and usage statistics are kept for as long as diagnosing problems requires, then deleted or anonymised; billing-related information for as long as the law requires.

Your rights

You have the right to access, rectify, erase, port, restrict and object, and you can withdraw your consent at any time. The fastest route is the app itself; otherwise write to us at [email protected] and we will answer within 30 days. If our answer does not satisfy you, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or your local one.

The wibou.app website

The website sets no advertising cookies and no trackers. If you leave your email address there to hear about what's new, it is used for that only, and every email carries an unsubscribe link.

Changes

This policy may change as the app does. The date at the top of this page marks the current version; if something important changes, we will tell you in the app.

Contact

A question about your data? Write to us at [email protected].