PRIVACY POLICY – WIMIT

Last updated: September 17, 2026

1. Introduction

This Privacy Policy explains how WIMIT collects, uses, retains and protects its users’ personal data.

WIMIT is a community platform that enables families belonging to the same trusted community, particularly one centred around a school, to organise, support one another and simplify their daily lives.

Depending on the features used, WIMIT may notably be used to organise and track journeys, communicate with other members, organise family events, coordinate certain household activities and use educational support features such as WIMIT Boost.

The protection of personal data, particularly data concerning children, is an important principle in the design and operation of WIMIT.

WIMIT undertakes to process data in accordance with the General Data Protection Regulation (GDPR) and applicable legislation.

2. Data controller

The data controller is:

PROXIMA SYSTEMS SASU
Publisher of the WIMIT application
Méjannes-lès-Alès, France
Email: admin@wimit-app.fr

3. Personal data processed

WIMIT limits the collection and use of personal data to the data required for the features used and the operation of the service.

3.1 User data

Depending on how WIMIT is used, the data processed may notably include:

3.2 Children’s data

Depending on the features used by the parent, WIMIT may process certain data relating to children, including:

WIMIT seeks to limit children’s data to the information required to provide the service requested by the parent.

This data is not sold to third parties, used for targeted advertising or used to create a commercial profile of the child.

3.3 Vehicle data

When a user uses the transport features, WIMIT may notably process:

Access to this information is restricted to authorised persons according to the relevant feature and the context of the journey.

3.4 Location and journey data

When a journey-tracking feature is used, WIMIT may process the driver’s location and certain associated technical information, such as:

This data is used to enable authorised persons to track the journey and to support the safety and traceability of the service.

The location tracking currently used by WIMIT operates in the foreground while the relevant feature is active. WIMIT does not continuously track the user’s movements outside these features.

Detailed location records associated with completed or cancelled journeys and rides are automatically cleared after a period of 24 hours through a process run periodically by the service.

3.5 WIMIT Boost and educational data

When a parent uses WIMIT Boost, they may voluntarily submit a photograph of schoolwork, including a marked assignment.

This image may be analysed using artificial intelligence technologies in order to:

To carry out this analysis, the submitted content may be shared with the technology providers used by WIMIT to provide artificial intelligence features.

WIMIT currently uses OpenAI services through the technical integrations used by its infrastructure.

The results generated by WIMIT Boost are intended as educational assistance. They do not constitute an official assessment of the child or a school, administrative or legal decision.

Parents are advised not to include in submitted documents any personal information that is not required for the analysis.

Photographs of schoolwork used by WIMIT Boost are automatically deleted after 30 days. Associated educational sessions and analyses may be retained for 365 days to allow them to be viewed and to support educational follow-up.

WIMIT may also offer conversational features using artificial intelligence. The related conversations may be retained to allow them to be viewed and to ensure service continuity. No uniform automatic deletion period currently applies to all such conversations.

4. Purposes of processing

Depending on the features used, personal data is processed in order to:

WIMIT does not use its users’ personal data for targeted advertising and does not sell their personal data.

5. Legal bases for processing

Depending on the processing concerned, WIMIT may rely on:

Where processing is based on consent, consent may be withdrawn under the conditions provided for by law.

6. Bon Points, purchases and payments

WIMIT processes the information required to operate the Bon Points system, including balances, transactions and their source.

When a user makes a purchase, the data required to complete, verify and track the transaction may be processed by WIMIT and the relevant payment providers.

Depending on the channel used, these providers may notably include Apple, Google, RevenueCat or Stripe.

Full payment card or bank details used to make a payment are not recorded directly by WIMIT when the payment is processed by these providers.

Data relating to certain transactions may be retained where necessary to comply with accounting, tax or legal obligations.

7. Communities and data visibility

WIMIT is based on communities with controlled access.

Access to personal information depends in particular on the community to which the user belongs, their role, their participation in a journey or activity, and the feature used.

A user therefore does not have general access to the data of all other WIMIT users.

Certain information may be visible to other members where required for the operation of a community feature, journey or event.

The fact that a school is referenced in WIMIT does not automatically give it access to parents’ or children’s personal data.

8. Posts, communications and moderation

WIMIT allows users to post or exchange certain content in the spaces provided for this purpose.

This content may be moderated to protect users, process reports and preserve the proper operation of the service.

PROXIMA SYSTEMS may access the necessary information where processing is required to ensure security, process a report, prevent abuse or comply with a legal obligation.

9. Bon Points and community participation

The Bon Points system is intended in particular to organise and encourage reciprocity among WIMIT members.

Certain features may also highlight members’ participation or engagement within the community.

These mechanisms are not designed to create commercial profiles of users and do not result in a solely automated decision producing legal effects or similarly and significantly affecting the user.

10. Service providers and data recipients

PROXIMA SYSTEMS may use technical service providers where their involvement is required for WIMIT to operate.

Depending on the features used, data may notably be processed by providers operating in the following areas:

As of the date of this Policy, the main services that may be involved notably include Replit, OpenAI, Resend, Stripe, RevenueCat, Apple, Google and HERE.

Certain features may also interact with external services such as OpenStreetMap, Open-Meteo, the device’s mapping services, public data from the French Ministry of National Education or YouTube.

Only the data required for the relevant feature is transmitted.

The use of certain external services may also involve the processing of ordinary technical data, such as the IP address, device type or metadata required to establish a connection.

11. Hosting, security and international transfers

WIMIT’s main data is processed using the technical infrastructure used by PROXIMA SYSTEMS, including for the API, database and media storage.

PROXIMA SYSTEMS implements technical and organisational measures designed to protect data against unauthorised access, loss, alteration or accidental disclosure.

Certain data may be processed by providers established or operating infrastructure outside the European Economic Area.

Where required by law, these transfers are governed by the mechanisms provided for under the GDPR, including an adequacy decision or appropriate safeguards applicable to the provider concerned.

12. Data retention and deletion

WIMIT does not knowingly retain personal data for longer than necessary for the purposes for which it is processed, subject to legal obligations or the need to establish, exercise or defend a legal claim.

Specific retention periods apply to certain data:

Media that has been replaced or is associated with deleted items is also subject to deletion mechanisms when it is no longer required.

Other account-related data may be retained for the period during which the service is used, and then deleted or anonymised when it is no longer required, subject to applicable legal obligations.

Certain content required for security, dispute management, moderation, evidence of consent or compliance with accounting or legal obligations may be retained for longer where necessary.

Data already transmitted to an external provider may be subject to that provider’s own retention periods.

13. Account deletion

Users may request or carry out the deletion of their account using the features made available in WIMIT.

Deletion results in the deletion of the main data associated with the account and the personal media identified by WIMIT, including media associated with the profile, vehicle and relevant features.

Certain information may nevertheless be temporarily retained where required by a legal obligation or where necessary for security, fraud prevention, dispute resolution or the defence of the rights of PROXIMA SYSTEMS or a user.

Certain data already transmitted to external providers, held in technical backups or contained in communications that have already been sent may also remain for the retention periods applicable to those systems.

14. Data stored on the device

WIMIT may store certain information locally on the device where required for its operation, such as:

Depending on its nature, this information may notably be deleted upon logout, deletion of the application’s data or uninstallation of the application.

15. User rights

In accordance with the GDPR and depending on the processing concerned, users notably have:

Requests may be sent to:

admin@wimit-app.fr

Where necessary to protect personal data, PROXIMA SYSTEMS may request information to verify the identity of the person making the request.

Users also have the right to lodge a complaint with the French Data Protection Authority (Commission nationale de l’informatique et des libertés — CNIL).

16. Cookies, identifiers and trackers

WIMIT uses technologies required for the operation of the application and service, including for authentication, security and the storage of certain preferences.

WIMIT does not use an advertising profiling system designed to exploit its users’ personal data for targeted advertising.

If non-essential trackers or tools requiring consent were introduced in the future, users would be informed and the required consent mechanisms would be implemented.

17. Protection of children’s data

Where WIMIT involves the processing of children’s data, it is used under the responsibility of parents or legal guardians.

PROXIMA SYSTEMS pays particular attention to minimising this data and restricting access to it.

Children’s data is not used to target advertising at them, create commercial profiles or make automated decisions producing legal effects concerning them.

Parents are advised to provide only the information required to use the relevant features.

18. Changes to the Privacy Policy

This Policy may be amended to reflect changes to WIMIT, its features, its providers or applicable legislation.

Users will be informed by an appropriate means of any material change concerning the processing of personal data.

The last-updated date at the beginning of this document identifies the applicable version.

19. Contact

For any question about this Privacy Policy or the processing of personal data:

PROXIMA SYSTEMS SASU
Méjannes-lès-Alès, France
admin@wimit-app.fr

“Data is never a product at WIMIT.”