Privacy policy

App Community Suite is a private app supplied to associations. Each association has its own app, its own database and its own server: no data is shared between associations.

This document describes what the app actually does with its members' data. It was written from how the software behaves, not from a template.

1. Who is responsible

The association that invited you is the data controller: it decides what is collected and who can see it.

Wisepear, which publishes App Community Suite, acts as processor: we host and maintain the software on the association's behalf, without using its data for our own purposes.

We do not sell data, we do not pass it to brokers, and we show no targeted advertising.

2. What data is processed

• Your account: email address, display name, avatar picture or colour, role in the association, permissions granted, sign-up date.
• What you post: room and private messages (text, photos, GIFs, voice messages), gallery photos, reactions, comments.
• Your participation: event sign-ups, attendance, payments recorded by the association, shop orders, poll answers and ballots.
• Your usage: experience points, objectives and distinctions, last read position in each room.
• Your devices: notification identifier (token) and platform, to send you the notifications you agreed to.

The app asks for camera, microphone and photo library access only when you use those features, and only for that.

3. Why, and on what basis

• Performance of the service: your account, messages, sign-ups and orders exist because you created them by using the app.
• The association's legitimate interest: association life, moderation, and the administration log.
• Your consent: notifications, which you may decline at first launch and switch off at any time in settings.
• Legal obligation: orders and payments, which the association must be able to account for.

4. Who can see it

• Other members, for what you post willingly: room messages, photos, comments, event participation.
• The association's officers, according to the permissions granted to them: member management, moderation, orders, publishing.
• Wisepear, only to maintain the service and to answer a request from the association.

Your private messages are readable only by you and the person you write to — except by an officer holding moderation rights, who can delete a reported message.

5. Processors and transfers

Your association's server and database are hosted at OVH, in the European Union. The only other services that receive data are:

Service	What it receives	When
Google Firebase	Notification identifier, notification content	Each time a notification is sent
Google Tenor	IP address, search terms	Only if you open the GIF picker
OpenStreetMap	IP address	Only if you display an event map
OpenRouteService	An event's address	When a route is computed, from our server
Resend	Recipient's email address	Invitations and notification emails

The app's typeface is bundled inside the app: unlike common practice it is not downloaded at launch, so your IP address is not sent anywhere to display it.

6. How long

Your data is kept for as long as your account exists within the association.

Deleting does not erase immediately. So that one click cannot destroy an association's history, a deleted item — message, photo, event, order, account — is marked as deleted, disappears from the app, and remains restorable by an officer. We would rather tell you than let you assume immediate erasure.

Permanent erasure is possible: ask your association, or ask us if it cannot do it.

7. Two things you would not guess

Votes and polls are not anonymous. The association can see who voted for what, in elections as well as polls. Bear that in mind before answering.

Partner display is counted per member. When a partner is shown, the app records per day how many times you saw it and whether you clicked — this is what lets the association justify what it invoices. These figures are never passed to the partner in a form that identifies you: it receives totals only.

8. Your rights

You may request access to your data, its correction, its erasure, restriction of processing, and object to processing based on legitimate interest. You may also request a copy of your data in a readable format.

Ask your association first, since it decides about this data. If it does not respond, write to us: we have the technical means to act. You may also complain to the data protection authority in your country.

9. Security

Traffic between the app and the server is encrypted (HTTPS). Passwords are never stored in clear text. Each association has a database and a server isolated from the others. Access to administration features is limited by individually granted permissions, and administrative actions are logged.

10. Minors

The app is not intended for children under 13. A minor may only take part if their association invites them, under the responsibility of the association and of their legal guardians.

11. Changes

If this policy changes substantially, the association is informed and the date at the top of this page is updated.

12. Contact

Wisepear — hello@appcommunitysuite.com