Privacy Policy

Version 2.1 — Last updated: 19 October 2026

- Couple messaging: we describe the messages you exchange with your partner in the Messages tab, who can read them, how to report a message, and their automatic deletion one year after they are sent. New-message notifications never show their content.
- Inactive accounts: an account with no activity for 12 months (instead of 2 years) is deleted together with all of its data, after two warning emails sent 30 days and then 7 days before deletion.
None of these changes broadens how we use your health data: it is never sold, never used for advertising, and never shared with anyone other than the partner you have explicitly chosen.

The Wenly app and the wenly.fr website are published by Mathis Laversin, sole trader (entrepreneur individuel) trading as Agence Fluid, France.
SIREN: 101 325 017
SIRET: 101 325 017 00016
EU VAT number: FR 52 101325017
Email: contact@wenly.fr
Publisher's website: https://www.agence-fluid.fr/
We undertake to respond to any request regarding your data within one month at most.

This policy applies to the Wenly mobile app (iOS and Android) and to the wenly.fr website.
Wenly is not a medical device. The app is a tracking and information tool provided for guidance only. It cannot be used to make a diagnosis, does not replace advice from a healthcare professional, and is in no way a method of contraception.

Wenly is intended for people aged 15 and over. We do not collect your date of birth: compliance with this requirement rests on the declaration you make when signing up.
If we learn that an account has been created by someone below this age, we delete it along with the associated data. If you are a parent or guardian and believe a minor has provided us with data, write to contact@wenly.fr and we will delete it without delay.

4.1 Data you provide
- Account: email address, Apple or Google identifier depending on your sign-in method, hashed password (required).
- Profile: username (required), profile picture (optional).
- Health: period dates, cycle length, symptoms, needs, contraception method (optional, but necessary for cycle tracking to work).
- Intimate life: moods, libido levels, personal notes (optional).
- Couple: shared notes, Bucket List, messages exchanged with your partner, pairing code (optional).
- Support: the content of your emails and attachments when you write to us.
We do not collect your date of birth, your age, or your legal name.
When you sign in with Apple or Google, we only receive your identifier and your email address. If you use Apple's "Hide My Email" feature, we only receive a relay address and never know your real one.


4.2 Data collected automatically
- Technical: device model, OS version, app version, language, time zone, installation identifier.
- Usage: screens viewed, features used, interaction events, crash reports.
- Subscription: subscription status, anonymous transaction identifier, renewal date.
- Notifications: your device's push notification token.
We use no advertising trackers, no advertising identifiers (IDFA / AAID) and no social media SDKs. The app does not track you across other apps or websites.


4.3 Data we do not collect
We do not collect your location, your contacts, any photos other than the one you choose as your profile picture, or data from Apple Health or Google Fit.
The wenly.fr website uses no analytics tools and no advertising cookies.

- Creating and managing your account, authentication: performance of a contract (Art. 6(1)(b)) — lifetime of the account.
- Cycle tracking, predictions, analysis and monthly recaps: explicit consent (Art. 9(2)(a)) — lifetime of the account, revocable.
- Sharing your logs with your paired partner: explicit consent (Art. 9(2)(a)) — until the link is broken.
- Managing your Premium subscription: performance of a contract (Art. 6(1)(b)) — subscription term + 10 years (accounting obligation).
- Securing the service, preventing fraud and abuse: legitimate interest (Art. 6(1)(f)) — 12 months for technical logs.
- Improving the app through usage statistics: legitimate interest (Art. 6(1)(f)) — 14 months.
- Sending service-related notifications: performance of a contract — lifetime of the account.
- Sending occasional satisfaction surveys or review requests: legitimate interest (Art. 6(1)(f)), with a permanent right to object — until you object.
- Informing you of commercial offers on our products: consent — until consent is withdrawn.
- Responding to support requests: legitimate interest — 3 years after the last exchange.
- Complying with our legal obligations: legal obligation (Art. 6(1)(c)) — as required by law.
About emails
We distinguish three types of email:
1. Service emails: account confirmation, password reset, notice of changes to our terms, security alerts, reminders before an inactive account is deleted. These are essential to the operation of the service and cannot be disabled while your account is active.
2. Satisfaction surveys and review requests, sent occasionally and containing no promotional content. You can opt out at any time, in one click from any such email or from Settings > Notifications in the app.
3. Marketing emails (promotions, offers on the Premium subscription). These are only sent to people who have given their consent, which is off by default.

Period dates, symptoms, needs, contraception methods, moods and libido levels are special category personal data under Article 9 GDPR.
We process them solely on the basis of your explicit consent, obtained through a dedicated, non pre-ticked checkbox, separate from your acceptance of the terms and conditions.
You can withdraw this consent at any time from Settings > Privacy. Withdrawal stops cycle tracking and deletes the health data associated with your account, without affecting the lawfulness of processing carried out beforehand.
This data is never used for advertising, never sold, never passed to insurers, employers or data brokers, and is not accessible to any advertising network. It is never sent to any analytics tool: the events we collect to improve the product never contain the content of your logs.
French health data hosting (HDS): Wenly is a wellbeing app in which you enter your own information. It does not form part of a prevention, diagnosis or care pathway on behalf of a healthcare professional or institution. The HDS certification required by Article L1111-8 of the French Public Health Code therefore does not apply.

Pairing lets you share your tracking with a person of your choice, using a code you send them.
What your partner sees once the link is established:
- your cycle calendar and its predictions;
- the symptoms, needs, moods and libido levels you have logged;
- the notes you have explicitly marked as shared;
- the shared Bucket List;
- the messages you send them in the Messages tab;
- your username and profile picture;
- the Premium status, which is shared between both linked accounts: if either partner subscribes, the other gets the Premium features, so each partner knows the couple is subscribed.
What your partner never sees: your email address, your credentials, your unshared notes, your billing details.
Breaking the link: either partner can break the link at any time, unilaterally and without the other's agreement, from Profile > My couple. The break is immediate and complete: your former partner instantly loses access to all of your data, including data from the period during which you were linked. No copy is kept on their account. Content created together (shared notes, Bucket List, messages) stops being accessible on both sides. Shared Premium access also ends for the non-subscribing partner.
Please note that no technical measure can prevent a partner from taking a screenshot or memorising information before the link is broken. Only share your pairing code with someone you trust.

Your data is only accessible to the publisher and to the technical providers strictly necessary to operate the service. Each is bound by a data processing agreement compliant with Article 28 GDPR.
- Supabase Inc. — database, authentication, storage, transactional emails: all account and tracking data — Paris, France (eu-west-3 region).
- PostHog — usage analytics: interaction events, technical data — European Union (PostHog EU Cloud).
- Vercel Inc. — hosting of wenly.fr: website connection data (IP address, request headers, technical logs) and contact form content (name, email address, message) — company established in the United States (Covina, California), processing carried out in the European Union (Paris).
- Apple Inc. / Apple Distribution International Ltd. — distribution, payment, push notifications (APNs): transaction identifier, notification token — Ireland and United States.
- Google LLC / Google Ireland Ltd. — distribution, payment, push notifications (FCM): transaction identifier, notification token — Ireland and United States.
- RevenueCat, Inc. — subscription management: pseudonymised user identifier, subscription status — United States.
- Expo (650 Industries, Inc.) — push notification delivery, app updates: notification token, technical data — United States.
All of your health and couple data is hosted in France, on Supabase infrastructure located in the Paris region. No cycle-tracking data is passed to providers based in the United States. New-message notifications only show the sender's name, never the content of the message. The message you send us through the contact form is, however, processed by our host: include only the information your request requires.
Your data may also be disclosed to administrative or judicial authorities where we are legally required to do so.