Privacy Policy WWED app
Last updated: 31 July 2026
1. Who is the data controller?
The controller of your data is:
-
Hype Up SRL
-
Address: Ten-Eycken 114, 4850 Plombières, Belgium
-
Company number (BCE): BE 1006.232.072
-
Privacy contact: whatwoulderikdo@hypeup.be
WWED (the "app") is a sticker-hunting game published by the controller above ("we", "us").
2. What data do we collect?
We limit collection to what the game needs to work.
Data | Detail | Source |
|---|---|---|
Email address | For passwordless sign-in (magic link) | You |
Username & display name | 3–24 characters,
publicly visible
(leaderboard, spots) | You |
Profile picture (avatar) | Optional,
publicly displayed
after automated moderation | You |
Sticker photos | Each find is a photo, stored
privately | You |
Precise location | Latitude/longitude + GPS accuracy, recorded
for each find | Your device |
City / country | Derived from your position (on-device reverse geocoding) | Your device |
Background location | Used
on-device only
for proximity notifications (see §6) | Your device |
Gameplay data | Points, badges, find history, "first finder" status | Generated by the game |
Reports | Content you report or that is reported about you (moderation) | You / other players |
Timestamps | Account creation, find, badge-unlock dates | Generated by the game |
We do NOT collect: passwords (magic-link sign-in only), payment data (the app is free), remote push tokens, orbehavioural analytics (no analytics SDK such as Google Analytics, Firebase, PostHog or Sentry is integrated).
3. Why, and on what legal basis?
Purpose | Legal basis (GDPR Art 6) |
|---|---|
Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
Verify the authenticity of finds (anti-cheat) and moderatecontent/avatars | Legitimate interest (Art. 6(1)(f)): game integrity and communitysafety |
Use your
location
and your
photos | Your
consent
(Art. 6(1)(a)), given through OS permissions and theconsent screen |
Create and manage your account, record finds, show theleaderboard | Performance of a contract (Art. 6(1)(b)) |
4. Photos: faces and content
Photos may capture public spaces and, incidentally, the faces of bystanders. Please do not photographidentifiable people. Every published photo can be reported by the community (face, offensive content, etc.);reported content is hidden immediately and reviewed. You can delete your own finds at any time in the app.
-
Your sticker photos are stored in a private space (accessed via signed URLs; only you can access them).
-
The very first photo of a spot serves as an anonymous hunt clue: it is made public with no link to youridentity (referenced by location, not by user).
-
Avatars go through automated AI moderation before being displayed (see §5).
5. Subprocessors and transfers outside the EU
We rely on a limited set of subprocessors:
Subprocessor | Role | Data involved | Location |
|---|---|---|---|
Apple Inc. | App distribution via the App Store | App Store account data(handled by Apple) | United States |
Anthropic PBC
(ClaudeVision API) | Automated verification of sticker photos (anti-cheat) and avatar moderation | Find photos + avatarphotos | United States |
Supabase Inc. | Hosting, authentication, database, photostorage | All data above | EU — eu-central-1(Frankfurt) |
Where data is transferred outside the European Union (Anthropic, Apple, and depending on the Supabase region),the transfer is governed by the European Commission's Standard Contractual Clauses.
Anthropic does not use content submitted through its API to train its models. Photos are sent only for one-off automated verification/moderation.
6. Proximity notifications (geofencing)
To alert you that an unfound sticker is nearby, the app registers regions (geofences) directly on your device. Theoperating system fires a local notification when you enter a region. Your background location is never sent to ourservers or tracked continuously. You can turn this feature off at any time in settings.
7. Retention
Your data is kept while your account is active. When you delete your account (see §8), it is erased as describedbelow. There is currently no automatic deletion for inactivity. Public hunt clues (§4), once anonymised, may beretained as they form part of the shared game map.
8. Your rights (GDPR)
You have the following rights:
-
Access and rectification (edit username/avatar in the app).
-
Erasure ("right to be forgotten"): account deletion is available directly in the app (Settings → Delete myaccount). It erases: your find photos and avatar (storage), all your finds, your profile, your authenticationaccount; and anonymises your "first finder" status on affected spots.
-
Portability, restriction and objection to processing.
-
Withdraw consent at any time (by disabling permissions, which may prevent the game from working).
-
Lodge a complaint with the supervisory authority: in Belgium, the Data Protection Authority (APD/GBA),www.dataprotectionauthority.be.
To exercise these rights: whatwoulderikdo@hypeup.be.
9. Minimum age
WWED is intended for people aged 13 or older. We do not knowingly collect data from children under 13. If you believe such a user has provided us with data, contact us for deletion.
10. Security
Data access is protected by database-level security rules (Row-Level Security): each user can access only theirown private photos. Communications are encrypted (HTTPS/TLS).
11. Changes
We may update this policy. For significant changes, we will inform you in the app. The date at the top reflects thelatest revision.
12. Contact
For any question about your data: whatwoulderikdo@hypeup.be.