Privacy policy

Controller and scope

MAISON WHOSE operates the Whose app and this website and is the controller for the processing described in this policy. Use the contact details below for requests concerning your data.

This policy concerns Whose. Apple services, email services and the external store also have their own terms and policies for operations you choose to perform with them.

Photos and designs

Selecting, cropping and composing an image for your case take place on the iPhone. Saved designs and cached official images may be stored locally by the app. Selecting a photo does not automatically back up your entire photo library to our servers.

When a selected photo is stored in iCloud, iOS may download it according to your Apple settings. If you choose to change your avatar, the profile image prepared by the app is sent to the account service.

When you use a share or export command, data is passed to the recipient or service you select. Check files and images before sharing them.

Account and profile

If you use an account feature, the service processes the information needed to authenticate you and manage your profile, including the email address, name or nickname and avatar you provide.

When you use Sign in with Apple, the service receives authentication information and the name or email information that Apple lets you share. The app keeps a sign-in session for authorised features.

Hardware and transfer operation

Recognition and compatibility features may transmit device identifiers, hardware names or serial numbers, model, display size and colour count, hardware and firmware versions, connection method and information about the host iPhone. This information helps identify settings that match the hardware.

Technical information about transfer success or failure may be sent to the service, including the stage, error category, diagnostic code, packet count and app and iOS versions. These brief technical reports are not a copy of the photo or of the complete NFC exchange.

Detailed NFC diagnostics may also be stored locally in a limited amount and copied or exported at your choice. Saved or exported calibration settings contain the parameters, validation information and technical details included by the feature, rather than a backup of your photos.

Official content and online features

Official-content requests may include language, platform, app version and the device model and display dimensions to provide suitable content. The server also receives normal network connection information, including the IP address.

Some account features may send operational events, such as a hardware connection or a profile update. This information is used to provide and maintain the related features.

Notifications and permissions

If you allow notifications and use an account, the service may receive the Apple Push Notification service token, permission status, iOS identifier for vendor, device model, iOS version, app version and bundle identifier to deliver and manage notifications.

Photos, Camera, Bluetooth, local-network and location access are controlled by the iOS permission prompts applicable to the feature you use. You can refuse or withdraw permission in iOS Settings; the related feature may then be unavailable.

Website and contact

The website stores your language choice in browser local storage. It does not include advertising or third-party audience analytics. The administrator area uses an essential, time-limited session cookie protected over HTTPS.

The website is hosted on OVHcloud infrastructure. Limited technical logs, including IP address, time, request method and path, are used for security and operation. The access log does not record query parameters or password contents. Website log rotation is configured for 14 daily archives.

If you email us, we receive your email address, message and any attachments you choose to send so that we can handle your request.

Purposes and processing grounds

Information necessary for a feature you request is used to provide the service, including image preparation, authentication, hardware compatibility and support. Optional processing that requires your permission relies on the consent applicable to that feature.

Information needed for security, diagnostics and abuse prevention is processed to protect service operation. Data required by a legal obligation is retained to the extent needed for that obligation. Contact us for details of the processing that concerns you.

Recipients and service providers

Access is limited to people authorised to operate the service and providers needed for the relevant operations, including hosting, Apple authentication and notifications, and email used to respond to your requests.

Providers may process data in other countries depending on the service used. You can ask the operator for information about recipients and safeguards applicable to a particular processing activity.

The Whose app does not include third-party advertising or advertising-tracking SDKs. Technical logs and operational events may be processed as described in this policy.

Retention and deletion

Local designs and cached images remain on the iPhone until removed through the relevant controls, app removal or storage-management mechanisms. Data held by iCloud, Photos or backups you use is also managed in those services.

Account data is kept to provide active features and manage account-related requests. Closing an account starts the process provided by the service; it does not mean every file, backup and technical record is immediately erased physically.

Limited deletion-request records and transformed identity references used to prevent abuse may be retained after an account closes. Ask for details or request an erasure review using the contact address below.

Choices and rights

You can change iOS permissions, disable notifications, sign out and request account deletion. For requests about data held by the operator, contact the address below and specify your request and the email associated with your account.

Subject to the conditions of applicable law, you can request access, correction, erasure or portability of data, restriction of processing, object to certain processing or withdraw consent. Proportionate verification may be needed to protect your account. Do not send a password.

You may also complain to the relevant supervisory authority, including the CNIL in France.

Policy updates

The update date appears at the top of this page. Changes to features or processing may require an update to this policy. Use the contact details below to ask about the version applicable to your use.

Contact

• Operator: MAISON WHOSE
• Address: 33 rue Charonne, 75011 Paris, France
• Email: contact@whosephonecase.fr