Wallabi privacy policy

1. Data controller

The Wallabi app is published by Patricia Jessé, an independent developer releasing apps under the Fabulette name.

Contact (GDPR and any other question): team@fabulette.net

2. The principle: your documents stay on your device

Your tickets, cards, photos and files, along with their titles, dates, codes, notes and reminders, are stored in your device’s memory. They are not sent to any server.

• No account: no email address, no password, no phone number.
• No syncing, no online storage, no backup on our servers.
• No advertising, no advertising trackers, no sale of data.

Your documents only leave your device if you decide so:

• when you share a ticket or card as an image, to the app of your choice;
• when you export a backup, a file you put wherever you like.

Wallabi does not encrypt your documents. Their protection depends on your phone’s, and anyone who has access to a backup file can read it. The app is not designed for sensitive documents.

3. Analysis happens on your device

When you add a document, Wallabi looks for codes in it and reads its text to suggest a title and a date. This analysis takes place on the phone: your images, your documents and the text read from them are not transmitted.

It relies on components supplied by the platforms: Apple Vision on iPhone, Google ML Kit on Android.

On Android, ML Kit sends measurements to Google. This is technical information about how it runs: device model, system version, app identifier, an identifier specific to this installation, response times, events and error codes. It contains neither your images nor the result of the analysis, and Google provides no way to turn it off. See Google’s ML Kit disclosure.

4. What we receive: usage statistics

To learn which features are used and where the app fails, Wallabi records technical events and, when a connection is available, sends them to a database hosted in Europe (Supabase). The app never needs a connection to work.

What an event contains:

• a session identifier, a random number, valid for one calendar day and then replaced, that does not follow you from one day to the next;
• the action performed and its timestamp: a screen viewed, a step in adding a document, a code format, a reminder setting;
• technical characteristics: platform, system version, make and model, screen size, device language, app version, install store;
• when something breaks, a technical error code and message, with the program trace.

What an event does not contain: the titles, venues, dates, notes or codes of your tickets, the content of your documents, or any permanent identifier of a person or device.

One limit you should know about: an error message is written by the system. It sometimes quotes the name or location of the file involved. We use these messages only to fix the app.

These statistics are used only by the app’s publisher. They are not sold, exchanged or passed on to an advertising partner: there are none.

Purpose	Legal basis
Running the app (local data)	No collection: processing takes place on your device
Improving and fixing the app (session statistics)	Legitimate interest

5. What the app asks to access

• Camera: to scan a ticket or a code. Requested the first time you use it.
• Photos: to add an image. Only the images you choose are imported.
• Files: to import a PDF. Only the files you choose are imported.
• Notifications: for your reminders. On Android, the app also asks for access to exact alarms and to device startup, so reminders fire on time and survive a restart.
• Internet: to send the statistics described above.

You can refuse any of these permissions: only the feature concerned stops working. Wallabi does not access your location, your contacts or your emails.

6. Retention

• Your documents: on your device, for as long as you keep them. Deletion is permanent, with no trash. Automatic deletion after the event is optional and announced beforehand. Everything disappears when you uninstall the app.
• Usage statistics: kept for 12 months, then deleted.

7. Processors and transfers

• Supabase: hosting of the statistics database, on servers located in the European Union.
• Google: recipient of the ML Kit measurements on Android, which it processes on its own behalf, under its own terms.

8. Your rights (GDPR)

You have the right to access, rectify, erase, object to and port your data. For your documents, you exercise these rights directly in the app: they are with you, and we have no access to them.

Usage statistics are not tied to any person: we have no way of finding those that came from your device. For any question: team@fabulette.net.

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with your national data protection authority (in France, the CNIL).

9. Changes to this policy

This policy may be updated, in particular if the app gains new services such as syncing between devices. Any substantial change will be notified in the app.

For the terms governing the service, see the Wallabi terms of use.