Privacy Policy
Wuli asks its users for other people's phone numbers — their witnesses, and their quiz-duel opponents. These people have no account and have signed nothing. This page is written for them first.
Last updated: September 11, 2026
Who is responsible
The data controller is Orizon 42, publisher of the Wuli app. For any question or request about your data, write to contact@orizon42.com. You will receive an answer within one month at most.
If you are a witness and have no account
Someone named you as the witness of a commitment. To do so, they entered your first name (or the name they know you by) and your phone number in their app. You were not asked beforehand: that is the doing of the person who named you, not ours.
Wuli does not send you any text message. The message containing the link was sent to you by that person, from their own phone: Wuli drafted the text, and they sent it.
In practice, here is everything Wuli holds about you:
- the name that person gave you, and your phone number, stored in their contact book. This number is only used to prefill that person's Messages app, on their phone, when they write to you. Our servers never send anything to this number;
- whether you opened the link you received, and at what time — this lets the person know their message reached you;
- your answer (“kept” or “not kept”) and the time of that answer;
- your email address, only if you left it yourself on the link's page.
Wuli never writes to you on its own initiative. The only exception is the one you choose: if you leave your email address on the link's page, you receive one email, just one, once the commitment's deadline has passed. No advertising, no follow-ups, no newsletter. Your number and your address are neither sold, nor rented, nor passed on to anyone other than the processors described below.
You can ask at any time for your number, and everything attached to it, to be erased by writing to contact@orizon42.com from any address, stating your number. We have no other way of identifying you, and we will not ask you for any other. Erasure takes place within eight days.
If you are a duel opponent
Someone challenged you to a quiz. As with a witness, they entered your name and number in their contact book, and the message containing the link was sent to you by them, from their own phone: Wuli sent you nothing.
The link's page lets you play without an account. It asks for no name, no number, no email address. If you play, Wuli records your game, and nothing else:
- the time you started, then finished the quiz;
- the answers you ticked for each question, and whether they were correct;
- your score and how long your game took;
- if you practise, the score and duration of each practice round — they do not count towards the duel, and only the link's page shows them.
This data only serves this duel: showing the result to you and to the person who challenged you. It is attached to the duel and erased with it — when that person deletes the duel's task, or their account. You can also ask for it to be erased at contact@orizon42.com, enclosing the link you received: it is the only way to find your game, and we will not ask you for anything else.
Your email address, if you leave it
It is optional. The link's page only offers it before the deadline; the field is empty, nothing is pre-ticked, and nothing is stored until you have typed your address yourself.
It serves one purpose only: letting you know, once, that the time has passed, so that you remember to answer. It is used for nothing else, and is never shown to the person who named you.
You can have it forgotten at any time, without giving any reason: from the link's page (“Forget my address”), or from the link at the bottom of the reminder email. The address is then erased immediately, and a reminder that has not yet been sent will not be sent. If the reminder has already gone out, our sending log erases it too: it keeps neither your address nor the text of the message.
What Wuli collects, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address (account) | Creating the account, signing in, answering a support request. | Performance of the contract |
| Apple or Google identity | Only if you choose “Continue with Apple” or “Continue with Google”: signing you in without a password. See “Sign in with Apple or Google” below. | Performance of the contract |
| First name or nickname | Showing it to your witness: without it, they would not know who is writing to them. | Performance of the contract |
| Your phone number | Optional. You enter it if you wish; it is not required to open an account. | Consent |
| Title and deadline of your tasks | The core of the service. The title is only shown to the witness if you leave the “The witness sees the task title” setting on; otherwise they read “a commitment”. | Performance of the contract |
| Name and number of your witnesses and duel opponents | Keeping them in your contact book, and prefilling on your phone the message you send them yourself. Wuli sends nothing to these numbers. | Legitimate interest in providing the service, under the safeguards described above |
| A witness's email address | Optional, left by the witness themselves on the link's page. Letting them know once, when the commitment's deadline has passed. | Consent |
| Witnesses' answers | Setting the status of the task. The witness's answer decides, not yours. | Performance of the contract |
| Topic and questions of a duel | Giving both opponents the same quiz at the set time. | Performance of the contract |
| A duel opponent's game | Answers ticked, score and duration of the opponent who plays, without an account, from the link they received, and the scores of their practice rounds. Showing the duel's result to both players, and their practice history to the opponent. | Legitimate interest in running the duel the opponent chose to start |
| Revision text or document for a duel | Generating the five questions, once. Erased in the same transaction as the questions are inserted, and never passed on to the opponent. | Performance of the contract |
| Reminder email log | Knowing what was sent to a witness, and never sending them the same reminder twice. | Legitimate interest |
| Log of text messages sent before September 11, 2026 | Wuli no longer sends text messages. The log of those sent before is kept for accounting and incident follow-up. | Legitimate interest |
| Usage events | What happens in the app — account created, task created or sealed, duel played, subscription — with the mode of the task, never its title, and nothing about your witnesses or duel opponents. Understanding how Wuli is used, to improve it. | Legitimate interest |
| Advertising attribution | Which ad campaign, if any, led to installing Wuli. On iOS, the device's advertising identifier only if you allow it (App Tracking Transparency); otherwise, only Apple's aggregated attribution (SKAdNetwork), which identifies no one. | Consent on iOS; legitimate interest otherwise |
| Subscription identifier | Knowing whether your account is entitled to premium features. | Performance of the contract |
| Waiting-list email address | Letting you know when we open, once. | Consent |
In the app, Wuli measures how it is used with Firebase Analytics, and which ad campaigns bring new users with AppsFlyer. Neither receives the title of a task, its content, or any data about your witnesses or duel opponents. On iOS, the advertising identifier is only shared if you allow it when Apple asks; you can change your mind at any time in Settings → Privacy & Security → Tracking.
The website measures nothing: it sets no cookie other than the strictly necessary one that keeps a session open in its internal back office, which is why no consent banner is shown there.
Sign in with Apple or Google
You can open your account and sign in with your Apple or Google account rather than with a password. It is a choice: email address and password remain available. If you do, Wuli receives from the platform the following, and only this:
- an account identifier, specific to Wuli, which lets us recognise you the next time you sign in;
- your email address. With Apple, you can choose to hide it: Wuli then receives a relay address, and never knows the real one;
- your name, if the platform provides it. It is only used to prefill the first name shown to your witness, which you can change before confirming.
Wuli never receives your Apple or Google password, and requests no other access: no contacts, no calendar, no files, no mailbox. This information is only used to sign you in and maintain your account. It is not sold, not used for advertising, not transferred to any third party, and not used to train any artificial intelligence model.
Wuli's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke Wuli's access to your account at any time: at Google, from myaccount.google.com/permissions; at Apple, from Settings → your name → Sign-In & Security → Sign in with Apple. This does not delete your Wuli account: to erase it, delete it from the app, or write to contact@orizon42.com.
How long
| Data | Retention period |
|---|---|
| Account and profile | As long as the account exists, then erased immediately when it is deleted. |
| Apple or Google identity | As long as the account exists. Erased with it. |
| Usage events | 14 months at Firebase, then deleted. |
| Advertising attribution | As long as AppsFlyer needs it to attribute installs, within its own retention periods. |
| Tasks and commitments | As long as the account exists. Erased with it. |
| Witness contact book | As long as the user keeps it, or until the witness themselves asks. Erased with the account. |
| Witness links and answers | Like the task they belong to: erased with it, or with the account. |
| A duel opponent's game | Like the duel it belongs to: erased with it, that is with the duel's task, or with the account of the person who issued the challenge. |
| A witness's email address | Until the witness asks for it to be forgotten — from the link's page or from the reminder email —, or until the link is erased. |
| Reminder email log | Erased as soon as the witness has their address forgotten, or with the account of the person who named them. |
| Revision text or document for a duel | For the time it takes to generate the quiz. Erased immediately afterwards. |
| Text message log | The number and the text are erased when the account concerned is deleted, or on request; only the type of message, its cost and its date remain. |
| Waiting list | Until you ask to be removed, at contact@orizon42.com. |
Who else handles it
Wuli sells no data. It uses the following processors, each for a specific task, and no others:
| Processor | What it does | Where |
|---|---|---|
| Supabase | Hosting of the database, authentication and server functions. This is where all the data described above lives. | European Union |
| Resend | Sending emails: the app sign-in code, and the reminder a witness asked for by leaving their address. Receives the recipient's address and the text of the message. | United States, under standard contractual clauses |
| OpenAI | Generating a quiz's questions from a text or document provided by the user, only for duels where this option is chosen. Receives the text, never anyone's identity. | United States, under standard contractual clauses |
| RevenueCat | Managing subscriptions: knows that an account identifier has an active subscription, and nothing of the content of tasks. | United States, under standard contractual clauses |
| Google (Firebase Analytics) | Usage events of the app, tied to a random account identifier — never an email address, a task title or a witness's data. | United States, under standard contractual clauses |
| AppsFlyer | Attribution of installs to ad campaigns, and the few events that count as conversions (account created, task sealed, subscription). Receives the advertising identifier only with your permission on iOS. | United States, under standard contractual clauses |
| Apple and Google | Distributing the app and notifications. Receive what their platforms receive from any installed app. If you choose to sign in with them, they confirm your identity to Wuli (see above). | United States, under standard contractual clauses |
Wuli never passes a witness's or a duel opponent's data to OpenAI, RevenueCat, AppsFlyer, Apple or Google. Their number only leaves Supabase for the phone of the person who saved it in their contact book. Their email address, if they left one, only goes to Resend when the reminder is sent.
Brevo, which delivered Wuli's text messages until September 11, 2026, is no longer involved.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. These rights are exercised at contact@orizon42.com — and, for witnesses, without having to create anything. A witness who left their email address can also have it forgotten themselves, in one tap, from the link's page.
From the app, an account holder can delete their account at any time: deletion erases the profile, tasks, witness contact book, links and duels attached to it. A copy of their data is sent on request, from the app's « Contact us » or by email.
If an answer does not satisfy you, you can refer the matter to the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, France.
Security
Data is encrypted in transit and at rest. Access to the database is partitioned by row-level security policies: an account only sees its own data. A witness's page, like a duel's, reads no table directly: it goes through server functions that only return what is strictly necessary — a witness's email address, for example, is never displayed there again, and during the duel, a quiz's correct answers only reach it once the question has been answered.
Minors
Wuli is not intended for people under fifteen and does not ask them to open an account. If you find that an account has been opened by a minor under fifteen, write to us: it will be closed.
Changes
Any change to this page — new data collected, new processor, new retention period — is published here, with an update date. A change affecting witnesses' data is announced in the app before it takes effect.