Privacy policy

Last updated: 3 November 2026.

This page describes the data Weby actually collects, column by column. It is written from the inventory kept alongside the application's code, not from a template. It applies to Weby 2.0: in a store, you scan your items, pay in the app and walk out with your receipt.

1. Who processes your data

The controller is the publisher of Weby, Simon Gracies EI, 33B rue Copernic, 6e étage, 75116 Paris, France (see also the legal notice page, in French). For any question about your data, write to confidentialite@tryweby.com.

When you buy, the store is the seller. It collects your payment on its own Stripe account, and your receipt is part of its sales journal. Weby provides the app and keeps that journal for the store.

Weby is only for people aged 18 or over (see the terms of use). Weby does not knowingly collect data about a minor; if you learn that a minor has opened an account, write to us and the account will be deleted.

2. What Weby collects, and what for

Without an account

You can open the app, see the map of stores and the scanner without an account. If you allow your location, it is sent to Weby's server while it looks for the Weby store you are in, then forgotten: it is recorded nowhere. You need an account to add an item to a basket.

If you use Weby as a customer

The camera is used to read the barcodes of your items. The app keeps only the code read and its type, which it sends to find the item: no image is recorded or sent.

If you choose to sign in with Apple or with Google, that provider confirms your identity and sends us an identifier, your email address (with Apple, you can choose a hidden address that forwards our emails to you without revealing yours) and your name if you agree to share it. We never receive your Apple or Google password. For an account opened with Apple, we keep an encrypted token that lets us revoke Weby's access to your Apple account when you delete your account. When you use Sign in with Google, Google may also collect technical information about your device and your use of its sign-in, for its own analytics and fraud prevention.

If you use Weby for a store

• The store: its name, its address, its position on the map (computed from the address), its company registration number (SIRET), its VAT number and the distance at which it is suggested to customers. The name, address and position of a published store are public: that is how it can be found. The registration and VAT numbers are readable by nobody through the app; they are printed on every receipt, as the law requires.
• The catalogue: the items, their barcodes, prices and VAT rates. Weby keeps the count of each file import and the account of the person who sent it; that link is forgotten if that person deletes their account.
• The store's Stripe account: Stripe itself collects and verifies the identity of the company and of its representative, and the bank account that receives payments. Weby only keeps the identifier of that account and its status (sign-up completed, payments possible, documents requested by Stripe).
• The team: each member (owner, manager, till, security), their role and the date they joined. The owner and the manager see the members' first name and email. A team is joined with an 8-character invitation code, single-use and valid for 24 hours, which Weby keeps only hashed; Weby records who created it and who accepted it. To prevent codes from being guessed, failed attempts are counted (your account and the time), 10 per hour at most.
• The exit check: the team scans the receipt's QR code. Each check is recorded with its receipt, its time and its result, without the name of the person who checked.

If a team member deletes their account, their access to the store ends, and the store only keeps the record that an account, now anonymous, was part of it. The owner of a store cannot delete their account while the store is on Weby: they remove it first, or write to us.

3. On what basis

Each processing activity rests on a basis provided for by the EU regulation (article 6 of the GDPR):

• The contract (article 6.1.b): your account and sign-in, your basket, your payments, your saved cards and your receipts; a store's space, its team and its invitations; the service's emails.
• Your consent (article 6.1.a): your location, which you allow in your phone's settings and can withdraw at any time.
• A legal obligation (article 6.1.c): the store's sales journal, which the law requires to be unalterable and kept (article 286, I, 3° bis of the French General Tax Code); invoices issued before version 2.0, kept for 10 years (article L123-22 of the French Commercial Code); answering your requests to exercise your rights.
• Weby's legitimate interest (article 6.1.f): securing the service and its technical logs, limiting attempts at invitation codes, answering support. You can object by writing to confidentialite@tryweby.com.

4. What Weby does not collect

• your location is never kept: it is only read while the app is open, never in the background, and Weby keeps no history of your movements;
• no camera image: only the code read is sent;
• no card data: card numbers go straight to Stripe and never pass through Weby or its database. Weby only knows the card's brand, its last 4 digits and its expiry date, to show it to you;
• no date of birth, no health data, no biometric data. When a receipt contains alcohol, the store's team checks your age at the exit, and Weby keeps nothing of it;
• no advertising identifier, no third-party tracker, no analytics, neither in the app nor on this site;
• no contacts imported from your address book;
• no browsing history, and no IP address retained by the application. The host's technical logs contain some, as any server's do; they expire on their own and Weby does not use them.

This site sets no cookie, keeps nothing on your device and sends nothing. Until 21 October 2026, the beta form ("Try Weby" button) was the exception: it loaded the Cloudflare Turnstile anti-bot check and passed your email address and your two choices to Weby's host (see "Beta sign-up").

5. Who reads what

The store where you buy has your receipts in its sales journal: the items, the totals and the payment method (card brand and last 4 digits), as on an ordinary till receipt. It sees neither your name, nor your email, nor your location. At the exit, by scanning your QR code, the team sees whether the receipt is paid, the number of items, whether it contains alcohol, and whether it has already been checked.

Your receipts can only be read in the app by you. Your exit QR code is a random code that says nothing about you.

Nobody sees your location: Weby does not keep it. Nobody sees your saved cards except you, and Stripe, which stores them.

In a store's team, the owner and the manager see the members' first name, email and role. Before accepting an invitation, you see the store's name and the role offered; the team only sees your first name and email after you accept.

6. Processors

Your account data is hosted in the European Union, in Paris, with Supabase. Four providers are based in the United States: Cloudflare (this website, no account data, the anti-bot check of the beta form until 21 October 2026, and forwarding of emails sent to Weby), Apple (Sign in with Apple, Apple Pay, notifications and the position of a store address), Resend (emails sent) and Google (the support inbox, and Sign in with Google). These transfers are covered by the safeguards of the EU General Data Protection Regulation (GDPR): Cloudflare and Resend are certified under the EU-US Data Privacy Framework; for Apple, the European Commission's standard contractual clauses apply; Google LLC is certified under the Data Privacy Framework. Supabase is a Singapore company: the data stays hosted in Paris, and remote access by its teams is covered by the European Commission's standard contractual clauses.

7. How long, and what survives deletion

Your data is kept for as long as your account exists. When you delete it, from the app's Account screen, everything marked "erased" or "deleted" in the table in section 2 goes immediately.

A receipt carries no data that designates you: no name, no email. When you delete your account, your receipts stay in the store's sales journal, which the law forbids altering, but nothing links them to you any more.

If you used Weby before version 2.0, one piece of identifying data may survive the deletion of your account: your name and email frozen on an invoice already issued (see section 8).

The full detail is on the Account deletion page.

8. If you used Weby before version 2.0

Until version 2.0, Weby was used to book and order in restaurants and bars. These features are no longer in the app, but the data created with them remains in the database, handled as follows, until it is cleaned up, which will be announced on this page.

For a business from that period, Weby also keeps what was entered: legal name, company registration number and activity code, address, public phone number, notification email and phone, team and invitations, bookable staff with their name and photo, their absences, and the walk-in customers recorded by the business (name, and possibly a phone number, which only the team members who managed the diary could see again).

9. Your rights

You have the right to access, correct, erase, object to, restrict and port your data. You can delete your account directly in the app, from the Account screen. For anything else, write to confidentialite@tryweby.com: you will get an answer within one month.

You can also withdraw at any time your consent to your location, the camera and notifications, in your phone's settings; what was done before does not change. Without your location, you choose your store on the map.

If an answer does not satisfy you, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

10. If you are in the United States

Weby does not sell any personal information and does not share any for targeted advertising, within the meaning of the California Consumer Privacy Act and equivalent state laws. Weby uses no advertising identifier, no ad network and no data broker. There is therefore nothing to opt out of, because nothing goes out.

If you are a California resident, you may exercise your rights of access, deletion and correction by writing to confidentialite@tryweby.com. You will not be treated differently for exercising them.

11. Beta sign-up

Until 21 October 2026, the "Try Weby" button on this site let you ask for access to the beta of the app, on iPhone, with TestFlight. The app has been on the App Store since 16 October 2026: the form has been removed and Weby no longer receives requests. Requests already received are still handled as follows.

• What was recorded: your email address, your profile (customer or business), the type of business you chose, the date of your request and the date of the last email sent.
• What it was for: sending you the beta access link, at most one email every 24 hours, and useful information about the beta. Nothing else: no advertising, no resale.
• Who received it: Supabase, which hosts it in Paris, and Resend, which sent the email and kept it for 30 days (see section 6).
• The anti-bot check (Cloudflare Turnstile): so that the form cannot be used for automated submissions, it loaded, only when you opened it, Cloudflare's Turnstile widget from challenges.cloudflare.com. Cloudflare then received your IP address and technical information about your browser and device, to check that a person was filling in the form; it did so on its own behalf, under its privacy policy. Weby only received a verification token, which it had Cloudflare confirm together with your IP address, then discarded: neither the token nor the IP address was recorded.
• How long: 1 year at most after your request, then erased automatically. If you create a Weby account and then delete it, the request made with the same address goes with it.
• Your IP address was not recorded: to limit repeated requests, Weby only kept an encrypted fingerprint of it, which cannot be turned back into the address, for 24 hours.
• Your rights: write to confidentialite@tryweby.com to access your request, correct it or have it erased.

12. Contacting us

For any question about your data: confidentialite@tryweby.com. For everything else: the support page.

13. Changes

This policy changes along with the application. The date at the top of the page says when it last changed.