Overview
This policy explains how WillFolks ("WillFolks", "we", "us") handles personal data when you use the WillFolks mobile application and this website (together, the "Service").
WillFolks is designed around data minimisation: sign-up asks for as little as possible, and the device data used to verify a goal is limited to what that goal requires.
Data we collect
Depending on how you use the Service, we process the following:
- Account data: the identifier and basic profile details shared by the sign-in provider you choose, and the username and profile information you add.
- Wallet data: the public address of your in-app wallet and the transactions made with it.
- Goal data: the goals you create, their rules, the amounts staked and their results.
- Verification data: only for goals that need it — alarm responses, usage time of the apps you choose to limit, and your location for location-based goals.
- Evidence: photos, videos or text you submit so that an unmeasurable goal can be assessed.
- Social data: your friends list and the participants of the challenges you join.
- Technical data: device model, operating system, app version, language and diagnostic logs.
- Support data: messages you send us.
How we use it
- To run the Service: create your account and wallet, hold and release stakes, and resolve goals.
- To verify goals with the method attached to each one.
- To generate your personal activity reports and notify you about events in the app.
- To keep the Service secure, prevent cheating and fraud, and fix errors.
- To meet legal obligations.
We do not sell your personal data, and we do not use it to show you third-party advertising.
AI and peer verification
Goals that cannot be measured by a sensor are assessed automatically from the evidence you provide. The assessment can run on your own device or, through our peer-to-peer network, on the device of another participant that is paid to perform it.
When another device performs the assessment, the evidence needed for that single check is shared with it. Do not include people or information in your evidence that you are not willing to share for that purpose.
Automated results decide the outcome of a stake. If you think one is wrong, you can ask us for a human review using the contact address below.
Blockchain data is public
Escrow and resolution run on a public blockchain. Wallet addresses, amounts and transaction times recorded there are visible to anyone and cannot be edited or deleted by us or by you.
We do not publish your name or contact details on-chain. However, someone who can link your wallet address to you may be able to see the transactions made with it.
How long we keep it
We keep account and goal data while your account is open. Verification data and evidence are kept only as long as needed to resolve the goal and handle a possible dispute, then deleted or anonymised.
Some records must be kept longer to comply with legal, tax or anti-fraud obligations. On-chain records are permanent by nature.
Security
We protect data in transit and at rest, limit access to those who need it, and ask you to authenticate before sensitive wallet details are shown. Inactive sessions are closed automatically.
No system is perfectly secure. If a breach affects your data, we will notify you as the law requires.
Your choices and rights
- Permissions: location, usage access and notifications are controlled from your device settings. Turning one off disables the goals that depend on it.
- Access and portability: you can ask for a copy of your data.
- Correction and deletion: you can correct your profile and ask us to delete your account. Active goals must be resolved first, and on-chain records cannot be erased.
- Objection and restriction: you can object to certain processing or ask us to limit it.
- Complaints: you can complain to the data protection authority where you live.
To exercise any of these rights, write to the contact address below. We may need to confirm your identity first.
Children
The Service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, tell us and we will remove it.
International transfers
Our providers may process data in countries other than yours. When that happens we rely on the safeguards the applicable law requires for such transfers.
Changes to this policy
We will update this policy when our practices change. The date at the top shows the latest revision, and significant changes will be announced in the app or on this website before they apply.
Contact
For questions about this policy or to exercise your rights, use the contact address below.