Privacy Policy

The data controller is Orizon 42, publisher of the Wuli app. For any question or request about your data, write to contact@orizon42.com. You will receive an answer within one month at most. Practical questions about the app are answered on the support page.

When you start, Wuli asks you what you want to get done, where you stand, why it matters to you and when you will do it. Its questions and sentences are written by an artificial intelligence model (OpenAI). This conversation can take place before you have an account.

• What is sent: at each step, the conversation so far and what Wuli has understood are sent to our server function, which passes them to OpenAI to write the next question. Our function keeps nothing of the conversation.
• What comes out of it: your first name, your goal (what, its category, its deadline, the time you give it, when and on which days), your why, and your portrait — the sentences Wuli wrote about you, the ones you kept, and the sentence to tell yourself. They are kept on your phone and, once you have an account, copied to our server (see “Your Wuli profile” below).
• When you open a locked app, Wuli writes you two or three sentences. To do so, it sends OpenAI your first name, your goal and your why, the sentences of your portrait, what is left to do today, and, if you want to unlock, the reason you gave, what you wrote for “something else”, and your last reasons. These sentences are kept on your phone for the day.
• A cost log, for each call to the model: the action, the step, the model, the number of words processed (tokens), the cost and the duration. Never what you wrote, never what the model answered.

OpenAI receives what you write and your first name, never your email address or any identifier of your account. Under OpenAI's API terms, this content is not used to train its models; OpenAI may keep it for up to 30 days to detect abuse, then deletes it.

Once you have an account, the app sends our server a copy of what it knows, replaced in full at each change:

• your first name, your goals and their why, and your portrait (see above);
• how many apps you chose to lock (never which ones) and the hours when they are locked;
• your streak (days in a row), how many things you have done, and how many are left today;
• the language of the app;
• statistics counted on your phone: how many days you opened the app and the first one, how many tasks you created and completed, the date of your first task, of your first and last completed one, how many unlock reasons you gave and of which kind, the strict mode hours, whether notifications are allowed, whether you are Premium, whether you confirmed your portrait, your answers to the request to rate the app, your platform and the app's version.

The titles of your tasks stay on your phone, except the title of a task you unlock (see below). This profile is not visible to other users. It lets us understand who uses Wuli and where people stop, so as to improve it.

You can always reopen your apps (except during the strict mode hours you set), but Wuli asks you why, task by task: you feel lazy, it was not planned today, not now, or something else — which you then write in a few words. For each reason, Wuli keeps:

• the reason, and what you wrote for “something else” (300 characters at most);
• the task and its goal;
• what Wuli answered you;
• if you rescheduled the task, the day and time you chose;
• how long your apps were reopened, how many things were left to do, and when.

These reasons are kept on your phone (the 500 most recent) and sent to our server (all of them, as long as the account exists). They let Wuli answer you better the next time, and let us understand what really holds people back.

To lock the apps you choose, Wuli relies on what your phone's system offers. What these authorisations let Wuli see stays on your phone: the apps you chose, the time you spend in them and the times you tried to open them are never sent to our servers. Our server only knows how many apps you chose, never which ones.

On iPhone, Screen Time. You choose the apps in Apple's own picker. Apple hands them to Wuli as opaque tokens, which Wuli cannot turn into a list of your apps. When a locked app is opened, iOS gives Wuli's lock screen that app's name, only to display it (“[app name] can wait.”).

On Android, three settings you turn on yourself:

• an accessibility service (“Wuli”, in your phone's accessibility settings). It only receives the moments when a new window opens, and reads from them only the package name of the app in the foreground (for example com.instagram.android), to know whether it must be locked. It is declared unable to read the content of windows: Wuli never reads what is on your screen — no text, no messages, no photos, nothing you type — and sends nothing it sees to our servers;
• usage access (“Usage data access”). It tells Wuli which app is in the foreground when it checks again. What it shows stays on your phone;
• an exemption from battery optimisation, so that Android does not stop the lock in the background. It gives access to no data.

To let you choose the apps to lock, Wuli lists the apps that can be opened from your home screen, with their name and icon — on your phone only. It does not ask for the permission to see every installed package.

Withdrawing these authorisations from your phone's settings ends the lock at any time. The current version of the app does not access your contacts, your camera, your photos or your microphone.

With your permission, Wuli sends you notifications: the one that opens your why when you tap the button of a locked app's screen, a reminder at the time you planned, and a word in the evening. They are scheduled on your phone, with what they say. To be able to send you a notification from our server, the app also records your device's notification identifier (push token), erased when you sign out or delete your account.

In the app, Wuli measures how it is used with Firebase Analytics, and which ad campaigns bring new users with AppsFlyer. Both receive the usage events described above, tied to a random account identifier. Neither receives a text you wrote: not your goal, your why, the conversation with Wuli, a task, or the words of an unlock reason. On iOS, the advertising identifier is only shared if you allow it when Apple asks; you can change your mind at any time in Settings → Privacy & Security → Tracking.

The website runs no audience measurement. It only sets three cookies, none of which identifies you: the one that keeps a session open in its internal back office; the one that remembers the language you chose; and, if you arrived from a link carrying a campaign name (?utm=), the one that keeps that name for 30 days to add it to the App Store and Google Play links — nothing else is recorded with it.

You can open your account and sign in with your Apple or Google account rather than with a password. It is a choice: email address and password remain available. If you do, Wuli receives from the platform the following, and only this:

• an account identifier, specific to Wuli, which lets us recognise you the next time you sign in;
• your email address. With Apple, you can choose to hide it: Wuli then receives a relay address, and never knows the real one;
• your name, if the platform provides it. It is only used to prefill your first name, which you can change.

Wuli never receives your Apple or Google password, and requests nothing else from your Apple or Google account: not the contacts, calendar, files or mailbox stored there. This information is only used to sign you in and maintain your account. It is not sold, not used for advertising, not transferred to any third party, and not used to train any artificial intelligence model.

Wuli's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Wuli's access to your account at any time: at Google, from myaccount.google.com/permissions; at Apple, from Settings → your name → Sign-In & Security → Sign in with Apple. This does not delete your Wuli account: to erase it, delete it from the app, or write to contact@orizon42.com.

What you created with an earlier version of the app stays attached to your account, and is erased with it. If someone named you as their witness in an earlier version, you can ask for your phone number, and everything attached to it, to be erased by writing to contact@orizon42.com from any address, stating your number; erasure takes place within eight days.

Wuli sells no data. It uses the following processors, each for a specific task, and no others:

You have the right to access, rectify, erase, restrict, object to and port your data. These rights are exercised at contact@orizon42.com.

From the app, you can delete your account at any time: deletion erases your profile, your goals, your portrait, your unlock reasons and everything else attached to the account. A copy of your data is sent on request, from the app's “Contact us” or by email.

If an answer does not satisfy you, you can refer the matter to the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, France.

Data is encrypted in transit and at rest. Access to the database is partitioned by row-level security policies: an account only sees its own data. Your Wuli profile and your unlock reasons can only be written by your own account, and cannot be read from the app by anyone else.

Wuli is not intended for people under fifteen and does not ask them to open an account. If you find that an account has been opened by a minor under fifteen, write to us: it will be closed.

Any change to this page — new data collected, new processor, new retention period — is published here, with an update date.