The principle, in one sentence
No identity is required to use the core of the app, and inventories are designed to stay in the private, OS-protected storage reserved for the app.
Data controller
The data controller for processing described in this policy is AutomatisIA – Philippe Cohen EI, Avenue des écoles, Beausoleil B5, 13120 Gardanne, France, SIRET 924 580 129 00014.
Contact regarding personal data: use our contact form.
Data processed on iwisur.com
Visiting the site
This site sets a single cookie: your chosen or detected display language (French or English), kept for 13 months. It’s a strictly functional cookie, with no measurement or advertising purpose: it does not track your browsing and is never shared with a third party. As such, under the CNIL’s (the French data protection authority) guidance, it is exempt from consent. The site uses no advertising, no audience-measurement tool, and loads no font, image or script from a third party.
As with any site, the host may temporarily process technical data needed to deliver and secure the service: IP address, date and time, requested page, user agent and error logs. The legal basis is the publisher’s legitimate interest in providing and securing the site.
App store links
When links to the App Store or Google Play are added, Apple’s or Google’s own privacy rules will apply once you leave this site.
App data
Data kept on your device
Inventories, quantities, locations, dates, reminders, anonymized household profiles, declared constraints, bags, equipment, radio frequencies and history logs are designed to be stored in a local database, in the private, OS-protected storage (iOS/Android) reserved for the app. This information is not sent to AutomatisIA for everyday operation.
Some entries, especially declared medical needs, may reveal sensitive data. They stay optional, are processed locally to provide the requested feature, and should be protected by your phone’s lock.
Actions that may transmit data
- Barcode scanning: the product code may be sent to the data provider you use when you trigger the scan. No household profile is attached to the request.
- Rally-point map: if you choose to display a map for your rally point, the map provider receives the request needed to show it. This consent is separate from the barcode-scan one and remains revocable on its own.
- Exporting your data: you choose the file and its destination. Before it leaves the app, it displays: « This file is not encrypted. Anyone who has it can read the data it contains. » In V1, storage belongs to the user; AutomatisIA does not host your exports.
- Full purchase: Apple or Google processes the purchase and passes the app a technical proof of entitlement. AutomatisIA does not access your banking details.
- Permissions: camera/photos, notifications, biometrics or file access are only requested when a matching feature justifies it. A technical permission does not authorize any other use.
The legal basis depends on the action: performance of the requested service for necessary features, and consent when processing is optional and requires it.
Support requests and the "notify me at launch" sign-up
The site's forms (contact, and the short "notify me at launch" sign-up) send your message directly, without going through your email client, to an automation tool hosted by AutomatisIA itself (n8n, on its own server), which passes the message to support and triggers an internal notification. No email address is displayed in plain text on the site. If you write to support, AutomatisIA processes your email address, any name you provide, the content of your request, and any technical information you choose to attach. If you sign up to be notified at launch, only your email address is processed, for that sole purpose.
Purpose: to respond, diagnose a problem, follow up, or let you know once when the app is available. Legal basis: performance of actions taken at your request for support; explicit consent for the launch sign-up (checkbox, withdrawable at any time via our contact form). Don’t send your full inventory or detailed medical data: if you attach an export, note that it’s never encrypted.
Recipients and transfers
Support data is accessible only to authorized personnel at AutomatisIA and to providers strictly necessary for messaging and hosting. The site is hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France.
If a provider processes data outside the European Economic Area, AutomatisIA verifies that a transfer mechanism complies with Chapter V of the GDPR. The actual list of subprocessors will be updated before the app launches.
Retention periods
| Data | Retention period |
|---|---|
| Inventories in the app | Until deleted by the user or the app is uninstalled; the database is not included in this version’s automatic system backups |
| Support messages | 12 months after the request is closed, then deleted or archived if a legal obligation requires it |
| "Notify me at launch" email | Until launch and the notification is sent, or until consent is withdrawn |
| Purchase records | As long as needed to manage the entitlement, then applicable legal accounting periods |
| Language cookie (iwisur_lang) | 13 months, then re-detected on your next visit |
| Site technical logs | Short period set with the host, no longer than needed for security and diagnostics |
Your rights
Depending on the processing and its legal basis, you may request access, correction, deletion, limitation, portability or object to processing. You may withdraw consent at any time without affecting prior operations.
Use our contact form to specify your request. Identity proof is only requested in case of reasonable doubt and proportionately. You may also file a complaint with the CNIL.
Data stored only on your phone is not accessible to AutomatisIA: viewing, correcting and deleting it is done directly in the app.
Security and limits
iwisur applies data minimization, storage in the OS-protected private space, and limited permissions. No system offers absolute security, though. An export is never encrypted: only share it with people you trust, over a secure channel. Protect your phone with a passcode and only install updates from the official stores.
The exact wording is: « no identity required, no remote access to your inventories ». It does not mean absolute network anonymity: an internet provider, host or store may process an IP address and technical metadata.
Policy updates
This policy will be updated before the app launches to reflect the services actually enabled, their providers and their retention periods. Any significant changes will be noted on this page and, if necessary, in the app.
Important: this version anticipates the architecture planned as of September 27, 2026. It must be checked against the actual behavior of the published version and reviewed by counsel before going live.