Privacy Policy

The controller under the GDPR is Riccardo Salvagio, Gabelsbergerstraße 48d, 80333 München, Germany. For any privacy question or request write to info@wild-apps.com. The full operator details are in the Impressum.

• Account data: name, email address and a salted hash of your password (never the password itself), the date you accepted the Terms of Service and which version.
• Profile data you choose to add: photo, bio, skills, languages, links, work experience, education and certifications.
• Your CV: we do not store CV files. The CV a company sees, and the one you can export, is your WildWork profile turned into a PDF at the moment it is opened. If you fill your profile from a CV or a LinkedIn file, the file is read once in memory to suggest the profile fields you then review, and is then discarded: it is never saved and never logged.
• Listings and applications: jobs, services and work exchanges you publish, with their photos, and the applications, inquiries and booking requests you send or receive.
• Messages: the chat messages and photos you exchange with other users.
• Reports and blocks: when you report content we store who reported what, the reason and your note; when you block a user we store that block.
• Device data: if you allow notifications, the push token of your device and its platform.
• Technical data: IP address and request details in server logs, used for security and rate limiting, and server-side error records.

We do not collect your device location. Photos are re-encoded on upload and their metadata (EXIF, including GPS position) is removed before they are stored.

No analytics, no crash reporting, no advertising. The app contains no analytics, advertising or crash-reporting SDK, and we do not build marketing profiles.

• Providing the service: your account, listings, applications, messages and notifications (performance of a contract, Art. 6(1)(b) GDPR).
• Safety and moderation: handling reports, enforcing blocks, preventing fraud, spam and abuse, enforcing the Terms of Service (legitimate interests, Art. 6(1)(f) GDPR, and our obligations as a hosting service under the EU Digital Services Act).
• Transactional email: password reset and messages about your account (performance of a contract).

We do not sell your personal data and do not use it for advertising.

• Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg): the database (Amazon Aurora), the uploaded photos (Amazon S3) and the logs (Amazon CloudWatch) are stored in the AWS Frankfurt region (eu-central-1), Germany. AWS processes them only on our behalf, under its Data Processing Addendum, which includes the EU Standard Contractual Clauses.
• Expo (650 Industries, Inc., USA) and Google Firebase Cloud Messaging (Google, USA/EU): deliver push notifications. They receive your device's push token and the notification text (for example the sender's name and the first words of a message).
• Resend (Resend, Inc., USA): delivers transactional emails. It receives your email address and the content of the email.
• Other users see what you publish (profile, listings) and what you send them (applications, messages). Chat photos are visible only to the two people in the conversation.

Transfers to the providers in the USA are covered by the EU-US Data Privacy Framework where the provider is certified, otherwise by the European Commission's Standard Contractual Clauses. We may also disclose data when the law requires it or to protect the safety of our users.

• Account, profile, listings and messages: as long as your account exists.
• Push tokens: until you sign out on that device, the token stops working, or you delete your account.
• Blocks: until you unblock the user or one of you deletes the account.
• Reports: while they are handled and up to 12 months after they are closed, longer only if needed for a legal claim or a request from an authority.
• Server logs and error records: up to 12 months.
• Backups: overwritten on a rolling basis within 30 days.

Delete your account in the app (Settings → Privacy → Delete account) or as described on Delete your account. Your profile, listings, messages, applications, push tokens, reports you made and blocks are deleted immediately; records the law requires us to keep are detached from your identity.

Every user, listing and conversation in the app can be reported, and any user can be blocked. Reports are reviewed by the operator; the reported person is not told who reported them. Blocked users cannot message you and you cannot message them; you can unblock them in Settings → Privacy → Blocked users. To report illegal content without the app, write to info@wild-apps.com.

You have the right to:

• access your data and get a copy (in the app: Settings → Privacy → Export my data);
• correct inaccurate data (most of it directly in your profile);
• have your data erased;
• restrict or object to processing based on legitimate interests;
• data portability;
• withdraw a consent at any time (for example notifications, in the system settings of your phone).

Write to info@wild-apps.com to exercise them. You can also complain to a data protection authority; the one competent for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

All traffic is encrypted (HTTPS/TLS). Passwords are stored only as salted hashes. Chat photos are served only to signed-in participants of the conversation. Access to the server is limited to the operator. If a breach affects your data we will inform you and the authority as the law requires.

WildWork is for people aged 18 and over. We do not knowingly collect data from minors.

When this policy changes we update the date at the top; for significant changes we tell you in the app or by email.