Privacy Policy

Last updated: 17 August 2026

Wombu is an app for running a club. This policy explains exactly what it stores about you, why, and how to make it go away. It is written to be read, not to be survived.

Who is responsible

The data controller is [CONTROLLER NAME AND REGISTERED ADDRESS — to be completed before launch]. You can reach us at privacy@wombu.eu.

What we collect

• Your account: first name, surname, email address, and a password stored only as a cryptographic hash — we never see or store the password itself. A phone number and profile photo are optional, and the app works fully without either.
• Your club activity: which clubs and groups you belong to, your role in them, and any announcements or events you create.
• Your settings: chosen language and whether you want email notifications.
• Technical data needed to run the service: sign-in tokens, and IP addresses recorded briefly to rate-limit password-reset requests and prevent abuse.

We do not use advertising identifiers, we do not track you across other apps or websites, and we do not build a profile of you for marketing.

Why we are allowed to hold it

To provide the service you asked for (contract), and to keep it secure and working (legitimate interests). Optional things — a phone number, a profile photo, email notifications — rest on your consent, and you can withdraw that at any time in the app without losing your account.

Who else sees it

• Other members of your club, according to the club's own settings and your role in it. A member restricted to a single group sees that group's activity and nothing else from the club.
• Brevo (Sendinblue SAS, France) sends our transactional email — account confirmation and password resets. They receive your email address and the message itself.
• Our hosting provider — [HOSTING PROVIDER AND COUNTRY — to be completed before launch].

We do not sell your data. We do not share it with advertisers. Nobody receives it for their own purposes.

Where it is kept

Within the European Economic Area. If that ever changes we will say so here before it happens, and use the safeguards the GDPR requires.

How long we keep it

Your account data for as long as your account exists. Rate-limiting records for a few hours.

When you delete your account we remove your name, email address, phone number and profile photo, along with your saved sign-ins, your devices, the reminders you set, which announcements you had read, and any requests you made to join a club.

Some things stay, because deleting them would tear holes in other people's records of what was arranged. These are kept without your name attached to them:

• Announcements and events you posted to a club.
• Whether you said you were coming to an event that has already happened, because that is the club's record of who was there.
• Answers you gave in a club vote, because removing one would change a result other people have already acted on. Answers to votes the club ran anonymously were never recorded against you in the first place.

Cookies and this website

This website sets no cookies and loads nothing from anybody else — no fonts from a CDN, no embedded map, no analytics, no advertising pixel. It keeps two things in your browser, and both stay there: the language you picked, and your answer to the cookie question. Neither is sent to us, and neither identifies you.

If we ever start counting visits, it will happen only after you have said yes on that banner — and you can change your answer at any time from the Cookie settings link at the bottom of any page. Saying no costs you nothing: the site behaves identically either way. This section is about the website. The app is covered by everything above.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how it is used, or take it elsewhere. Most of this you can simply do in the app — including deleting your account outright, without emailing anyone. For anything else, write to privacy@wombu.eu.

If you think we have handled your data badly, you can complain to your national supervisory authority. In Slovenia that is the Information Commissioner (ip-rs.si).

Children

Wombu is not intended for children under 16. If a club's members include minors, the club is responsible for having whatever consent local law requires.

Changes

If this policy changes in a way that affects you, we will tell you in the app rather than quietly editing this page.