Privacy Policy
Last updated: September 26, 2025
This privacy policy is intended to clearly and transparently explain how the Listed AI mobile app, published by WIL7 (we, our), collects, uses, stores, and protects the personal data of its users.
1. Data Controller
- WIL7 (Sole Proprietorship)
- SIRET: 882 668 072 00011
- Address: 31 rue du Terrage, 75010 Paris, France
- Email: hello@listedai.app
2. Data Collected
- First name, last name
- Email address
- Username
- Images uploaded by the user
- Authentication provider (e.g., Apple, Google, email)
- System language
- Listing history
- Technical data (timestamps, logs, crash reports if enabled)
3. Purpose of Data Processing
- Automatically generate listings from photos
- Display and sync listing history
- Improve service quality (UX, detection, speed)
- Enable cross-device experience
- Generate anonymized usage statistics
- Conduct commercial and product improvement analysis
- Display personalized advertising through third-party services
4. Legal Basis for Processing
- Your consent (when creating an account or uploading photos)
- Contract performance (delivery of the Listed AI service)
- Our legitimate interests (service improvement, security, analytics)
5. Data Sharing
Your data is not sold, but may be shared with trusted technical partners:
- Firebase (Google Cloud) for secure hosting and analytics
- OpenAI, solely for processing the images you upload (no personal data is sent)
- Google AdMob for in-app advertising (rewarded and banner ads)
- Unity Ads for displaying advertisements
- TikTok SDK for advertising campaign measurement and optimization
AdMob may collect technical data (device type, advertising identifiers, IP address) to personalize ads in compliance with GDPR.
No other data sharing with third parties is performed.
6. Analytics (Firebase Analytics)
Listed AI uses Firebase Analytics to collect usage data and improve user experience:
a) Types of data collected
- App interaction events (listing creation, onboarding, etc.)
- Device information (model, operating system, app version)
- IP address (for approximate geolocation)
- Advertising identifiers (IDFA) if authorized by the user
- Performance and crash data (if enabled)
b) Purposes
- Improving user experience and app performance
- Analyzing usage trends and most-used features
- Detecting and resolving technical issues
- Optimizing performance and stability
c) Legal basis
We rely on our legitimate interests to measure and improve service performance. Where local law requires consent for analytics, we rely on your consent collected via our consent tool (e.g., Google UMP). Otherwise, we limit analytics to strictly necessary, aggregated/pseudonymized measurements.
d) Retention period
Analytics data is retained for 14 months by default, in accordance with Firebase Analytics settings. Aggregated and anonymized reports may be retained longer.
e) International transfers
Data may be transferred to Google (United States) with appropriate safeguards, including EU Standard Contractual Clauses.
f) Opt-out
You can disable analytics through app settings or by contacting us. Core app functionality remains available.
7. Advertising & Attribution (TikTok SDK)
Listed AI uses TikTok SDK to measure and optimize advertising campaigns:
a) Data collected
- Device information (model, operating system, app version)
- IP address for geolocation
- Advertising identifiers (IDFA) if authorized
- App event signals (listing creation, onboarding, etc.)
- Attribution and campaign measurement data
b) Purposes
- Measuring advertising campaign effectiveness
- Attributing conversions to TikTok campaigns
- Optimizing audiences and advertising targeting
- Analyzing advertising performance
c) Legal basis
Processing is based on your consent for personalized advertising and attribution. You can withdraw your consent at any time.
d) International transfers
Data may be processed outside the EEA (e.g., United States) by TikTok and its affiliates. Such transfers are carried out with appropriate safeguards, including EU Standard Contractual Clauses. Please refer to TikTok's Privacy Policy for up-to-date processing locations and practices.
e) Retention period
Attribution data is retained for a maximum of 24 months. Aggregated reports may be retained longer.
f) User controls
You can withdraw your consent through app settings or your device's system settings. See TikTok's privacy policy for more information.
8. Push Notifications
Listed AI may send push notifications to keep you informed:
a) Data collected
- Notification token (APNs) - unique device identifier
- Notification preferences (authorized types)
b) Types of notifications
- Transactional notifications: listing generation complete, account updates
- Promotional notifications: new features, special offers (with your consent)
c) Legal basis
Transactional notifications are necessary for service operation. Promotional notifications require your explicit consent via iOS prompt.
d) Notification management
You can disable notifications at any time via iOS settings or the app. The notification token is deleted when you disable notifications or delete the app.
e) Retention period
The notification token is retained only while notifications are enabled. It is automatically deleted when disabled or when the app is uninstalled.
9. Consent Management
Listed AI uses several mechanisms to manage your consent:
a) Google User Messaging Platform (UMP)
In the EU/EEA, we use Google UMP to request your consent for personalized advertising and tracking.
b) App Tracking Transparency (ATT)
On iOS, we request ATT authorization before any cross-app tracking, in accordance with Apple's requirements.
c) Withdrawing consent
You can withdraw your consent at any time via:
- App settings
- Your device's system settings
- By contacting us at support@listedai.app
d) Impact of refusal
You can refuse personalized advertising and continue using the app. Ads will be less relevant but the app will function normally.
10. International Data Transfers
Some of our technical partners may process your data outside the European Economic Area (EEA):
- Google/Firebase: United States - with EU Standard Contractual Clauses
- TikTok: outside the EEA (e.g., United States) - with EU Standard Contractual Clauses
- OpenAI: United States - with appropriate protection measures
All international transfers are made with appropriate safeguards to protect your data, in accordance with GDPR.
11. Data Retention
Here is an overview of retention periods for different categories of data:
| Data type | Retention period |
|---|---|
| Personal data (name, email) | Until account deletion |
| Uploaded images | Until listing/account deletion |
| Analytics events | 14 months (Firebase Analytics) |
| Advertising/attribution signals | 24 months maximum |
| Notification tokens | While notifications are enabled |
| Aggregated anonymized reports | Retained longer for research |
Additional details:
- Images: Stored as long as the listings exist in the app, then deleted if the account or the listings are removed.
- Personal data: Deleted or anonymized when the account is deleted.
- Generated listings: May be retained in anonymized form for archival or service improvement purposes.
12. Transmission to OpenAI
Only the images uploaded by the user are transmitted to the OpenAI API in base64 format.
No personally identifiable information (name, email, etc.) is transmitted.
We do not control how OpenAI may store or process these images.
13. User Rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Right to access your data
- Right to rectify inaccurate information
- Right to erasure (right to be forgotten)
- Right to restrict processing
- Right to object
- Right to data portability
You can exercise your rights at any time by contacting us at support@listedai.app
14. Security
- Secure HTTPS connections
- Firebase AppCheck protection
- Restricted access to stored images
- Firebase authentication with verified email
These measures ensure a high level of data confidentiality and protection.
15. Account Deletion
- Removal or anonymization of personal data (name, email, username)
- Deletion of uploaded images
- Possible retention of generated listings in anonymized form
16. Complaints
If you believe your data rights are not being respected, you may file a complaint with the CNIL (Commission Nationale de lInformatique et des Libertes):
www.cnil.fr17. Advertising
a) Advertising Partners
Listed AI uses the following advertising services:
- Google AdMob - for displaying banner ads, interstitial ads, and rewarded video ads
- Unity Ads - for banner ads, interstitial ads, and rewarded video ads
- TikTok SDK - for advertising campaign measurement and optimization
- Other advertising partners may be added (AppLovin, IronSource, etc.)
b) Data Collected by Partners
Advertising partners may collect the following data:
- IDFA (Identifier for Advertisers) - if accepted by the user on iOS 14.5+
- IP Address - for approximate geolocation
- Device Information - model, operating system, app version
- Usage Data - ad interactions, app usage frequency
- Technical Identifiers - session IDs, anonymous advertising identifiers
c) Consent and Preference Management
In compliance with GDPR and local regulations:
- The app uses Google User Messaging Platform (UMP) to request consent in the EU/EEA
- Users can decline ad personalization and receive non-targeted advertisements
- Consent can be withdrawn at any time through device settings or the app
- On iOS, ATT (App Tracking Transparency) authorization is requested before cross-app tracking
d) Partner Privacy Policies
For more information about how our partners use your data:
18. Data Related to PRO Subscriptions
When you subscribe to Listed AI PRO, we store a unique identifier (appAccountToken) linked to your Firebase account. This token helps verify your subscription and does not contain personal data.
No payment information is stored or processed by Listed AI — all transactions are handled by Apple via StoreKit.
19. Changes
This policy may be updated at any time.
Users will be informed in the event of significant changes.
Continued use of the app after such updates constitutes acceptance of the new policy.