Last updated: October 1, 2026
Privacy Policy
At Wisdom, we take the privacy and protection of our users’ personal data seriously.
This Privacy Policy clearly explains what information we collect, why we use it, who we may share it with, how long we retain it, and what rights you have when you use the Wisdom application, our website, and the services associated with the platform.
Wisdom operates as a marketplace that connects people looking for services with people or companies offering them. For this reason, certain data processing activities are necessary to manage accounts, profiles, searches, bookings, communications, payments, collections, invoicing, verifications, support, and legal obligations.
This Privacy Policy is for informational purposes. Where processing requires your consent, we will request it specifically. The use of Wisdom is also governed by our Terms and Conditions and by the policies applicable to each functionality.
1. Data Controller
The controller responsible for the personal data managed directly by Wisdom is:
Owner: Oier Hernanz Arroyo
Trade name: Wisdom
Address: Carrer de la Font dels Reis, 60, Mataró
Email: hello@wisdomapp.es
Website: wisdomapp.es
Wisdom is the trade name under which the controller provides and manages the platform’s services.
For certain processing activities related to payments, identity verification, invoicing, or other services provided by external entities, other controllers or processors may be involved, as explained in this Policy.
2. Information We Collect
The information we process depends on how you use Wisdom. A person may use the platform as a client, as a professional, or in both roles.
A) Account and profile information
When you create or manage an account, we may collect information such as your first and last name, username, email address, profile photo, phone number where necessary, securely stored password or credentials associated with your account, and language, currency, appearance, and notification preferences.
If you use Apple, Google, or another compatible provider to sign in, we will receive the information that such provider allows us to obtain in accordance with your account settings and permissions, such as an identifier, name, or email address.
Certain profile information may be visible to other users where necessary to use the marketplace.
B) Professional and service information
If you offer services, we process the data you provide about your profile, activity, services, prices, availability and location. Also the Individual or Self-Employed / Company status that you declare when configuring the payment, the confirmation evidence and its changes. The condition shown to other users comes from your declaration and not from a general Wisdom tax audit.
We also process information relating to your activity on the platform, such as requests received, bookings completed, response time, cancellations, ratings, number of services completed, and other metrics necessary to manage your profile, reputation, and the operation of Wisdom.
Information that you expressly publish as part of a service or professional profile may be visible to other users.
C) Bookings and provision of services
When you make, receive, or manage a booking, we may process the information necessary to organize it, including the service booked, the client and professional involved, date and time, duration, frequency or recurrence, price, booking status, description or instructions, modifications, cancellations, incidents, payments, refunds, assistance, and other associated information.
When an address is necessary to provide an in-person service, the booking address may be shared with the relevant professional. We do not publicly display users’ private addresses or professionals’ exact locations when it is not necessary to show them.
Wisdom keeps records of the booking lifecycle in order to properly manage requests, acceptances, changes, cancellations, payments, disputes, and support.
D) Location and addresses
Wisdom may process location data to display relevant services, calculate distances, verify service areas, facilitate searches, or complete bookings.
This data may include addresses entered or saved by the user, coordinates associated with those addresses and, where the user has granted the corresponding permission, the location provided by the device.
Where applicable, we may also use technical information such as the IP address to approximately estimate the country, region, or city from which the service is being used, for example to improve results, security, or regional settings.
Access to the device’s precise location will only take place where the functionality requires it and in accordance with the operating system’s permissions. You can withdraw these permissions from your device settings.
E) Chats, files, and communications
Wisdom allows messages to be exchanged between clients, professionals, and support. We may process the content of conversations, messages, images, documents, attachments, replies, sending dates, read status, and other metadata necessary to provide the messaging service.
We may use automated systems to detect contact information, attempts to circumvent platform rules, fraud, spam, abuse, or content contrary to our policies.
Where necessary to investigate an incident, dispute, report, fraud, or possible breach, Wisdom’s authorized team may access the relevant information from a conversation.
You should not communicate particularly sensitive data through Wisdom unless it is necessary for the provision of the service.
F) Favorites, lists, reviews, and user-generated content
We may store services you save as favorites, lists you create, associated notes, invitations or collaborations on lists, and other preferences related to the use of the platform.
When you publish a review, we may process and publicly display the rating, comment, images you have added, related service, and profile information necessary to reasonably identify the review.
Reviews form part of Wisdom’s reputation and trust system and may remain linked to the activity carried out even if certain parts of the profile subsequently change, unless their deletion is required by law or under our policies.
G) Payments, collections, and refunds
Wisdom uses specialized providers to manage payments and money movements.
When a client makes a payment, we may process information relating to the transaction, such as amount, currency, status, transaction identifiers, method used, refunds, payment issues, and limited payment method data.
Full bank card details are handled by specialized payment providers such as Stripe. Wisdom does not need to store your full card number or security code in order to operate normally.
We may retain identifiers or limited information provided by the payment provider, such as card type, last digits, country, payment method status, or technical identifiers necessary to make subsequent authorized charges, issue refunds, or manage a booking.
When the payment method for a booking is temporarily retained in order to make the final charge, it will only be used in accordance with the conditions accepted during the booking and the rules of the payment system.
H) Banking information and professional verification
In order for a professional to receive payments, it may be necessary to collect or transmit identification, tax, or banking information.
Depending on the country, type of professional, and requirements of the payment provider, this information may include legal name, date of birth, address, phone number, nationality, tax identification number, DNI, NIE, passport or other identity document, company information, representatives, directors or beneficial owners, as well as IBAN, bank account, or other information necessary to make transfers.
Some of this information may be collected directly by Stripe or another payment and verification provider. In other cases, Wisdom may collect it in order to securely transmit it to the relevant provider or to comply with its own obligations.
Identity documents and banking details are never displayed publicly.
Stripe and other financial providers may request additional information when necessary to comply with their customer identification and verification obligations, fraud prevention, financial regulations, or requirements for enabling payments and transfers.
I) Tax and invoicing information
Wisdom processes data to issue and maintain documentation of its own charges, provide proof of payment and host the invoices or amendments that the Providers provide to the reservations. In the current modality, there is no service for issuing invoices on behalf of the Providers.
This data may include name or company name, NIF, NIE, CIF or equivalent, tax address, country of residence, VAT number, transaction information, amounts, taxes, bookings, and associated documents.
To prove a declaration of condition, a contractual acceptance or the upload of a document, we may retain the linked account and reservation, content or accepted version, date and time and, where necessary and provided, technical data such as the IP address. These records are not delegated billing authorization nor are they collected indefinitely without purpose.
Subsequent changes to tax data will not automatically modify documents that have already been issued where applicable regulations require them to be kept unchanged.
J) Technical, usage, and security information
When you use Wisdom, we may automatically collect certain technical information necessary to provide, protect, and improve the service, such as IP address, device type, operating system, application version, language, time zone, technical identifiers, operational events, errors, sessions, access dates and times, and security-related logs.
We may also record certain actions performed within the account where necessary to prevent fraud, investigate unauthorized access, maintain platform security, or provide evidence of relevant actions.
K) Information obtained from third parties
We may receive information from providers necessary to provide our services, including authentication providers such as Apple or Google, payment and verification providers such as Stripe, app stores such as the Apple App Store or Google Play, map and address providers, and other technical providers.
The information received will depend on the functionality used and the applicable conditions and permissions of each external service.
3. How We Use Your Data
We use the information collected for the following purposes.
A) Providing and managing Wisdom
We process the data necessary to create and maintain accounts, display profiles and services, perform searches, manage favorites and lists, facilitate communications, process bookings, organize calendars, manage payments and refunds, issue documents, manage Premium subscriptions, and provide the other functions of the platform.
The main legal basis for these processing activities is the performance of the contract between the user and Wisdom or the implementation of measures requested by the user prior to entering into a contract.
B) Facilitating the relationship between clients and professionals
We share the information necessary to organize and execute the relationship between Client and Provider. To issue the invoice for the Service, we may transmit to the Provider the Customer's tax data that are necessary and that the Provider provides for that purpose; The invoice provided by the Provider is accessible to the Client of the reservation.
This may include basic identity information, service information, date, time, instructions, service address where applicable, and communications relating to the booking.
Opening a dispute does not allow indiscriminate access to all the other party's data. An additional communication of identity, contact or evidence for a specific claim requires legal basis, necessity and proportionality. Copies of ID, complete bank details or other people's conversations are not automatically shared; When an invoice must include tax data, these are provided only to legitimate recipients.
C) Managing payments and transfers
We process the information necessary to make deposits, final charges, refunds, transfers to professionals, manage payment issues, prevent fraud, and reconcile transactions.
For this purpose, we may share information with Stripe, financial institutions, payment providers, and other participants necessary for the transaction.
D) Identification, payment requirements and fraud prevention
We may use identity, account, device, reservation and payment data to meet specific identification requirements, manage enforceable controls and prevent fraud. Wisdom does not generally audit tax registrations, licenses or declared qualifications. Verifications from Stripe or another provider do not equate to a professional or tax certification by Wisdom.
The legal basis may be the performance of the contract, compliance with legal obligations, and the legitimate interests of Wisdom and its users in having a secure platform.
E) Invoicing and tax compliance
We process data to issue, send and keep Wisdom's own invoices and amendments, generate supporting documents and informative summaries, and store or make available the invoices provided by the Providers. Each document identifies its issuer.
The Provider is responsible for the data it uses to issue its invoice and for the legitimation of its own treatments. Wisdom remains responsible for its platform treatments; Hosting a file does not eliminate your security, access and preservation obligations.
F) Compliance with legal obligations, DAC7, and authority requests
Wisdom may collect, verify, retain, and disclose information where necessary to comply with legal obligations applicable to digital platform operators.
Where Wisdom qualifies as a platform operator required to report information and a professional qualifies as a reportable seller, we may process data such as their identity, address, tax residence, tax identification number, date of birth where applicable, information on the activity carried out, consideration received, commissions or fees, information relating to accounts used to receive payments, and other information required by applicable regulations, including DAC7.
This information may be disclosed to the Spanish Tax Agency or other competent authorities and, where appropriate under the legal information exchange system, subsequently transmitted to authorities in other Member States of the European Union or participating jurisdictions.
These processing activities are carried out to comply with legal obligations and do not depend on the user’s consent.
G) Security, support, and dispute resolution
For support and disputes we use the relevant information from reservations, payments, communications and evidence provided. The basis will be the execution of the support service, compliance with a legal obligation or, where appropriate, the weighted legitimate interest in preventing fraud and formulating, exercising or defending claims. Before communicating additional data of the counterparty, we check the identity and connection of the requester, the purpose and necessity of the communication, we limit or exclude unnecessary data and record access. If special categories of data are included, a valid condition of Article 9 of the GDPR will also be required; general legitimate interest is not enough.
H) Communications and notifications
We use your contact and device information to send you necessary communications relating to your account, bookings, chats, payments, invoices, security, disputes, transfers, verification, Premium, or pending actions.
These communications form part of the operation of the service and some cannot be disabled while you maintain an account if they are necessary to perform the contract, ensure security, or comply with legal obligations.
Promotional communications, discounts, news, or other commercial communications will only be sent where there is a valid legal basis, and you may stop receiving them through the available mechanisms.
I) Improving Wisdom
We may analyze usage information in aggregate or individually where necessary to detect errors, understand how features are used, improve searches and recommendations, prevent problems, develop new features, and optimize the experience.
We will always seek to use the minimum amount of information necessary for these purposes.
4. Legal Bases for Processing
Depending on the purpose, Wisdom processes personal data on one or more of the following legal bases:
Performance of a contract: where processing is necessary to create an account, display a service, manage a booking, make a payment, maintain a conversation, or provide a requested functionality.
Legal obligation: where we must retain documentation, issue certain invoices, respond to authorities, comply with tax obligations, apply DAC7, or comply with applicable regulatory obligations.
Legitimate interest: where necessary to protect the platform, prevent fraud, ensure security, defend claims, reasonably improve the service, or protect other users, always after considering the rights and interests of the persons concerned.
Consent: where the law requires specific authorization, for example for certain device permissions, commercial communications, or processing activities requiring express consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out previously.
5. Mandatory and Optional Data
Not all data requested by Wisdom is mandatory.
Where information is optional, you may decide whether to provide it. However, certain functionalities require specific information in order to work.
For example, certain payments cannot be made without a valid payment method, an in-person service cannot be provided without knowing the location necessary for the booking, certain invoices cannot be issued without the corresponding tax information, and a professional cannot be allowed to receive payments where the required identification requirements have not been completed.
Where the law requires Wisdom to obtain certain information from a professional, failure to provide that information may prevent or restrict access to the affected functions until the necessary information is completed.
6. Payments, Stripe, and Financial Providers
Wisdom uses specialized providers to process payments, manage payment methods, verify professionals, and make transfers.
Stripe may process information as an independent controller or as a service provider depending on the type of transaction and applicable relationship. Its own terms and privacy policies may also apply.
The information Stripe needs to verify a professional depends, among other factors, on the country, type of activity, whether the professional is an individual or legal entity, business structure, and the financial services that need to be enabled.
In some cases, Stripe may request additional documents or temporarily prevent payments or transfers until verification is completed.
Wisdom may receive information about verification status, outstanding requirements, account identifiers, payments, refunds, or transfers without necessarily receiving all sensitive data used by Stripe to perform its checks.
On iOS, when a Premium subscription is purchased through in-app purchases, the subscription payment and payment method are managed by Apple. Wisdom may receive the information necessary to determine the product purchased, subscription status, renewals, cancellations, refunds, or validity of Premium access, but does not receive the full card number used in the App Store.
7. DAC7 and Professionals’ Tax Obligations
The European DAC7 rules and their national implementing legislation establish due diligence and information-reporting obligations for certain digital platform operators.
Where these rules apply to Wisdom, we may request from professionals the information necessary to determine their identity and tax residence, establish whether they are subject to reporting, and comply with the corresponding reporting obligations.
The data processed for this purpose may differ from the data required by Stripe to make payments. The fact that a professional has successfully passed verification by a financial provider does not necessarily eliminate the independent tax obligations that may apply to Wisdom.
Wisdom may verify the information provided using documents, verification providers, legally permitted sources, or other mechanisms provided for by applicable regulations.
The processing and disclosure of this data is intended to comply with Wisdom’s legal obligations as a platform. Information provided to tax authorities may subsequently be exchanged between countries in accordance with European regulations and applicable international agreements.
8. Documents provided by the Providers and direct relationship
The Provider can upload its invoice or amendment and the Client of that reservation can consult or download it. Wisdom processes the file and the metadata necessary to facilitate this function and manage its own obligations, without issuing the document.
Access is limited to legitimate parties to the reservation, authorized personnel where necessary and suppliers or authorities with a valid basis. Invoices are not published in profiles nor are your data used for incompatible purposes.
The work contract binds the Client to the Provider. When it processes data to provide work, bill or fulfill its own obligations, it will determine the legal bases, information to the interested party and measures that correspond to it as responsible for these treatments.
The role of each party in data protection is determined by its actual functions. In this version there is no order to issue invoices from the Provider to Wisdom. Intermediation does not eliminate Wisdom's obligations regarding the information it manages.
9. Who We Share Information With
Wisdom does not sell your personal data.
We may disclose or allow access to certain information in the following cases:
A) Other users
We share the necessary profile, contracting, service and billing data with the parties to a reservation. Additional data may be communicated for specific claims only with the bases and limits described in the sections on relationships between users and dispute resolution.
B) Technology providers
We may work with companies that provide hosting, storage, databases, email delivery, notifications, support, maps, technical analytics, security, fraud prevention, or other functions necessary to operate Wisdom.
These providers may only process data in accordance with applicable contractual and legal conditions.
C) Payment and verification providers
We may disclose information to Stripe, financial institutions, payment networks, wallet providers, and other participants where necessary to make payments, refunds, transfers, verify professionals, or prevent fraud.
D) Apple, Google, and app stores
When you use their authentication systems, purchases, subscriptions, notifications, or other integrated services, an exchange of information may take place where necessary to provide those functions.
E) Public authorities and government bodies
We may disclose data to tax, judicial, law enforcement, regulatory, and other public authorities where there is a legal obligation, a valid request, or where necessary to bring, exercise, or defend legal claims.
This includes disclosures required under DAC7 where applicable.
F) Business transactions
In the event of a merger, acquisition, restructuring, financing, asset transfer, or change of control of Wisdom, data may form part of the transaction where necessary and provided that the corresponding legal safeguards are respected.
10. International Data Transfers
Some providers used by Wisdom may operate from countries outside the European Economic Area.
Where an operation involves an international transfer of data, Wisdom will apply the mechanisms required by data protection regulations, such as European Commission adequacy decisions, standard contractual clauses, legally recognized frameworks, or other valid safeguards.
You may request additional information about the applicable safeguards using the contact details provided in this Policy.
11. Retention of Information
We retain data only for as long as necessary for the purposes for which it was collected and, subsequently, for the periods necessary to comply with legal obligations or address potential liabilities.
Account data may be retained while you keep your account active.
When you request deletion of your account, we will delete or anonymize data that is no longer necessary, but certain records may remain restricted or retained where there is a legal obligation or a legitimate need to defend against claims.
Records of reservations, payments, condition statements, accepted contractual versions, document uploads and disputes are retained for as long as necessary for their purposes and the applicable legal or liability deadlines, with access restricted when they are no longer operationally used. Not all information will be kept indefinitely just because a claim may arise.
Tax and accounting documentation will be retained for the periods legally required. In Spain, certain tax obligations have limitation periods of four years and business documentation may be subject to retention obligations of six years or other specific periods.
Invoices and documents already issued are not deleted or modified simply because a user closes their account where legislation requires them to be retained.
Records necessary to comply with DAC7 will be retained in accordance with the periods established by applicable regulations.
Data processed solely on the basis of consent will cease to be used for the relevant purpose when you withdraw that consent, unless another legal basis permits or requires its retention.
12. Account Deletion
You may request deletion of your account through the options available in Wisdom or by contacting us.
Deleting an account does not necessarily mean the immediate deletion of all associated data.
Wisdom may retain, under appropriate restrictions, data necessary to comply with tax, accounting, regulatory, anti-fraud, or security obligations, or to bring, exercise, or defend legal claims.
Deleting an account also does not allow tax documents that must remain immutable to be altered or information affecting the legitimate rights of other persons, such as certain transaction or booking records, to be deleted.
13. Information Security
Wisdom applies technical and organizational measures intended to protect data against loss, unauthorized access, alteration, disclosure, or destruction.
These measures may include access controls, encryption where appropriate, authentication, security logs, separation of permissions, specialized providers, backups, and mechanisms for detecting anomalous activity.
Payment methods and certain particularly sensitive data are managed using specialized providers and tokenization mechanisms or equivalent protections.
However, no system connected to the Internet can guarantee absolute security. If we detect a security breach that must be reported to users or an authority under applicable law, we will act in accordance with those obligations.
14. Moderation, Fraud, and Automated Systems
Wisdom may use rules and automated systems to protect the platform.
For example, certain systems may detect contact information improperly shared in chat, fraud attempts, spam, anomalous behavior, abuse of payment systems, or breaches of our policies.
These tools may block content, request additional checks, or flag activity for review.
Where an automated decision may produce legal effects or significantly affect a person within the meaning of data protection regulations, Wisdom will apply the legally required safeguards, including the possibility of requesting human intervention where applicable.
15. Communications and Notifications
Wisdom uses different channels to keep users informed, including in-app notifications, push notifications, local notifications, and email.
Communications relating to bookings, messages, payments, invoices, refunds, security, verifications, disputes, or essential operation of the service are considered operational or transactional communications.
Users may manage certain preferences, such as push notification permissions or non-essential communications.
Not all communications necessary for security, legal compliance, payments, or execution of bookings can be disabled while using the service.
Promotional communications will be handled separately from essential communications and will provide the opt-out or unsubscribe mechanisms required by applicable regulations.
16. Particularly Sensitive Data
Wisdom allows users to book services in a wide variety of fields, including some related to health, wellness, advice, or other activities that could lead a user to disclose sensitive information.
Wisdom does not request medical records and does not intend to collect special categories of personal data except where a functionality legitimately requires it.
We recommend that you do not include medical, biometric, ideological, religious, sexual, or other particularly sensitive information in profiles, reviews, chats, or descriptions unless it is genuinely necessary.
If it becomes necessary to process special categories of data, Wisdom will apply a legal basis and the additional safeguards required by the relevant legislation.
17. Privacy of Minors
Wisdom is intended for persons over the age of 18.
We do not knowingly allow persons under the age of 18 to use the platform as registered users or professionals.
If we detect that an account has been created in breach of this requirement, we may take the necessary measures to restrict or delete it and manage the corresponding data in accordance with our legal obligations.
18. Your Rights
If the data protection regulations of your territory apply, you may have the right to:
Access the personal data we process about you.
Request the correction of inaccurate or incomplete data.
Request the deletion of your data where legally applicable.
Request restriction of certain processing activities.
Object to processing based on legitimate interests in the circumstances provided by law.
Receive certain data in a structured, commonly used, and machine-readable format and request its portability where applicable.
Withdraw previously given consent at any time.
Request information about the safeguards applicable to certain international transfers.
Exercise rights relating to automated individual decisions where applicable.
To exercise these rights, you may write to hello@wisdomapp.es. We may request additional information where reasonably necessary to verify your identity and protect your data.
Exercising these rights is free of charge, except in the exceptional cases provided for by law.
You also have the right to lodge a complaint with a data protection authority. If you are in Spain, you may contact the Spanish Data Protection Agency (AEPD).
19. Users’ Responsibility for Information Provided
Users must provide truthful, accurate, and up-to-date information where necessary to use Wisdom.
A user must not provide another person’s personal data unless they have a lawful basis to do so.
Professionals are responsible for keeping up to date the information necessary to carry out their activity and comply with their own legal and tax obligations.
The use of verification, invoicing, or communication systems by Wisdom does not replace the legal obligations that apply individually to clients, professionals, or companies.
20. Changes to This Privacy Policy
We may update this Privacy Policy when our functionalities, providers, processing practices, or applicable regulations change.
The date of the latest modification will appear at the beginning of the document.
Where a change is material and the law requires the user to be specifically informed, we will use reasonable means such as notices within the application, email, or other appropriate channels.
If new processing requires consent, merely updating this Policy will not replace that consent, and it will be requested separately where applicable.
21. Contact
If you have questions about this Privacy Policy, about the processing of your personal data, or wish to exercise any of your rights, you can contact us at: