Privacy Policy
The company FIZZY APP (SASU), headquartered at 6 Place du Président Thomas Woodrow Wilson, 31000 Toulouse, France (hereinafter "we" or "Plaaaces"), publishes the Plaaaces mobile application and the website plaaaces.app.
This privacy policy describes how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French law.
1. Data we collect
1.1 Data you provide
| Data | When | Legal basis |
|---|---|---|
| Email, name, profile photo | Sign up via Apple or Google | Contract performance |
| Display name, username | Profile customization | Contract performance |
| Profile photo (upload) | Profile update | Consent |
| Plaaaces: title, address, notes, coordinates | Adding a place | Contract performance |
| Plaaace photos | Adding photos to a plaaace | Consent |
| Collections: name, description, icon | Creating a collection | Contract performance |
1.2 Data collected automatically
| Data | Purpose | Legal basis |
|---|---|---|
| GPS location | Display your position on the map | Consent (iOS permission) |
| Usage events (actions in the app) | Improve the application | Legitimate interest |
| Push notification token | Send notifications | Consent |
1.3 Data we do not collect
- Advertising identifier (IDFA)
- Contacts or address book
- Payment data (handled by Apple)
- Biometric data
- Browsing history
2. How we use your data
We use your data exclusively to:
- Provide the service — ensure the proper functioning of the application
- Authentication — create and secure your account
- Notifications — inform you of relevant activities
- Service improvement — analyze usage in aggregate
- Support — respond to your requests
We never sell your data. We do not use your data for advertising or behavioral profiling.
3. Sharing and subprocessors
We share certain data with the following technical providers, strictly necessary for the operation of the service:
| Provider | Shared data | Purpose | Location |
|---|---|---|---|
| Apple / Google | Authentication token | Account login | EU / US |
| Mapbox | Map position, zoom, interactions | Map display | US (policy) |
| Google Places | Place identifiers | Place enrichment | US (policy) |
| Cloudflare | Network requests | Hosting, CDN, security | Global (policy) |
| Expo (EAS) | Push token, platform | Push notifications, OTA updates | US (policy) |
Each subprocessor is contractually bound to protect your data in accordance with GDPR. No data is shared with third parties for advertising purposes.
4. Data retention
| Data | Duration |
|---|---|
| Account (email, name, username) | Duration of account + 5 years (legal obligation) |
| Plaaaces and collections | Until deleted by the user |
| Photos | Until the associated plaaace is deleted |
| GPS location | Current session only (not stored) |
| Usage events | 12 months |
| Push token | Duration of account |
5. Security
- All communications are encrypted in transit (HTTPS/TLS)
- Sensitive data is stored securely on the device
- Data access is restricted by authentication
- No passwords are stored
6. Your rights
Under the GDPR, you have the following rights:
- Access (art. 15) — Obtain a copy of all your personal data
- Rectification (art. 16) — Correct inaccurate data from the app or upon request
- Erasure (art. 17) — Delete your account and all associated data (full purge)
- Restriction (art. 18) — Restrict the processing of your data
- Portability (art. 20) — Receive your data in a structured format (JSON/CSV)
- Objection (art. 21) — Object to processing based on legitimate interest
To exercise your rights, send an email to [email protected]. We will respond within 30 days. This period may be extended to 60 days for complex requests, in which case you will be informed.
Account deletion
You can delete your account directly from the application. This results in the permanent and irreversible deletion of all your data.
7. Location and camera
Location
Plaaaces requests access to your location to show your position on the map. This permission is optional: the app works without it. You can revoke it at any time in iOS Settings → Privacy → Location Services → Plaaaces. Your location is never stored on our servers.
Photos and camera
Access to your photos or camera is requested only when you want to add an image. This permission is optional. Photos are never used for facial recognition or automated analysis.
8. Children
Plaaaces is rated 9+ on the App Store. We do not knowingly collect data from children under 13. If we learn that a child under 13 has provided us with personal data, we will delete it immediately.
9. Cookies (website)
The website plaaaces.app does not use any advertising cookies or third-party trackers. Only strictly necessary technical cookies (session, preferences) may be used.
10. Changes
We may update this policy. In case of substantial changes, we will notify you via in-app notification or email. The update date at the top of this page prevails.
11. Contact
For any questions regarding your personal data:
- Email: [email protected]
- Mail: FIZZY APP — 6 Place du Président Thomas Woodrow Wilson, 31000 Toulouse, France
You also have the right to file a complaint with the competent supervisory authority.