1. Data controller
The data controller is Armand Farra, publisher of the Paris & Me app, reachable at support@parisandme.app.
The app is published on a non-professional basis, which removes the obligation to publish a postal address — but not the obligation to identify who is responsible, which is done above. The details are in the legal notice.
This policy covers both the mobile app and this website.
2. Our three commitments
These three sentences summarise the rest of this document, and nothing further down contradicts them:
- We do not sell any data, to anyone, in any form.
- Your answers about your trip stay on your phone until you consent to share them.
- You can delete everything from within the app, immediately.
3. A note on wording
The data described here is pseudonymised — it is not severed from any link to you: as soon as an account carries an email address, it can still be traced back to a person. We will therefore never use the word that would suggest otherwise.
That has a concrete and favourable consequence: this data remains covered by the European data protection regulation, and the rights set out below apply to it in full.
4. Data collected and legal bases
We collect strictly what is necessary, and nothing else. Here is the complete list, group by group.
- Email address — required. It is used to create the account, to verify that it is yours, to let you sign back in and to reset your password. Legal basis: performance of the contract formed by the terms of use.
- Password — stored only in an irreversibly hashed form by our authentication provider. It is readable by no one, including the publisher. Legal basis: performance of the contract.
- App language, account creation date, date of last activity. Legal basis: performance of the contract, and our legitimate interest in understanding which languages the app is used in.
- Acceptance of the terms of use, with its timestamp. Legal basis: our legitimate interest in being able to prove that this acceptance took place.
- Your votes on the week's events, if you cast any — one per event, which you can change or withdraw at any time. No vote count is displayed — only the order of the ranking is — and no one but you can know how you voted, and we do not use it to build a profile. Legal basis: performance of the contract, the ranking being part of the service.
- Your questions to Mimi, the app’s assistant, if you use it: the text of your messages and of the replies in the current conversation, together with the app’s language, is sent to produce each reply. Neither your email address nor your identifier is attached to the text sent to the provider listed in section 9. We do not keep these conversations: only a counter of the number of questions asked each day is recorded, to limit use of the service. Legal basis: performance of the contract, the assistant being part of the service.
- Traveller profile and usage measurement — optional, subject to your explicit and separate consent: first name, whether you are visiting or live in Paris, timing and length of the trip, who is travelling with you, group size, daily budget range, the arrondissement you live in, interests, the concerns you would like help with, and what you expect from the app. The same consent covers measuring how the app is used — screens viewed and main actions — through the provider listed in section 9; it is tied to a technical identifier, never to your first name or your email address. Legal basis: your consent, which can be withdrawn at any time.
- Notification token and device type — only if you allow notifications. It is used to deliver notifications and for nothing else. Legal basis: your consent.
5. Profile consent is enforced technically
The traveller profile box is unticked by default and sign-up works without touching it. As long as you do not tick it, the corresponding columns in our database stay empty: this is not merely a promise about how we behave, it is a constraint set at the level of the database itself.
If you withdraw that consent from the “My account” screen, those columns are emptied again on the server and usage measurement stops immediately on your phone. Withdrawing is as simple as giving, and has no effect on your access to the app.
6. What never leaves your phone
A large part of what the app does is never transmitted anywhere. The following is stored locally, on your device only:
Your votes on the week's events are the exception, and necessarily so: a shared ranking cannot be computed on a single phone. They are therefore transmitted, and appear as such in the list in section 4.
- your favourites (saved monuments and restaurants);
- your day-by-day trip plan and the challenges you have completed;
- your display preferences, including the last map layer you used;
- your location, used to sort places by distance and never sent to a server.
7. What we do not do
To remove any ambiguity:
- no sale, rental or transfer of data to third parties, including in aggregated form sold on;
- no advertising, no advertising identifier, no targeting;
- no tracking pixel, no embedded social network, no analytics until you have consented to it;
- no automated profiling producing legal effects concerning you;
- no cookies on this website: it is entirely static and stores nothing in your browser.
8. Purposes
The data collected is used solely to: allow you to sign in to your account and keep it secure; send you confirmation and password reset emails; send you the notifications you have agreed to receive; display the app in the right language; and, if you have consented, understand who the app is reaching and how it is used, so that its content can be improved.
Your votes are used solely to establish the ranking of the week's events as displayed in the application. They are used neither to profile you nor to measure your usage.
Your questions to Mimi are used solely to produce its replies, at the moment you ask them; the daily counter is used solely to limit the number of questions per account. They are not used to profile you, to measure your usage, or to train an artificial intelligence model.
9. Processors
We deliberately rely on a small number of providers. Each acts on our instructions, under a data processing agreement:
- Supabase — database hosting and authentication. Your data is stored in the Union européenne — Paris (eu-west-3) region; the company behind Supabase is, however, established in the United States.
- Resend — delivery of address confirmation and password reset emails. A company established in the United States (see the next section). It processes your email address, and nothing else.
- Expo — notification delivery service, only if you have allowed notifications.
- PostHog — measurement of how the app is used, only if you have consented to it. The data is hosted in the European Union; the company behind PostHog is itself established in the United States.
- Anthropic — provides the artificial intelligence model (Claude) that writes the replies of Mimi, the assistant, only if you use it. It receives the text of your questions and of the current conversation, without your email address. A company established in the United States, where this data is processed; under its commercial terms, it does not use it to train its models.
10. Transfers outside the European Union
Your account data is stored in the European Union. Four caveats, which are better stated plainly: the company behind Supabase is established in the United States, as are Resend, which delivers our emails, the notification delivery service, and PostHog, which handles usage measurement. Access from that country is therefore not ruled out in theory, even though the database servers and the usage-measurement servers themselves are European.
To these four caveats is added that of Mimi, the assistant: its replies are produced by Anthropic, on servers located in the United States. If you use it, your questions are therefore transferred there, with the safeguards described below. If you do not use it, nothing is sent to it.
These situations rely on the safeguards provided for by the European regulation, in particular the European Commission’s standard contractual clauses, or any adequacy mechanism applicable to the provider concerned.
No data is passed to any authority or third party outside a legal obligation we could not lawfully refuse.
11. Retention
Your data is kept for as long as your account exists. There is no fixed duration: you decide, by keeping or deleting your account.
When the account is deleted, erasure is immediate and permanent, with no grace period. Profile data and the notification token disappear at the same time, by cascade. If you had consented to usage measurement, the events already recorded at PostHog remain tied to a technical identifier, with no link to your email address; they are erased on simple request to support@parisandme.app.
Your votes follow the same rule: they are deleted along with the account, by the same cascade, and the ranking is recalculated without them.
Conversations with Mimi are kept neither on our servers nor on your phone: they disappear when you close the app. The daily question counter is deleted with the account. Anthropic keeps the exchanges for a limited period set by its terms, in particular for security purposes, and then deletes them.
The only things that remain, temporarily, are our providers’ technical logs (connection traces, email delivery logs), kept for their own retention periods and purged automatically.
12. Security
Traffic between the app and our servers is encrypted in transit. Passwords are stored in an irreversibly hashed form.
Above all, access to data is partitioned at database level: a security rule checks, on every read and every write, that the row requested belongs to the signed-in account. One account therefore cannot read another account’s data, even if the app were to get something wrong.
The technical administration key that can bypass this partitioning is present neither in the app nor in its source code: it lives only on the server side.
13. Your rights
You have the following rights over your data. The two most important ones are built into the app, with no need to write to us and nothing to wait for:
- Portability — the “My account” screen produces a file containing your data, which you can save or share. It is built on your phone.
- Erasure — deleting the account, from the same screen, is immediate and permanent.
- Withdrawal of consent — the traveller profile switch, in “My account”, at any time and without justification.
- Access — obtain confirmation that data concerning you is being processed, and obtain a copy of it.
- Rectification — have inaccurate data corrected.
- Restriction and objection — ask for processing to be frozen, or object to processing based on our legitimate interest.
- Post-mortem instructions — set out what should happen to your data after your death.
14. Exercising your rights, and complaining
For rights that are not directly available in the app, write to support@parisandme.app. We reply within one month, extendable by two months if the request is complex, in which case we will tell you.
We may ask for something that lets us verify your identity where there is serious doubt — the point of that step is to protect your account against a request made by someone else.
If our answer does not satisfy you, you may lodge a complaint with the supervisory authority of your country of residence. In France this is the CNIL, 3 place de Fontenoy, 75007 Paris (cnil.fr).
15. Children
The app is not intended for children. Creating an account requires being at least fifteen years old, or having the agreement of a parent or legal guardian.
If you find that an account has been created for a child without that agreement, write to us and the account will be deleted.
16. Changes to this policy
This policy may change, in particular if a provider changes or if a new feature collects additional data. The version in force is the one published here, with its update date.
Any substantial change is flagged within the app. Where processing relies on your consent, a change of purpose requires fresh consent: it is never assumed.
17. Contact
For any question about this policy or about your data: support@parisandme.app, or via the contact page.