Privacy Policy
Introduction
BaladeZen is a mobile application published by Philippe Lacombe, an independent developer based in Montélimar (France). It provides hikers in France with real-time information about hunting zones, protected areas, and hiking trails. This policy describes the personal data we collect, the purposes for which it is processed, and your rights.
Data controller
Philippe Lacombe — Montélimar, France
Contact: ph.lacombe@gmail.com
Data collected and purposes
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Account creation and management | Performance of contract |
| Password (hashed by Supabase Auth) | Authentication | Performance of contract |
| Geolocation (while using the app) | Display alerts around you, trigger push notifications for planned hunts within your chosen radius (5, 10, or 20 km) | Consent |
| User-created reports (type, position, timestamp) | Publish information to the community | Performance of contract / legitimate interest |
| Push notification token (Expo) | Send you the alerts you have configured | Consent |
| Contact form data (name, email, message) | Reply to your message | Legitimate interest |
| Technical logs (IP, API requests) on Supabase | Security and proper functioning of the service | Legitimate interest |
Data we do NOT collect
- No third-party analytics (Google Analytics, Meta, etc.)
- No advertising tracking
- No third-party cookies (the site does not use cookies, except possibly technical cookies strictly necessary for operation, which are exempt from consent under French CNIL rules)
- No data resale to third parties
Hosting and data location
Data is hosted on Supabase infrastructure located in Europe:
- Beta phase (ongoing): Ireland (eu-west-1, AWS Dublin)
- Stable version: Switzerland (eu-central-2, AWS Zurich), a country recognized by the European Commission as providing an adequate level of data protection under GDPR.
Push notifications transit through Expo (services hosted in the United States), with only the strictly necessary elements (device token, notification payload), without identifiable personal data beyond the token itself.
Retention period
- User account and active reports: as long as your account is active. Full deletion when you close your account via the "Delete my account" feature in the app.
- Expired reports (hunts, hazards, events): automatically archived or deleted after 4 hours.
- Technical logs: 30 days.
- Contact form messages: maximum 1 year.
Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access to your data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time
To exercise these rights, contact us at ph.lacombe@gmail.com. You may also lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.
Geolocation
Geolocation is only used with your explicit consent. You can disable it at any time in your iOS or Android settings. The app will continue to work without the geolocation-based alerts feature.
Push notifications
You enable and configure notifications in the app (alert types, trigger radius). You can disable them at any time, either in the app or in your system settings.
Beta phase — important note
BaladeZen is currently in beta testing. Data entered during this phase is stored on a dedicated temporary Supabase instance (Ireland, eu-west-1). When the stable version is released, this instance will be deleted and accounts will not be migrated automatically: you will be asked to recreate your account on the final version.
Changes to this policy
This policy may be updated. The date of the last update appears at the top of the document. In the event of a substantial change, you will be notified by email.