Privacy Policy
Last updated: 23 June 2026
This Privacy Policy describes how Farfouille collects, uses and protects your personal data, in accordance with Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act.
1. Data controller
Farfouille is the data controller. Contact: contact@farfouille.app.
2. Data collected
Farfouille collects only the data strictly necessary to operate the service:
- Account data: creating an account is optional (you can browse events without one). When you create an account we collect your email address, a display name and an account identifier. Sign-in uses email and password, or Google or Apple ("Sign in with");
- Location data: approximate GPS coordinates, only if you grant permission, used solely to display nearby events. Not stored on our servers;
- Favorites and preferences: saved events, viewed events and applied filters. Stored locally on the device and, if you are signed in, synced to your account so you find them across devices;
- Event contributions: if you submit an event (community feature), we collect the event details (title, location, dates, description, optional photo) and your email address, for moderation and follow-up;
- Purchase data: for Premium subscriptions or purchases, the transaction identifier and subscription status are managed by RevenueCat and the store (App Store / Google Play). We do not collect or store your payment-card data;
- Diagnostic data: on a crash, Sentry (see section 4) automatically collects the device type, OS, app version and error trace, for bug-fixing purposes;
- Advertising data: in the free version, Google AdMob may collect a resettable advertising identifier and ad performance data, per Google's privacy policy. No advertising data is collected in Premium mode.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Service delivery (search, event display) | Legitimate interest |
| Account & authentication, favorites sync | Performance of contract (Terms) |
| Location | Consent (revocable at any time) |
| Event contributions & moderation | Performance of contract / legitimate interest |
| Premium subscription management | Performance of contract |
| Technical diagnostics / crash handling (Sentry) | Legitimate interest |
| Advertising (free version, via AdMob) | Consent (via Terms acceptance) |
| Security & abuse prevention | Legitimate interest |
4. Recipients and processors
Your data is accessible to authorised staff and to the following processors, each bound by a GDPR Article 28 data-processing agreement:
- Hetzner (Germany / Finland, EU): hosting of our infrastructure (database, authentication and API);
- Cloudflare Pages (EU): website hosting;
- RevenueCat (USA): subscription and purchase management. Subject to standard contractual clauses;
- Google ("Sign in with Google") and Apple ("Sign in with Apple"): authentication providers;
- Open-Meteo (Germany, EU): weather forecasts (no personal data transmitted);
- api-adresse.data.gouv.fr and equivalent geocoding services: address and city search (no personal data transmitted);
- Google AdMob (USA): ad delivery in the free version. Subject to Google standard contractual clauses;
- Sentry (USA, Functional Software Inc.): anonymized crash reports (device type, OS, version, error trace). Subject to standard contractual clauses. Sentry privacy policy;
- Apple and Google: app distribution via their respective stores.
No data is sold, rented or transmitted to third parties for commercial purposes.
5. Transfer outside the EU
Your account data is hosted within the European Union. Some processors (Google AdMob, RevenueCat, Sentry, Google/Apple Sign-In) are established in the United States: the corresponding transfers are governed by standard contractual clauses or a recognised transfer mechanism.
6. Retention period
- Account data and synced favorites: kept while the account is active, then deleted when the account is deleted;
- Favorites and preferences stored locally: removed when you uninstall the app;
- Event contributions: kept while published; deleted or anonymized when the account is deleted;
- Location data: not stored on our servers (used on-the-fly);
- Diagnostic data (Sentry): max 90 days;
- Technical logs: max 12 months.
7. Account deletion
You can delete your account and associated data at any time from the app (Profile → Settings → Delete my account) or by email. The detailed procedure is described on our dedicated page: Account & Data Deletion.
8. Your rights
Under GDPR you have the right to: access, rectification, erasure, restriction, portability, objection, withdraw consent, and define directives for your data after death.
To exercise these rights, email us at contact@farfouille.app. We will respond within one month.
You may also file a complaint with the French Data Protection Authority (CNIL): cnil.fr.
9. Cookies and trackers
The farfouille.app website uses no tracking cookies and no third-party analytics. The mobile app integrates Google AdMob (advertising in the free version) and Sentry (anonymized crash reports); these SDKs are detailed in section 4.
10. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction (HTTPS encryption, secure hosting, principle of least privilege).
11. Minors
The App is not intended for users under 15. If you are a minor, please obtain parental authorisation before using the service.
12. Changes to this policy
This policy may be updated. Material changes will be notified within the App. The date of the latest update appears at the top of this document.
13. Contact
For any question about your personal data: contact@farfouille.app.