Privacy Policy

Last updated: February 16, 2026

1. Who are we?

TribuMap is published by TribuMap

SIREN: 810050526
SIRET: 81005052600039
Contact: contact@tribumap.com

TribuMap is a mobile app that helps parents discover and share kid-friendly places.

2. What data do we collect?

2.1 Data you provide directly

Upon registration (required):

Email address
Pseudonym (your display name)
Auto-generated avatar (based on your pseudonym)

During use (optional):

Places added to favorites
Kid-friendly place suggestions
Available amenities at places (checkboxes)
List of profiles you follow

2.2 Automatically collected data

Location:

One-time GPS position (only if you enable geolocation)
Last visited city (to speed up loading)

⚠️ Location is used only to display nearby places.

Usage data (analytics):

Places viewed
Favorites additions
Route requests
Profiles followed
Approximate number of users per city (aggregated data)

Technical data:

Device type, operating system
Anonymous unique identifier (Firebase)

2.3 Data we DO NOT collect

❌ Your real name or surname
❌ Your personal photo
❌ Your city of residence
❌ Information about your children (no name, no exact age)
❌ Background location tracking
❌ Access to your phone contacts
❌ Complete movement history

3. Why do we collect this data?

Data	Purpose	GDPR Legal Basis
Email, pseudonym	Account creation and management	Contract performance (Art. 6.1.b)
Auto-generated avatar	Visual identification on your public profile	Contract performance (Art. 6.1.b)
Location	Nearby place suggestions	Consent (Art. 6.1.a)
Favorites, suggestions	Social features of the app	Contract performance (Art. 6.1.b)
Analytics	App improvement, anonymous statistics for establishments	Legitimate interest (Art. 6.1.f)

4. Is your profile public?

Yes, your TribuMap profile is public by default.

Always public data:

✅ Your pseudonym
✅ Your auto-generated avatar
✅ Your place suggestions
✅ Your favorites (can easily be switched to private)

Always private data:

❌ Your email
❌ Your real-time location
❌ The list of profiles you follow

💡 Note: We use pseudonyms and auto-generated avatars to protect your identity while enabling a rich community experience.

5. Who do we share your data with?

5.1 Essential third-party services

Google (technical infrastructure):

Firebase Authentication (secure login)
Firestore (database)
Firebase Storage (avatar storage)
Firebase Analytics (usage statistics)
Google Places API (place and city search)

Transfers outside EU:
Our data is hosted on Google servers located in Europe (eur3 - Belgium). However, some Google services may involve occasional transfers to the United States, governed by the European Commission's standard contractual clauses.

Google Privacy Policy: policies.google.com/privacy

5.2 Partner establishments (future subscribers)

Partner restaurants and cafes may receive only anonymized statistics:

Total number of views of their establishment
Approximate number of active users in their area

We NEVER share:

❌ Your identifiable personal data
❌ Your email, pseudonym, or avatar
❌ Your individual favorites

5.3 No advertising, no resale

✅ We do not sell your data to third parties
✅ No targeted advertising in the app
✅ No advertising trackers (Facebook Pixel, AdMob, etc.)

6. How long do we keep your data?

Data	Retention Period
Active account	Indefinitely (as long as you use the app)
Manual deletion	Immediate
Inactive account	3 years without login → automatic deletion
Analytics	3 years (anonymous aggregated data)

7. What are your rights?

Under GDPR, you have the following rights:

✅ Right of access: Request a copy of your data
✅ Right to rectification: Correct your information
✅ Right to erasure: Delete your account (button in Settings)
✅ Right to data portability: Receive your data in a structured format
✅ Right to object: Refuse analytics processing (contact us)
✅ Right to restriction: Restrict certain processing

How to exercise your rights:

Account deletion: directly in the app (Settings > Delete my account)
Other requests: contact@tribumap.com

Response time: 1 month maximum

Complaint: If you believe your rights are not respected, you can file a complaint with the data protection authority of your country:

France: CNIL — www.cnil.fr
Netherlands: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl
Other EU country: Full list of authorities

You also have the right to lodge an appeal before a competent court.

8. Data security

Technical measures:

Encrypted connections (HTTPS/TLS)
Secure authentication (Firebase Auth)
Certified hosting (Google Cloud Europe)
Restricted data access (publisher only)

Liability limitation:
No system is 100% secure. In case of a security breach affecting your data, we will inform you within 72 hours in accordance with GDPR.

9. Use of Google Places API

When you search for a city or place via autocomplete, we use the Google Places Autocomplete API. Google may receive the typed text and your IP address to provide suggestions.

Google Privacy Policy: policies.google.com/privacy

10. Changes to this policy

We may update this privacy policy. In case of significant changes, we will inform you via:

In-app notification
Email to your registered address

11. Contact

For any questions regarding your personal data:

📧 Email: contact@tribumap.com

🏢 SIREN: 810050526

🏢 SIRET: 81005052600039