{"slug":"confidentialite_en","content":"# Privacy Policy — JOIN ME NOW\n\n**Last updated: May 2026**\n*(Initial version: July 9, 2015 — GDPR compliance update: May 2026)*\n\n---\n\n## 1. Who are we?\n\n**Data controller:**\nDebtouch, EURL with share capital of €2.00\nRegistered with the Paris Trade and Companies Registry under number 984 152 363 R.C.S. Paris\n7 rue de Toul — 75012 Paris, France\nContact: antoine.debtouch@gmail.com\n\nJoin Me Now is a mobile application enabling users to create and join events taking place within the next 24 hours, with the aim of facilitating real-life meetings between friends, family, and colleagues.\n\nThis privacy policy is governed by **Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016** (GDPR) and by the **French Data Protection Act of 6 January 1978, as amended**.\n\n---\n\n## 2. Data collected and legal bases\n\nWe collect only the data strictly necessary for the operation of the service (data minimisation principle, Art. 5 GDPR).\n\n### 2.1 Account data\n\n| Data | Purpose | Legal basis |\n|------|---------|-------------|\n| Email address | Identification, service communications | Performance of contract (Art. 6.1.b) |\n| Username | Display within the application | Performance of contract (Art. 6.1.b) |\n| Password (hashed) | Authentication | Performance of contract (Art. 6.1.b) |\n| Phone number | Contact synchronisation, identification | Consent (Art. 6.1.a) |\n| Profile picture | Display within the application | Consent (Art. 6.1.a) |\n\n### 2.2 Service operation data\n\n| Data | Purpose | Legal basis |\n|------|---------|-------------|\n| Event content (title, location, times) | Service provision | Performance of contract (Art. 6.1.b) |\n| Ephemeral chat messages | Communication between participants | Performance of contract (Art. 6.1.b) |\n| Event participation status | Invitation management | Performance of contract (Art. 6.1.b) |\n| Push notification token | Sending notifications | Consent (Art. 6.1.a) |\n\n### 2.3 Technical data\n\n| Data | Purpose | Legal basis |\n|------|---------|-------------|\n| IP address, connection logs | Security, debugging | Legitimate interest (Art. 6.1.f) |\n| Device identifier, application version | Compatibility, push notifications | Legitimate interest (Art. 6.1.f) |\n\n---\n\n## 3. Retention periods\n\nYour data is not retained beyond what is strictly necessary.\n\n| Category | Retention period |\n|----------|-----------------|\n| Account data (active user) | Duration of the contractual relationship |\n| Account data after deletion | Permanent deletion within 30 days of request, unless required by law |\n| Chat messages | Automatically deleted at the end of the event |\n| Created events | Soft-deleted at the end of the event; permanent deletion within 90 days |\n| Connection logs | 12 months (legal obligation — Art. L. 34-1 CPCE) |\n| Password reset tokens | 1 hour from generation |\n| Billing data (where applicable) | 10 years (accounting obligation) |\n\n---\n\n## 4. Data recipients\n\nYour personal data is never sold. It may be shared with:\n\n- **Technical service providers** (hosting, infrastructure) acting as data processors and bound by contractual confidentiality obligations compliant with the GDPR.\n- **Judicial or administrative authorities**, upon lawful request, in accordance with applicable law.\n\nWe do **not transfer data outside the European Economic Area (EEA)** without adequate safeguards in accordance with Chapter V of the GDPR.\n\n---\n\n## 5. Your rights\n\nIn accordance with Articles 15 to 22 of the GDPR and the French Data Protection Act, you have the following rights:\n\n- **Right of access** (Art. 15): obtain a copy of your personal data.\n- **Right to rectification** (Art. 16): correct inaccurate or incomplete data.\n- **Right to erasure** (Art. 17): request deletion of your data (\"right to be forgotten\").\n- **Right to restriction of processing** (Art. 18): suspend processing in certain cases.\n- **Right to data portability** (Art. 20): receive your data in a structured, machine-readable format.\n- **Right to object** (Art. 21): object to processing based on legitimate interest.\n- **Right to withdraw consent** (Art. 7): withdraw your consent at any time, without affecting the lawfulness of prior processing.\n- **Right to lodge a complaint** (Art. 77): file a complaint with the **CNIL** (Commission Nationale de l'Informatique et des Libertés), 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 — [www.cnil.fr](https://www.cnil.fr).\n\n**To exercise your rights:** contact us at antoine.debtouch@gmail.com specifying your request. We will respond within one month (Art. 12 GDPR), extendable by two additional months for complex requests.\n\n---\n\n## 6. Protection of minors' privacy\n\nJoin Me Now is intended for users aged **15 or older** (threshold set by the French GDPR Act of 20 June 2018).\n\nBelow the age of 15, registration requires the joint consent of the minor and their legal representative. If we become aware that we have collected data from a minor under 15 without such consent, we will delete it immediately.\n\n---\n\n## 7. Push notifications\n\nPush notifications are sent only if you have granted the corresponding permission on your device. You can revoke this permission at any time in your phone settings or directly within the application.\n\n---\n\n## 8. Data security\n\nWe implement appropriate technical and organisational measures to protect your data:\n\n- Password hashing using an adaptive algorithm resistant to brute-force attacks\n- Encrypted transport (HTTPS/TLS)\n- Short-lived access tokens with automatic rotation\n- Data access restricted to authorised personnel\n\n---\n\n## 9. Cookies and trackers\n\nThe Join Me Now mobile application does not use cookies in the traditional sense. Technical device identifiers may be used for push notification purposes, in accordance with CNIL recommendations on mobile applications (deliberation of 24 September 2024).\n\n---\n\n## 10. Changes to this privacy policy\n\nAny material change to this policy will be notified to you within the application before it takes effect. The date of last update appears at the top of this document.\n\nContinued use of the application after notification constitutes acceptance of the changes.\n\n---\n\n## 11. Contact\n\nFor any questions regarding the protection of your personal data:\n\n**Debtouch — Data Controller**\n7 rue de Toul — 75012 Paris\nantoine.debtouch@gmail.com\n\nIf you are not satisfied with our response, you may contact the **CNIL**: [www.cnil.fr/en/complaints](https://www.cnil.fr/en/complaints)\n","updatedAt":"2026-06-02T19:24:27.000Z"}