Privacy policy

Who is responsible

The data controller is Zeluna Labs, 21 rue Vauvenargues, 75018 Paris (see our legal notice). For any question: [email protected].

What we collect, and why

• Your account: email address, first name, country of origin (optional), preferred language and password (stored encrypted, we never see it). You sign in with that password or with a link we email you. They let you sign in and let us write to you about your tours; your country tells us where our visitors come from. The first name and country asked when you first open the app are optional: without an account they stay on your phone, and only reach your account when you sign in.
• Your purchases: tour, date, number of participants, amount, and the name and email entered at payment, passed on to our payment providers (Stripe for card payments). Your card details never go through our servers.
• Your progress: completed stops, tastings collected and quiz answers, so the app shows you the right next stop.
• The end-of-tour survey: your country and how you heard about us, to improve our tours and know where our visitors come from.
• Your reviews: rating and comment. Once approved by our team, a review is published on the tour page with your first name.
• A report during a tour (product unavailable, shop closed): your comment, and the photo if you choose to add one, taken with the camera or picked from your gallery.
• Notifications: a notification token specific to your phone, to remind you of your tour the day before and on the day. You can turn them off in Profile › Account information; reminders are then sent by email.
• The app version, your phone's system and the day you last opened the app, so we know which versions are still in use and can tell you when to update.
• The website's waiting list: your email address, to tell you when the app launches.
• The website's contact and partner forms: name, email address and message (and, for a partnership, your venue, its address or neighbourhood, and your phone number if you give it), to answer you and, for a shop, to consider its request.
• Messages sent from the app: they reach us with your email address, so we can answer you. If you refer a friend, you give us their email address: it is only used to send them your referral.
• Anonymous audience measurement in the app — which screens are opened and a few actions. Events carry a random identifier created on your phone, never your account, your name or your email. It is renewed every time you sign out, and at least every 13 months. Your IP address is not kept.
• Crash reports, stripped of personal data and IP addresses, to fix what breaks.
• Visit statistics for this website, with no cookie or identifier stored in your browser: we cannot recognise you from one visit to the next.

Your location never leaves your phone

While the app is open, it may use your location to place you on the map, show the distance to the next stop and check that you are near the start. These calculations happen on your device. Your location is never sent to our servers, and is never stored. It is never read in the background. You can refuse: the map still works.

On what basis

• The contract between us when you create an account or buy a tour: account, purchases, progress, notifications, reports.
• A legal obligation: keeping a record of your payments for our accounts.
• Our legitimate interest in improving and securing the service and in answering you: anonymous audience measurement, crash reports, app version, messages, reviews.
• Your consent for the waiting list: you can leave it at any time by writing to us.
• Our legitimate interest in telling you about our tours: we may write to the address of your account about new tours and offers. You can object at any time, by writing to us or through the link in each of those emails.

Who processes data for us

• Supabase — accounts, purchases and tour data, hosted in the European Union
• Railway — runs the server the app talks to, in the European Union
• Stripe — card payments and receipts
• Resend — sends our emails (sign-in, payment confirmation, reminders)
• Expo, Google (Firebase) and Apple — deliver notifications to your phone
• Google — the internal spreadsheet where we keep track of our contacts: waiting list, partner requests, and for each account its email, first name and language. It may be used for promotional emails (see “On what basis”)
• PostHog — anonymous audience measurement, EU region
• Sentry — crash reports, EU region
• Mapbox — map tiles; its own statistics are turned off in the app
• Cloudflare — serves this website and counts its visits

Each one only receives what it needs to do its job, and none may use it for anything else. Some are based in the United States: those transfers are then covered by the Data Privacy Framework or by the European Commission's standard contractual clauses.

How long we keep it

• Your account, progress, reviews and notifications: as long as your account exists. You can delete it at any time from the app.
• Your purchases: 10 years, as the law requires for accounting records, even after your account is deleted.
• Reports made during a tour: the photo is deleted with your account; the comment is kept for 3 years.
• Messages and the waiting list: 3 years after our last exchange.
• Our contact list (email, first name and language of each account): 3 years after our last exchange, even after your account is deleted.
• Audience measurement: 12 months. Crash reports: a limited period set by Sentry.

How to delete your account, with or without the app, and what is deleted: delete your account.

Your rights

You can ask to see the data we hold about you, to correct it, to have it deleted, to restrict its use, to receive it in a reusable format, or object to its use. Write to us and we will answer within a month. To delete your account, follow these steps. If our answer does not satisfy you, you can complain to the CNIL, the French data protection authority (cnil.fr).

You can refuse audience measurement at any time: in the app, open Profile › Customer support & legal › Audience measurement and turn it off. Nothing more is sent from that phone.

Children

Localist is not meant for children under 16, and we do not knowingly collect their data.

Contact

For anything on this page, or to exercise any of the rights above: [email protected]