Privacy Policy

Last updated : July 16, 2026

1. Who is responsible for your data

The Poddz application ("the Application") is published by Robin Socié, a private individual, acting as data controller. Contact: contact@poddz.app We care deeply about your privacy. This policy explains what data we collect, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR).

2. Data we collect

• Account: email address, first name, last name, username, profile photo (optional). • Content you publish: photos, captions, comments, likes, bookmarks, member tags (@mentions), group memberships. • Location (optional and approximate): only if you choose to add a place to a photo. We then store a text label (e.g. "2nd District, Marseille"). We systematically strip EXIF metadata from your photos on upload (precise GPS coordinates, device model, date) — we never keep your exact GPS position. • Technical data: session identifiers, your device push notification token (to send you notifications). • Consents: confirmation that you are 13 or older and acceptance of the Terms (with timestamp). • Moderation: reports, blocks and bans you make or that concern you. We do not collect: your background location, your contacts, advertising data, or third-party marketing trackers.

3. Why (purposes) and legal basis

• Creating and managing your account — performance of the contract (Terms). • Letting you share photos in your groups — performance of the contract. • Sending you emails (confirmation, reset) and push notifications — performance of the contract / your consent (notifications). • Moderation, security, abuse prevention — legitimate interest / legal obligation (DSA). • Adding a place to a photo — your consent (voluntary action).

4. Who has access to your data (processors)

Your data is hosted and processed by technical providers, solely to run the Application: • Supabase — database and authentication (hosted in the European Union — Ireland) • Cloudflare — photo storage (R2), domain and email routing • Resend — transactional email delivery • Apple (App Store, APNs notifications) and Expo (push notification infrastructure) We never sell your data and never share it with advertisers.

5. Retention

Your data is kept for as long as your account is active. If you delete your account (available directly in the app, Settings → Account), your personal data and photos are deleted. Some data may be kept for as long as strictly required by our legal obligations (e.g. moderation/reports).

6. Your rights (GDPR)

You have the rights of access, rectification, erasure, restriction, portability and objection. You can: • delete your account directly in the app (Settings → Account); • or write to us at contact@poddz.app for any request. You may also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).

7. Security

All exchanges are encrypted (HTTPS/TLS) and data access is protected by database-level security rules (Row Level Security): you only see the content of groups you belong to.

8. Minors

Poddz is restricted to people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 is using the app, write to us at contact@poddz.app.

9. Transfers outside the EU

Our providers may process data outside the European Union (e.g. Apple, Cloudflare). These transfers are governed by the safeguards provided for by the GDPR (standard contractual clauses).

10. Changes

This policy may change. In the event of a significant change, we will inform you in the app or by email.

11. Contact

For any question: contact@poddz.app