Mazyo privacy policy

This policy explains which data the Mazyo mobile application ("the App") and the website mazyo.app ("the Site") collect, why, how it is protected and how you can control it. It is written from what the App and the Site actually do today, not from a generic template.

1. Who is responsible for your data

Data controller: Romain LEMEE, sole proprietor (entrepreneur individuel). Address: 47 rue Vivienne, 75002 Paris, France. SIRET: 10911477700013. Privacy and GDPR contact: [email protected].

2. Principles behind everything below

These principles are product commitments, not just a legal formula:

• Privacy first: no silent reading of your address book, no continuous tracking of your position, no collection of phone numbers.
• Trust first: every review published on Mazyo is tied to a real, identified account, never anonymous.
• No sale of data: no data is sold or handed to advertisers.
• The data of your account (reviews, places, lists, profile) is hosted by Supabase, in the European Union (Paris region).

3. Data we collect

3.1 When you create an account

Mazyo only uses sign in with Google or Sign in with Apple. There is no Mazyo password and no phone number is ever asked. Depending on the provider you choose, we receive your email address, your name and possibly a public profile picture.

3.2 What you give us directly

• Profile: display name, username, profile picture (optional, chosen from your photo library), approximate home area.
• Reviews: rating, text, quick tags, an optional photo and a visibility setting that you choose for each review (circle, close friends, group or private).
• Moments: a photo and a note visible to your circle for 24 hours at most, then deleted. Reactions to a Moment are private: only the author sees them.
• Messages: the content of the messages you exchange with your friends in the App.
• Place lists and saved places, including the "To discover" list.
• Import from Google Maps (optional): you choose the file of your Google Takeout export yourself. It is read on your phone and is never sent or kept. Only what each place needs is used: name, address, coordinates, rating, date and the text of the review when it was published. The places are found with Apple Maps (see section 5) and your imported reviews are private by default; you can show them to your friends in one tap. An imported review gives no points, badge or referral reward.
• Video links (optional): when you paste the link of a TikTok video, we read its public description through TikTok's public interface to find addresses in it, and we offer to add them to "To discover". We keep neither the video, nor its thumbnail, nor its description: only the link, the name of the author and the places you confirm (and, for 7 days, a summary of the places found so the same link is not read twice). The clipboard is only read when you tap the button that offers it.
• Description of an evening (optional): the free text you write to plan an evening fills in the choices of the screen. It is never kept. When the feature is switched on, this text (without e-mail address or phone number) may be read by a language model, see section 5.
• Emoji and tribe: the emoji you pick as your face. The person who invited you sees your first name, this emoji and the date you arrived in their "tribe", nothing else.
• Referral: your referral code and, if someone invited you, the link between that person and you. When the person invited has rated three places, the person who invited them can receive one month of Premium for free.
• Subscription and usage limits: the state of your subscription (plan, start and end dates, renewal) is recorded with us from RevenueCat's notifications, together with the identifier of each notification received (its type and time, nothing else) so that it is never applied twice. We never see your payment method. A Premium given as a reward (useful feedback, referral) is recorded the same way. When usage limits are switched on, one counter per month and per feature is kept for your account.
• Taste preferences (favourite cuisines, budget) entered during onboarding or in the settings, used only to personalise your recommendations.
• Feedback: the message you send from "Give your feedback" (bug, idea, recommendation that did not fit) and, to understand the problem, technical information attached automatically: version and build number of the App, system version, phone model, language, the screen you were on and, if the feedback is about a recommendation, the place concerned. Only you and the Mazyo team can read it. You can attach an optional screenshot: the image is reduced on your phone before sending, stored in a private space and readable only by you and the Mazyo team; avoid showing personal information in it. You see the list of your feedback and its status in "My feedback". An optional zero to ten survey is offered after seven distinct days of use. This day count stays on your device, produces no analytics event and is cleared when you sign out. Only your submitted answer is stored with your feedback, once per account.
• Reports and blocks: when you report content, we record what is reported (an identifier), the reason, an optional detail of at most 500 characters, your identifier and the date; when you block someone, the person and the date. Only the Mazyo team and, for your own blocks, you can read them. The person reported or blocked sees none of it and is never told who reported.
• Dietary regimes (optional): if you declare them (vegetarian, vegan, halal, gluten free, alcohol free), they stay on your phone, are sent to no server and to no other user, are the starting point of your place searches and are erased when you sign out. A separate setting, off by default (Settings, “Share my diets with my groups”), lets you, if you expressly turn it on, store them on our server (Supabase, Paris) so that the members of the groups you belong to, and only them, read them when a group recommendation is calculated. Turning the setting off, or deleting your account, erases them from the server.
• Acceptance of the terms: the date and version of the Terms of use you accepted when you created your profile.

3.3 What your device gives us, with your permission

• Position, only while the App is in use: to centre the map and suggest your reference point. Mazyo never tracks your position continuously or in the background.
• Photos: access to your photo library only when you choose to add a photo to a review, to your profile or to a Moment.
• Notifications: if you accept them, your device gives us a notification identifier (see section 5). We also keep which categories of notifications you switched on or off in the settings, and a log of the notifications sent (their type and time, never their content) to keep them to two a day. They are erased with your account.

3.4 What we infer

To personalise your recommendations, we derive an implicit taste signal (cuisines, price range) from the places you rated 4 out of 5 or more, never from a low rating. This signal stays private to your account. For a group recommendation, only the reviews that your friends already made visible to you, according to their own visibility setting, enter the calculation.

3.5 Usage measurement, only with your agreement

Mazyo asks you during onboarding whether you agree to help improve the App. Both answers carry the same weight and you can change your mind at any time in the settings.

• If you decline, nothing is sent and the measurements held in memory are erased.
• If you accept, the App sends usage events (onboarding step viewed, first place rated, recommendation requested, accepted or declined with a reason picked from a closed list, plan created, and so on) to the measurement service PostHog, hosted in the European Union.
• These events are tied to a random account identifier, never to your name, your email or your number. They contain no free text, no place name, no review content and no position. Only a few technical details go with them: language, platform, version and build number of the App.
• Measurement events are kept for 13 months at most.
• Withdrawing your agreement stops sending immediately and deletes the pending measurements on your device.

3.6 Error diagnostics

When the App meets a technical error, a minimal report may be sent to Sentry so that we can fix it. It contains the type of error, technical markers of the code and the version of the App. It contains neither your identity, nor your content, nor your requests, nor your history of actions. This diagnostic relies on our legitimate interest in keeping the App reliable.

3.7 Website and waitlist

The Site uses no cookie and no audience measurement tool. If you leave your email address in the waitlist form, we record that address, your language, the page it came from and the date of your agreement. It is used only to tell you when the App opens, and it is deleted on your request, or 12 months after the App opens at the latest. The form is protected against bots by Cloudflare Turnstile, which analyses the visit to tell a human from a robot.

The Site evening planner works without an account. Your choices, including dietary preferences selected for this search, and your optional description are sent to our server to compose the result; they are not stored. Text interpretation follows section 5. Recognizable French and English postal addresses are also removed from evening descriptions before this call; always keep personal details out. Cloudflare protects the form with Turnstile and authenticates the network address it sends to the server. We do not store that address in plain text: only a salted hash that changes daily, request counts and model token counts are kept to prevent abuse. Hashes from previous days are removed on the next accepted request. The public Selection and proposed evenings show no private review or ordinary account data.

3.8 What we never collect

• Your phone number.
• Your position in the background or continuously.
• The content of your address book.

4. Why we process this data (GDPR legal basis)

• Performance of the contract (art. 6.1.b): create your account, show the map, publish your reviews, run the social features (friends, groups, messages), send the notifications you turned on.
• Consent (art. 6.1.a): access to your position, your photos and your notifications, usage measurement, joining the waitlist. It can be withdrawn at any time.
• Legitimate interest (art. 6.1.f): security of the service, prevention of abuse, error diagnostics, internal technical logs that other users cannot see.

5. Who your data is shared with

We sell no data. The recipients are the technical providers needed to run the service (processors within the meaning of article 28 of the GDPR):

When you search for a place, the text of your search and the coordinates of the centre of the map are sent to Apple Maps through our servers.

Inside the App, the visibility of your reviews, Moments and messages is limited by your own settings (circle, close friends, group, private, or the recipient of the message). Nothing is public by default.

The Anthropic language model is only used for two features, only when the founder has switched it on, and never to rank or choose a place: finding an address in the description of a video, and understanding the description of an evening. Text is sent without an account identifier, after recognizable email addresses and phone numbers have been removed; recognizable postal addresses are also removed from evening descriptions. This filter cannot guarantee that any free text is anonymous: enter no names or personal details. Text is neither stored nor logged on our side; we only keep counters (day, number of requests, volume). Without that switch, these features rely on simple rules or on the choices of the screen.

6. Transfers outside the European Union

Some providers may process data outside the European Union. In that case the transfer is covered by the safeguards of the GDPR (adequacy decision or standard contractual clauses), depending on the provider.

7. How long we keep your data

• Reviews, profile, lists, friends: as long as your account exists.
• Moments: deleted 24 hours after they are published.
• Messages: as long as the conversation exists. You can delete them from the App.
• Feedback: as long as your account exists.
• Reports, blocks and acceptance of the terms: as long as your account exists, or the account of the person concerned exists (reports about them disappear with their account).
• Usage measurement: 13 months at most.
• Imported reviews: as long as your account exists, or until you delete them. Summary of the places found in a link: 7 days. Language model usage counters: as long as your account exists, with no text at all.
• Subscription, subscription notifications, usage counters and free Premium: as long as your account exists.
• Waitlist: until you ask for deletion, or 12 months after the App opens at the latest.
• Account deletion: from the settings, "Delete my account" permanently erases your profile, your reviews, your friends, your messages, your feedback and its screenshots, your Moments and their photos, your lists, your referrals, the subscription recorded with us and your notification identifiers. Conversations also disappear for your friends. The operation is immediate and irreversible. If you signed in with Apple, the App shows the Apple sheet again so that we can revoke the "Sign in with Apple" link with your account; if you cancel it, the deletion goes on without that revocation and you can remove Mazyo in your Apple ID settings (Sign in with Apple). We also ask RevenueCat to delete your customer profile. Deleting does not cancel an Apple subscription, which you cancel in Apple's settings (Subscriptions). Apple keeps its own purchase records according to its own retention periods.

8. Your rights

Under the GDPR you can at any time, in the App (Settings, "Request my data" to get a copy of your data) or by writing to [email protected]:

• access the data we hold about you;
• have it corrected;
• ask for its deletion;
• object to a processing or ask for it to be restricted;
• withdraw a consent;
• ask for a portable copy of your data.

We answer within 30 days, by email, at the address of your account. You can also lodge a complaint with the CNIL (cnil.fr) if you believe your rights are not respected.

9. Minimum age

Mazyo does not set a specific minimum age at this time. The App is not designed for children and has no age verification mechanism.

10. Security

Your data is protected by strict access rules at the database level (Postgres Row Level Security): each user can only read what their relationship with you (friend, group, or nothing) allows. Moment photos are stored in a private space whose access expires with the Moment. Exchanges with our servers are encrypted.

11. Changes to this policy

We update this policy to reflect a real change in the App or the Site (new feature, new provider). The date at the top of the document shows the last update and any significant change is reported to you in the App.

12. Contact

For any question about this policy or your data: [email protected].

See also the Terms of use and the Legal notice.