What Podium keeps about you

Who is responsible

Podium is published by Chagner, the sole proprietorship of Augustin Ribreau, SIRET 940 827 322 00014, La Martinière, 85410 La Caillère-Saint-Hilaire, France. For any question about your data: contact@podivm.app.

The podivm.app website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States.

What we keep, and why

• Your account: your email address and your password (stored hashed, nobody can read it), so you can sign in.
• Your profile: the name and emoji you choose, and your language. Your name is visible to the members of your groups.
• Your game: the groups you join or create, your picks and your points. Other members only see your picks after each match has kicked off, never before.
• Notifications, if you accept them: the address Apple's notification service gives your phone, and your language, to let you know when one of your matches is over. The reminder one hour before a match is scheduled by your phone itself: it never goes through our servers.
• Crash reports: when the app crashes, a technical report (the error, the device model and system version) is sent to us so we can fix it. It holds neither your name, nor your email, nor your identifier, and the app never records your screen.

If you sign up on podivm.app to hear about the launch, we keep your email address to send you that message, and nothing else.

What we never do

• No advertising, no audience measurement, no tracking across apps or websites.
• We never sell or rent your data, to anyone.
• No real money: Podium never asks for any means of payment.

Where your data lives

With providers that process it only to run Podium:

• Supabase: accounts, profiles, groups and picks, hosted in Paris (European Union).
• Sentry: crash reports, hosted in Germany (European Union).
• Resend: sending emails, such as the code to reset your password or the launch message.
• Apple: delivering notifications to your iPhone.
• Cloudflare: hosting the podivm.app website.
• Google: the app and the website load their fonts from Google Fonts. On the website you may also choose to sign in with your Google account: Google then passes us your name and email address.

Some of these providers are based outside the European Union. Their data transfers are covered by the safeguards the GDPR provides for, such as the European Commission's standard contractual clauses.

On what basis

• Your account, profile and game: performing the service you use.
• Notifications and the launch message: your consent, which you can withdraw at any time (in Profile or your phone's Settings, or through the email's unsubscribe link).
• Crash reports: our legitimate interest in keeping the app working.

How long

As long as your account exists. When you delete it, everything goes at once: account, profile, picks, points, group memberships and notification address. Copies may remain briefly in the host's technical backups before being overwritten.

Crash reports are deleted automatically after 90 days at most.

Deleting your account

In the app: Profile, then Delete my account at the very bottom. It is immediate and permanent. The groups you ran pass to their longest-standing member; those where you were alone are deleted.

Can't open the app any more? Write to contact@podivm.app from your account's address, and we will take care of it.

Your rights

You can access your data, correct it (your name and emoji can be changed in Profile), get a copy of it, object to its processing or ask for it to be erased. Write to contact@podivm.app, we answer within a month.

If you feel your rights are not respected, you can complain to the French data protection authority, the CNIL: cnil.fr/fr/plaintes.