1. Who we are
This privacy policy applies to the WattMap app for iOS and Android, together with the related website and back-end services (collectively, the "Application"), operated by Hugo Rousseau, sole proprietor (entrepreneur individuel), trading as RMB, RCS Marseille 920 821 311, 55 rue Grignan, 13006 Marseille, France (the "Service Provider", "we"), who is the data controller.
Contact: rmb.contact1@gmail.com
WattMap does not require an account. You can browse the map without providing your name, email address or phone number.
2. Consent
On first launch, the Application asks for your consent before enabling non-essential processing. Without consent, the Application does not store a persistent identifier on your device, does not use your location, and does not send usage events to our servers or to Firebase Analytics.
Advertising consent is collected separately through Google's consent form (where required by law, e.g. in the EEA and UK) and, on iOS, through Apple's App Tracking Transparency prompt. You can change your advertising choices at any time via the ⓘ button › "Ad preferences" in the Application, and on iOS in Settings › Privacy & Security › Tracking.
3. Data we collect and why
Device identifier
When you give consent, the Application generates a random identifier and stores it on your device. It does not contain your name, but it is persistent and is sent to our servers with your reviews and, with your consent, with usage events. Because it can be linked to your actions, we treat it as personal data. You can reset it by clearing the Application's data or uninstalling the Application.
Location
- On your device: with your permission, your location is used to show your position on the map, display the nearest stations and use "Current position" as a route starting point.
- Usage events: with your consent, usage events sent to our servers may include your precise location together with the device identifier. This data is not anonymous.
You can revoke location access at any time in your device settings.
Reviews, pseudonym and reports
When you post a review, we store its text, the pseudonym you choose ("Anonymous" by default), the date and the device identifier. Reviews and pseudonyms are publicly visible to other users. Do not include personal information you do not want to make public. Reports of inappropriate reviews are sent to us without your identifier.
Reliability votes
When you vote on a station, only the station and the vote value are sent to our servers, without your identifier.
Usage events (analytics)
With your consent, the Application records events such as app opens, station views, filters applied (city, operator, connector), navigation launches and route planning. These events are sent to our servers (with the device identifier and, if available, your location) and to Google Firebase Analytics.
Data stored only on your device
Your favorites, experience points, badges, streak, vote history and chosen pseudonym are stored locally on your device and are not sent to our servers (except the pseudonym attached to reviews you post). Resetting your profile or uninstalling the Application deletes this local data.
4. Third-party services
The Application relies on the following services, which receive data in order to operate. Each has its own privacy policy.
| Service | Purpose | Data received |
|---|---|---|
| Our back-end (hosted on Vercel, database on Neon) | Reviews, votes, reports, usage events | Content you submit, device identifier, usage events and location (with consent), IP address |
| Google AdMob and Google User Messaging Platform | Advertising and consent management | Advertising identifier (IDFA on iOS only if you allow tracking; Android advertising ID), IP address, device information, ad interactions |
| Google Firebase Analytics | Usage statistics | Usage events, app instance identifier, device and app information (with consent) |
| CARTO | Map tiles | IP address and the map areas displayed |
| Photon (komoot) | Address and city search | Search text, map center coordinates, IP address |
| API Adresse (data.gouv.fr) | French address search (French-language users) | Search text, map center coordinates, IP address |
| OSRM (project-osrm.org) | Route calculation | Start and destination coordinates, IP address |
When you open a route in Google Maps, Waze or Apple Maps, the destination coordinates are passed to that app, whose own privacy policy then applies.
We do not sell your personal data.
5. Legal bases (GDPR)
- Consent: location, device identifier, usage events and analytics, personalised advertising.
- Performance of the service: storing and displaying the reviews you choose to publish.
- Legitimate interest: security, moderation of reviews and prevention of abuse.
You can withdraw your consent at any time, without affecting processing carried out before withdrawal.
6. International transfers
Some providers (including Vercel and Google) may process data outside the European Economic Area, in particular in the United States. Where required, these transfers rely on appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.
7. Data retention
- Reviews and pseudonym: for as long as you use the Application, plus 12 months, unless you request earlier deletion.
- Usage events: up to 24 months from collection.
- Aggregated or anonymised data: may be kept indefinitely, as it no longer identifies you.
- Data required by law: for as long as legally required.
8. Your rights and data deletion
You have the right to access, rectify, delete, restrict or object to the processing of your personal data, and to data portability. To exercise these rights, email rmb.contact1@gmail.com.
For deletion, use the subject "Data deletion request". Because WattMap has no accounts, please include the pseudonym you used so we can find the associated data. We will delete your reviews, pseudonym, identifier and linked usage events without undue delay, free of charge, unless the law requires us to keep certain data.
If you are in the EU, you may also lodge a complaint with your data protection authority (in France: the CNIL).
California residents (CCPA/CPRA)
You have the right to know what personal information is collected, to request its deletion, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. We do not sell personal information. Contact us at the email above to exercise these rights.
9. Children
The Application is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) between the Application and our servers. No method of transmission or storage is completely secure. In the event of a data breach affecting you, we will notify you and the competent authorities as required by law.
11. Changes
We may update this policy. The effective date at the top of this page will be updated, and material changes will be announced in the Application or on this page. Previous versions are available on request.
12. Contact
For any question about this policy or your data: rmb.contact1@gmail.com