Privacy Policy

Data Controller

The data controller for your personal data is: Mexar, Headquarters: Paris, France, Email: privacy@mexar.fr

Data Collected

Data you provide to us

Location data: your geographic position (with your permission) for personalized aurora alerts. Notification settings: your alert preferences and KP thresholds.

Automatically collected data

Technical data: device type, operating system, application version. Usage data: features used, frequency of use (anonymized). Location data: country only (for regional preferences).

Processing Purposes

We use your personal data to: provide and maintain the Aurora Now service, send personalized aurora alerts based on your location, improve our service and develop new features, respond to your support requests, ensure the security of our service.

Legal Basis for Processing

We process your personal data on the following legal bases: Contract execution (processing necessary to provide the service), Consent (for notifications and location), Legitimate interest (service improvement, security), Legal obligation (compliance with applicable laws).

Data Recipients

Your data may be shared with: Service providers (Supabase and Vercel hosting, payment processing via Apple App Store and Google Play Store), Analytics services (Umami Analytics - anonymized, no personal data), Authorities (in case of legal obligation). We never sell your personal data to third parties.

International Transfers

Some of our data may be processed outside the European Union, particularly in the United States (Vercel) and Singapore (Supabase). These transfers are made in accordance with GDPR, using the European Commission's standard contractual clauses.

Data Retention

We retain your personal data for the following periods: Account data (as long as your account is active, then 3 years after deletion), Location data (not retained after processing), Security logs (1 year). You can request deletion of your data at any time via app settings or by contacting us.

Your Rights

Under GDPR, you have the following rights: Right of access (obtain a copy of your personal data), Right to rectification (correct inaccurate or incomplete data), Right to erasure (request deletion of your data), Right to restriction (restrict processing of your data), Right to portability (receive your data in a structured format), Right to object (object to processing of your data), Right to withdraw consent (withdraw your consent at any time). To exercise these rights, contact us at privacy@mexar.fr. You also have the right to lodge a complaint with your local data protection authority.

Security

We implement appropriate technical and organizational measures to protect your personal data: encryption of data in transit (HTTPS/TLS), encryption of data at rest, secure authentication, restricted access to personal data.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. In case of substantial changes, we will inform you by email or via a notification in the application.