Privacy policy
VIA TEMPORA is built to know as little about you as possible. Your position never leaves your phone, the location loop makes no network call, and there is no advertising tracker and no data sold on. This document sets out exactly what is processed, why, and what you can do about it. This English text is provided for convenience. VIA TEMPORA is a French company and the French version of this document is the one that governs; in case of discrepancy, the French text prevails.
Last updated
01Data controller
- Controller
- To be completed
- Address
- To be completed
- Contact
- To be completed
02The principle: your position stays on your phone
While you drive, the app reads your position continuously in order to decide what Abeona should say. That processing happens entirely on your phone: the place database and the synthetic voice are embedded in the app, and the location loop issues no network request whatsoever.
Your GPS trace is neither transmitted, nor collected, nor stored anywhere but on your device — unless you explicitly choose to share a trip to help us calibrate the app.
03Data processed, and why
| Data | Purpose | Where | Legal basis |
|---|---|---|---|
| Location | Deciding which place to tell, and when | On your phone only | Performance of the contract (GDPR art. 6.1.b), after your system-level permission |
| Destination address | Computing the presumed route and preparing content | Sent to IGN’s Géoplateforme as you set off | Performance of the contract |
| Email address | Creating an account and finding it again on another phone | Supabase, if you create an account | Performance of the contract |
| Places heard | Never telling the same place twice, and finding that history on another device | On your phone, and on Supabase if you have an account | Performance of the contract |
| Purchases | Giving you access to what you bought, and restoring it | Supabase, and the store (Apple or Google) | Performance of the contract; statutory accounting retention |
| Reports | Correcting mistakes in the stories | Supabase | Legitimate interest: the accuracy of the content |
| Shared trips | Calibrating the engine against real drives | Supabase, only on your explicit action | Consent (art. 6.1.a), withdrawable at any time |
| Preference profile | Weighting priorities to your tastes, never excluding a place | Supabase | Explicit consent, switchable off at any time |
04What we do not do
- No advertising tracker, no advertising identifier, no ad network.
- Nothing sold, exchanged or rented to a third party.
- No profiling for advertising purposes.
- No network call while driving, beyond account synchronisation once a connection returns.
- No location data passed to anyone, apart from the destination address you type in yourself.
05Recipients
- IGN (Géoplateforme, a French public service): the address searched for and the start and end points, at the moment the route is computed.
- Supabase: hosting of the account, the listening history and the purchases, for people who create an account.
- Apple and Google: payment processing and receipt validation, under their own store terms.
No other recipients. Processors are bound by contract under article 28 of the GDPR.
06Retention periods
- Account data and listening history: for as long as the account exists, then erased when it is deleted.
- Dormant account: deleted after three years without a sign-in, with prior notice.
- Accounting records relating to purchases: ten years, as French law requires.
- Reports: until the story concerned is corrected, then anonymised.
- Shared trips: deleted once the matching calibration is closed, and at any time on request.
- Without an account: nothing leaves your phone, and everything goes when you uninstall.
07Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability set out in the GDPR.
Two of them are exercised straight from the app, without writing to us: a full export of your data as JSON, and its erasure — on the phone and on the account alike. The erase reads every table back after emptying it and tells you what has actually gone.
For everything else, write to [address to be completed]. You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, www.cnil.fr.
08Transfers outside the European Union
Account data is hosted within the European Union. Where a processor may access data from a third country, the transfer is governed by the European Commission’s standard contractual clauses.
09The website
The viatempora.app website sets no advertising or analytics cookie. Typefaces are served from our own domain: your browser makes no request to a third party while reading these pages.
10Children
The app is not aimed at children and does not knowingly collect data concerning anyone under the age of fifteen.
11Changes to this document
Any substantial change will be announced in the app and on this page, with its date. The date this document was last updated appears at the top.