Decarmy (DECA) — version of 19 August 2026.
DECARMY publishes the mobile app Decarmy and the website decarmy.com, a guide to sustainable alternatives. This policy explains what data we collect, why, and what your rights are.
The data controller is DECARMY, 42 rue Lamarck, 75018 Paris, France. For any question about your data or this policy, write to decarmyy@gmail.com.
Account: your email address, and — if you sign in with Google or with Apple — the name and profile photo that provider sends us. With Sign in with Apple you may hide your address; we then only ever see the relay address.
Your contributions: places added, reviews, ratings, photos you publish, and the associated text.
Your activity in the app: favourites, declared visits and purchases, history, DecaCoins, subscriptions and followers.
Location, if you allow it: your precise position is used on your device to sort places by distance and find nearby public services. Two things do leave your phone, and only these: an approximate area (about one kilometre) attached to a post you choose to publish, so others can see it is near them; and the route of a journey you start yourself in the trip tracker, which is what allows the CO₂ you avoided to be calculated. Your precise position is never stored continuously and never in the background.
Camera and photos: used only when you choose to add a photo. No image is read without your action.
Microphone: used only while you hold the record button to send a voice message. Nothing is recorded outside that gesture.
Motion sensors: used by the location system to improve the accuracy of a journey you start yourself, and to tell walking and cycling apart. Your motion activity is never read outside a journey you started.
Private messages: the content of your conversations is stored so it can be delivered to your recipient. We do not read it and never use it for anything else.
Notifications, if you allow them: a device token is stored so we can reach your phone. It identifies the device, not you.
Ecological actions: the actions you declare, the CO₂ they avoid and the DecaCoins they earn. The CO₂ figure is recalculated on our servers.
Payments: when you pay in the app, your card details are entered directly with Stripe and never pass through our servers. We keep the order, its amount and its status.
Incident reports: if the app hits an error, a technical report is sent (message, trace, app version, account identifier). It never contains what you were typing, your position or your messages. Kept for 90 days at most.
We use no advertising and no third-party tracking, and we never sell your data.
To authenticate you and keep your session; to display your public profile, your contributions and your statistics; to power search, listings and favourites; to moderate contributions, handle reports and enforce blocks; and to process orders placed with professionals.
The app relies on Google Firebase (Authentication, Cloud Firestore, Storage, Hosting) hosted in the European Union (region europe-west9, Paris). Google acts as a data processor.
When you add a place, the address you type is sent to the Base Adresse Nationale (adresse.data.gouv.fr, a French public service) to be standardised and located. Only the address is sent — never your identity.
Push notifications go through Firebase Cloud Messaging and then Apple’s notification service.
Some photos are loaded from Wikimedia Commons and some aerial views from the French IGN. Loading an image transmits your IP address to those providers. This is strictly technical.
Public services shown in the app come from OpenStreetMap (ODbL licence) and are downloaded as static files. No request identifies you.
Stripe acts as payment processor and is an independent data controller for payment data.
We process your data to perform the service you request (account, contributions, orders), on your consent (location, photos, microphone, notifications — each can be withdrawn at any time in your phone settings), and on our legitimate interest in moderating and improving the service.
Your data is retained for as long as your account exists. When you delete your account, your personal data and identifying contributions are deleted. Orders are kept for the period required by accounting law.
Under the GDPR you may access, rectify, erase, object to, restrict and port your data. Write to decarmyy@gmail.com. You may also lodge a complaint with your national data protection authority; in France, the CNIL.
You can delete your account and your data at any time from the app: tap your photo (top left) → Settings (top right) → Delete my account. This deletes your profile, favourites, reviews, statistics and subscriptions. It is permanent and irreversible.
The app is not intended for children under 13. We do not knowingly collect data about children under 13.
This policy may be updated. In the event of significant changes, we will say so in the app. The date of the last update appears at the top of this document.