Privacy Policy (app)

1. Data controller

Les Remarquables, 144 rue Paul Bellamy, 44000 Nantes — our contact form. This policy concerns the My Lodge app and its web version app.my-lodge.com.

2. Data collected

• Account: e-mail address, nickname, name, profile photo.
• Mason verification (Acacia): obedience, Mason number, Lodge number and name, initiation date, degree and any supporting document.
• Location: approximate position, only if you enable mutual aid.
• Content: listings, profiles, papers and messages you publish.
• Technical data: notification tokens (push), store transaction identifiers (Apple/Google), connection and security logs.

3. Sensitive data

Membership of a Masonic obedience is sensitive data within the meaning of Article 9 GDPR. It is processed only with your explicit consent, given when you request verification, and solely for the purposes below. You may withdraw this consent at any time.

4. Purposes and legal bases

• Providing the service and managing your account — performance of the contract.
• Verifying Mason status and granting Acacia access — explicit consent.
• Location-based mutual aid — consent (can be enabled/disabled).
• Push notifications — consent.
• Managing subscriptions and purchases — performance of contract / legal obligation (accounting).
• Security, abuse prevention, moderation — legitimate interest.

5. Location

Location is used only for mutual aid, upon explicit activation. Positions are processed in anonymised form (approximate distance to nearby members) and are not kept for tracking.

6. Recipients and processors

Your data is processed by the publisher and its processors: Google Firebase / Google Cloud (hosting, authentication, notifications), Apple and Google Play (in-app purchases), Stripe (online payments). No data is sold to third parties. Other members only see information you choose to make visible (e.g. directory, listings).

7. Transfers outside the EU

Data is hosted in the European Union. Any transfer outside the EU is governed by appropriate safeguards (European Commission standard contractual clauses).

8. Retention

Account data is kept while the account is active, then deleted or anonymised. Verification documents are kept only as long as strictly necessary, then deleted. Billing data is kept in accordance with legal obligations.

9. Security

The publisher implements appropriate technical and organisational measures (encryption in transit, access control) to protect your data.

10. Your rights

You have rights of access, rectification, erasure, objection, restriction, portability and to withdraw consent. You can delete your account directly in the app. To exercise your rights: our contact form. You may contact the French CNIL (www.cnil.fr).