Privacy policy

This policy explains what personal data we collect when you use Jecontact (website and mobile app), why we use it, who we share it with, how long we keep it and what your rights are. It applies in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

The data controller is Zaulhat MILANDOU, sole trader (entrepreneur individuel) trading under the name Zomil, 127 rue Amelot, 75011 Paris, France. For any question about your data: contact@zomil.app.

2. The data we collect

• Account: email address, sign-in method (email and password, Google or Apple). The password is managed by Firebase and is never stored in plain text.
• Profile: first name, date of birth (age), gender, gender you are looking for, desired age range and distance, description, interests, relationship goal, religion, languages spoken.
• Photos and videos: profile photos, posts, stories, and the verification selfie if you request the “verified profile” badge.
• Location: GPS position if you allow it, otherwise an approximate position derived from your IP address; your city and country are derived from this position.
• Activity: likes, super likes, matches, saved profiles, blocked members, reports, messages, comments.
• Purchases: diamond balance, Premium subscription, purchase history (the payment itself is processed by Google Play or the App Store: we never receive your bank details).
• Technical data: IP address, device and browser type, notification identifier (app), connection logs and app crash reports.
• Support: the information you send us via the contact form or by email.

3. Sensitive data

Some profile information may reveal your religion or your sexual orientation (for example the gender you are looking for). This is sensitive data within the meaning of Article 9 of the GDPR. We only process it with your explicit consent, which you give by providing it, and only to operate the service (display on your profile, profile suggestions). You can change it at any time from your profile or delete your account.

4. Why we use your data and on what legal basis

• Providing the service (account creation, profile, profile suggestions, messaging, posts, purchases) — legal basis: performance of the contract (the terms of use).
• Suggesting profiles near you using your location — legal basis: your consent for the GPS position; performance of the contract for the approximate position.
• Ensuring safety and moderation: automatic analysis of photos to detect prohibited content, profile verification, handling of reports, fight against fake profiles, fraud and spam, limiting abuse — legal basis: our legitimate interest in protecting members and the service, and our legal obligations.
• Sending you notifications (new messages, likes, matches) — legal basis: performance of the contract; you can turn them off in Options or in your phone settings.
• Showing rewarded video ads in the app, only if you choose to watch them — legal basis: your consent for personalised advertising.
• Answering your support requests — legal basis: our legitimate interest in replying to you.
• Complying with our legal obligations (retention of connection data, responses to the authorities, accounting) — legal basis: legal obligation.

We never sell your personal data.

5. Who can see or receive your data

Other signed-in members see your profile: first name, age, photos, description, city, approximate distance (never your exact position), interests, relationship goal, religion, languages and verification badge. They also see your posts and comments. Your email address is never visible. Profiles are not visible to people who are not registered, unless a member shares a profile link from the app: the sharing page then shows the first name and main photo.

Our service providers, only for what they need:

• OVH SAS (France): hosting of the servers and the database;
• Google Ireland Limited / Google LLC: Firebase (sign-in, messaging, notifications, crash reports), Google Cloud Vision (automatic photo analysis), Sign in with Google, Google Play (payments), AdMob (rewarded videos in the app);
• Apple: Sign in with Apple, App Store (payments);
• RevenueCat Inc. (United States): management of subscriptions and purchases;
• OpenStreetMap (Nominatim): converting your position into a city name;
• ip-api.com: approximate position based on your IP address, if you do not share your location;
• advertising partners of the AdMob mediation, only for the app’s rewarded videos: Unity Ads, Mintegral, Pangle, OpenX, Magnite and OneTag.

The authorities, only upon a lawful request.

6. Transfers outside the European Union

Some providers (Google, Apple, RevenueCat) may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework where the provider participates in it, or by the European Commission’s standard contractual clauses.

7. Retention periods

• Account and profile: as long as your account is active. When you delete your account (Options > Delete account, on the website or in the app), your profile, photos, posts, likes and verification selfie are erased immediately and your conversations no longer appear to the people you talked to. The content of messages is kept securely for 1 year after the account is deleted, only to handle any reports or requests from the authorities (harassment, fraud), and is then permanently deleted.
• Inactive accounts: an account with no sign-in for 2 years is deleted, after a reminder email sent 30 days beforehand.
• Connection data (IP address, logs): 1 year, as required by law.
• Purchase data: 10 years for accounting obligations.
• Support requests: 3 years after our last exchange.
• Backups: deleted data may remain in the server’s technical backups until they are automatically replaced, within 30 days at most.

8. Security

Communications are encrypted (HTTPS). Access to data is limited to the people who need it. Website sessions are protected by an encrypted cookie, and every request is checked by the server before accessing your data. As no system is infallible, we encourage you never to share your login details and to report any suspicious behaviour to us.

9. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time and to set instructions regarding what happens to your data after your death. You can change most of your information directly from your profile and delete your account from Options.

To exercise your rights, write to us at contact@zomil.app or by post at 127 rue Amelot, 75011 Paris, France. We reply within one month. If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

10. Cookies and local storage on the website

The website uses no advertising or audience measurement cookies. It only uses:

• an encrypted session cookie, required to stay signed in;
• a language cookie and a theme cookie (light or dark), to remember your choices;
• the browser’s local storage, to avoid notifying you twice of the same event and to remember your sound setting.

These elements are strictly necessary for the website to work or for your preferences: they do not require consent. You can delete them in your browser settings (you will then be signed out).

11. Minors

Jecontact is strictly reserved for adults (18 years and over). If we learn that an account belongs to a minor, it is deleted.

12. Changes

We may update this policy. In the event of a significant change, you will be informed on the website or in the app before it takes effect.