Privacy policy

Groom is a cultural discovery app (exhibitions, events and places in Paris and Île-de-France). We collect the bare minimum: no ads, no trackers, no data resale, no third-party analytics.

Data we collect

Account (optional): username and email address. The email is encrypted (AES-256-GCM) and the password hashed (bcrypt). The account only exists to sync your favorites and statuses across devices.

Submitted content: if you suggest a place or event, the text and photos you submit are kept for moderation and publication.

Notifications (mobile app, optional): if you enable them, a technical token issued by Apple is stored so we can send you notifications. It is deleted if you disable them.

Anonymous visit statistics: a visit counter uses an irreversible fingerprint (HMAC) of the IP address — the address itself is never stored. Detail kept 13 months, then aggregated monthly.

Geolocation

Your location is only used to show where you are on the map, inside the app, on your device. It is never sent to our servers or to third parties.

Third-party services

Map tiles are self-hosted (no request ever reaches a map provider). Weather is relayed by our server (your IP is not forwarded to Open-Meteo). Notifications go through Apple’s push service (APNs). The place-suggestion page uses Google Maps for address autocomplete.

Retention

Account: until you delete it — possible at any time from the app (Settings → Delete account), taking immediate effect on all your data. Anonymous statistics: 13 months in detail, then aggregated. Notification token: until you disable notifications.

Your rights

You can view, correct or delete your data at any time from the app. For any question about your data: hello@groom.fyi.