At Adopt'Animaux (M&G Group), protecting your data isn't a line read hastily at the bottom of a contract. It's the foundation of our trust pact.

By using our app and our site, you entrust us with information. We strictly comply with the GDPR to guarantee their absolute security. No unnecessary legal jargon — here's how we protect you.

1. Who manages your data?

M&G Group is the legal Data Controller. To exercise your rights or ask a question, one single secure communication channel: contact@adoptanimaux.fr.

2. What exactly do we collect?

We only collect what is strictly necessary to keep the app's engine running:

Profile data: Name, email, password (cryptographically hashed and totally unreadable by us), phone (if provided), and profile picture. This is the very essence of the platform's security.
Content data: The listings you post, your private messages (encrypted in transit via TLS), your reviews and replies, your posts and photos shared on the social Feed.
Geolocation data (GPS): Only if you explicitly allow it. This is essential for using the interactive walk map, reporting danger zones, and finding services near you.
Browsing and usage data: Information about how you use the app: pages visited, actions taken (search, listing, contact), IDs of items viewed. This data is collected only if you've given your consent via our dedicated banner.

3. What is your data used for?

Our business model is based on professional subscriptions, not on selling your private lives. We use your data to:

Operate the service: Show you the right geolocated listings, nearby services, and deliver your messages instantly.
Guarantee security (Zero Tolerance): Ban fraudulent profiles, detect scams, moderate abusive content, and enable danger alerts on the map.
Your experience: Send you relevant push notifications (e.g. map danger alert, new message, activity recap).
Continuous improvement: Understand how the app is used to offer better features and fix friction points.
Solemn commitment: We will NEVER sell your personal data to data brokers or third-party advertisers.

4. Our legal basis (GDPR)

We process your data under:

Contractual performance: This is essential to provide you with the service stipulated in our Terms of Use.
Your free consent: Transparently required for GPS access, push notifications, and usage data collection (analytics).
Our legitimate interest: For the security of our network infrastructure and anti-fraud efforts.
Legal obligation: To respond to judicial requisitions from the French State if necessary.

5. Who has access to your information?

Your data stays in the family, with very rare, purely technical exceptions:

The community: What you make public (your listing, your first name, your city) is visible to other members. That's how a network works.

Our technical subcontractors:

Subcontractor	Role	Data involved
Supabase (Austria / EU)	Database hosting, authentication, file storage, server functions	Profile, listings, messages, media
Google Firebase (Google LLC)	Analytics (audience measurement), Cloud Messaging (push notifications), Crashlytics (crash reports)	Pseudonymised usage events, notification tokens, error reports
Meta / Facebook (Meta Platforms Inc.)	App audience measurement (Facebook App Events)	Pseudonymised usage events, subject to your consent
Apple / Google	App distribution (App Store, Play Store)	Download data and Pro subscription payments

These subcontractors provide the vault but do not use your data for their own purposes outside the contractual framework.

Authorities: Only under strict legal constraint (judicial requisition in case of serious offence).

Any potential data sharing, especially outside the European Economic Area via our service providers, is governed by appropriate safeguards compliant with GDPR (such as Standard Contractual Clauses).

6. Data security

We use TLS/HTTPS encryption protocols to secure the transit of all data between your device and our servers. Databases benefit from restrictive security rules (Row Level Security) ensuring each user can only access their own data. Passwords are hashed with irreversible cryptographic algorithms. In short: your data is locked at every step.

7. Data retention (The right to be forgotten)

Your data lives as long as your account lives. If you delete your account from the app, your profile data is erased from our servers. Some denormalised data (such as your first name associated with a conversation or a past listing) may persist as residual data in existing chat histories, but is no longer linked to an active account. In accordance with the law, after 3 years of total inactivity, an account is considered inactive and will be deleted from our servers.

8. You're the boss (Your rights)

You have total control over your digital life:

Right of access & Portability: Ask us for a complete copy of the data we hold about you.
Right to rectification: Modify your incorrect info directly in the app.
Right to erasure: Send your deletion request to contact@adoptanimaux.fr. We will ask you to confirm your identity to protect your account against fraudulent deletion. Once your identity is verified, we delete your account and associated data, then send you a deletion confirmation email.
Right to object: Turn off notifications or GPS directly in your phone settings (iOS/Android). You can refuse analytics collection via the app's consent banner.
The right to data portability (receive your data in a structured format and transmit it to another controller).
The right to object to the processing of your data on legitimate grounds, or at any time for direct marketing.
The right to withdraw your consent at any time for processing based on consent.
The right to define directives concerning the fate of your data after your death (if applicable under local law).

A specific request? Contact our Data Protection Officer: contact@adoptanimaux.fr. We commit to responding to any request within a maximum of 30 days in accordance with the GDPR.

If you find our actions unsatisfactory, you have the strict right to lodge a complaint with the CNIL (cnil.fr).

9. Data hosting

We prioritise servers located in Europe (Supabase hosts our data in Austria, EU). Some technical partners (Google Firebase, Meta) may process data in the United States. In that case, we contractually require the application of the European Commission's Standard Contractual Clauses and adequate protection mechanisms (Data Privacy Framework) to maintain the GDPR standard.

10. Protection of minors

Using the platform requires legal majority (18 years), as adopting an animal entails criminal responsibilities. We will block and delete any account we discover belongs to a minor.

11. Policy updates

We will inform you by email or in-app notification of any major modification to this policy that changes the handling of your rights.

12. Contact us

A concern? A technical doubt? Write to us directly: contact@adoptanimaux.fr.

Privacy Policy & GDPR