Privacy Policy

1. Data Controller

LEMAITRE Julien – Independent publisher.

This policy applies to the SmartTravely mobile application.

2. Data We Collect

2.1 Account Data

• Email address and password upon account creation/login.
• Authentication tokens to maintain the session.

2.2 Profile Data

• Profile photo (optional).
• Data from Google (email, first/last name, photo) via Google Sign-In.

2.3 Travel Data

• Destinations (city/country/placeId), dates, budget, number of travelers.
• Travel preferences (accommodation, transport, activities).
• Generated and modified itineraries.

2.4 Travel Documents

• Imported files (PDF, images) and associated metadata (name, type, size, category).

2.5 In-App Purchases

• Product identifiers, transaction identifiers/tokens, platform.
• We do not collect your credit card data. Payments are processed by Apple or Google.

2.6 Technical Data

• Technical information and logs (IP address, device type, requests) for security purposes.

2.7 Local Storage

• Data stored on the device, including session and preference information.

3. Purposes of Processing

• Creation and management of the user account.
• Generation and personalization of travel itineraries.
• Token management and in-app purchases.
• User support and platform security.

4. Data Sharing

Your data may be shared with service providers necessary for the operation of the service:

• Hosting and infrastructure.
• Google services (authentication, geolocation).
• Apple / Google for transaction validation.
• Competent authorities, if required by law.

5. Data Retention

• Account data is retained as long as the account is active.
• Travel data and documents are retained until deleted by the user.
• Technical logs are retained temporarily for security reasons.

6. Your Rights

In accordance with the GDPR, you have the following rights:

• Access — obtain a copy of your data.
• Rectification — correct inaccurate data.
• Erasure — request the deletion of your data.
• Restriction — restrict processing.
• Objection — object to processing.
• Portability — receive your data in a structured format.

The user may request the permanent deletion of their account and data at any time.

7. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

8. International Transfers

Some service providers may process data outside the European Union, with appropriate contractual safeguards.

9. Children

The application is not intended for children under 13 years of age.

10. Changes

This policy may be updated. The last updated date will be modified accordingly.