Privacy Policy - Pilgrimz

Last Updated: Nov, 25, 2025

This English version is a translation of the original French document. In case of discrepancy, the French version shall prevail.

We place the utmost importance on the confidentiality of the Personal Data we collect and process, as well as your privacy as Users of our PILGRIMZ Application.

This Privacy Policy explains how we collect, use, store, and share your Personal Data in accordance with applicable laws and regulations, and informs you of your rights regarding your data.

You are currently viewing the latest version of our Privacy Policy. This version may change over time.

We therefore invite you to review our online Privacy Policy whenever you wish to stay informed of the latest version. You will also be notified of any changes if we already process your Personal Data and if such changes affect how your data is processed.

DEFINITIONS

Application: refers to our PILGRIMZ application, which allows travelers to discover interesting facts and information about monuments and points of interest in a city or location;

Personal Data: refers to any information relating to the Users of our Application as identified or identifiable individuals;

PILGRIMZ (“we,” “our,” or “us”): refers to the French company PILGRIMZ SAS;

Privacy Policy: refers to this privacy policy issued and published by PILGRIMZ;

Services: refers to the services we provide to Users through our PILGRRIMZ Application;

Processing: refers to any operation or set of operations applied to Personal Data, such as collection, recording, or storage;

Users: refers to the users of our PILGRIMZ Application.

WHO ARE WE?

This Privacy Policy is issued and published by PILGRIMZ.

Under data protection regulations, we act as the data controller when we collect and process your Personal Data.

This means that we determine the purposes and means of Processing when handling your Personal Data.

We therefore commit to complying with the obligations imposed by these regulations, including the obligation to inform individuals whose Personal Data is processed.

This Privacy Policy is published to transparently inform you of the characteristics of the data processing activities we carry out.

DATA PROCESSING WE CONDUCT

We process your Personal Data to allow you to use the Services and features of our Application. We may also process your Personal Data to send you personalized communications, comply with legal obligations, or pursue legitimate interests.

Processing Purpose	Categories of Personal Data	Legal Basis
Provide the Services of the PILGRIMZ Application	· Identification data (name, email) · Geolocation data (only when using the Application) · User-generated content	Performance of a contract; Consent (for geolocation)
Improve features and performance	· IP address · Device type · Interaction data (clicks, pages viewed) · Login data	Legitimate interests
Provide personalized content and notifications	· Email · Login data	Contract performance; Legitimate interests
Perform analytics and statistics	· IP address · Device type · Interaction data · Login data	Legitimate interests
Use of cookies, trackers, audience measurement tools	· IP address · Device type · Interaction data · Login data	Legitimate interests or consent depending on cookie type
Provide targeted advertising	· IP address · Device type · Interaction data · Login data	Legitimate interests or consent depending on advertising mechanism
Record retention, complaints handling	· Identification data · Application usage data · Content of communications and complaints	Legal obligations; Legitimate interests

DATA RETENTION PERIODS

Processing Purpose	Retention Period
Provide the Services	Until account deletion or 3 years of inactivity
Improve features and performance	Until account deletion or 3 years of inactivity
Provide personalized content	During use + 3 years after last interaction
Analytics and statistics	6 to 13 months
Cookies, trackers, measurement tools	6 to 13 months
Targeted advertising	During use + 3 years after last interaction
Complaint and litigation records	5 years (legal limitation period)

DATA TRANSFERS

Personal Data is hosted within the European Union.
No transfers of Personal Data outside the EU, but data may be received from non-EU countries due to user location.
We use service providers including Firebase Analytics, Appsflyer, Sentry, and Supabase.
We ensure all providers comply with data protection requirements through appropriate contracts.

SECURITY MEASURES

We implement appropriate technical and organizational measures to protect Personal Data, including:

Encryption and pseudonymization of Personal Data;
Confidentiality of Personal Data;
System integrity and availability;
Procedures to restore access in case of incident;
Regular testing and reviewing of security measures;
Protection against destruction, loss, alteration, unauthorized access, or unlawful processing.

YOUR RIGHTS

Users may exercise the following rights:

Right of access;
Right of rectification;
Right of erasure;
Withdrawal of consent;
Right to object or restrict processing;
Right to data portability;
Right to lodge a complaint with a supervisory authority (CNIL in France).

Requests may be sent to: [email protected]

We may request proof of identity before processing a request.

CONTACT

Email: [email protected]

We will respond within one month, extendable by two months if necessary.