Privacy Policy

1. Data controller

Laboon is published in a personal capacity by Mathieu Lopez (see the Legal Notice). He is the controller of the personal data collected through the application.

Contact: laboon.app@gmail.com

2. Data collected

Your account:

• First and last name, e-mail address
• Password (stored in encrypted form, never in clear text)
• If you sign in with Google or Apple: the identifier provided by that service, your e-mail address (Apple may hide it), your first and last name. The photo of your Google account is not imported.

Your profile (provided voluntarily):

• Instruments, level, styles, influences, availability, biography
• Profile photo, visuals and pages of your bands
• Links to your online pages (Instagram, YouTube, SoundCloud, Spotify, etc.), displayed publicly
• A geographic area of your choice: the centre of a city or neighbourhood and its radius, never a precise address. It is used to find musicians and ads nearby.

Your content and activity:

• Ads, messages, favourites, saved searches
• Users you block, reports you make
• Your last activity, according to your privacy settings, and your notification preferences
• The version of the legal documents you accepted, the date and the language

Technical data:

• Your device's notification token, device type and system, application version
• IP address, in the server logs
• With your consent only: usage statistics (screens visited, features used) linked to an identifier of your account, never to your name or e-mail, and crash reports

3. Purposes and legal bases

• Creating and managing your account, connecting musicians, messaging — Legal basis: performance of the contract
• Application notifications (messages, favourites, invitations) — Legal basis: performance of the contract, with your permission on the device
• Service e-mails (password changed, account deleted) — Legal basis: performance of the contract
• Moderation and security (reports, blocks, abuse prevention) — Legal basis: legitimate interest
• Usage statistics and crash reports — Legal basis: consent, which you can withdraw at any time in “Privacy & data”
• Website newsletter (outside the application) — Legal basis: consent

4. Retention periods

• Account data: for as long as the account is active, then 3 years after the last sign-in, or until the account is deleted
• Reports: 12 months at most after they are created, without naming the people once their account is deleted
• Technical logs: 12 months
• Website waiting-list contacts: until the application launches, then 1 year
• Backup copies: they may remain temporarily after a deletion, until they are automatically overwritten

5. Recipients of the data

Your personal data is not sold to third parties. Laboon shows no advertising. It may be processed by our service providers, under GDPR-compliant contracts:

• OVH: hosting of the server and the database
• Cloudflare: protection and routing of the traffic to our servers (your IP address goes through it)
• Vercel: hosting of the website
• Apple and Google: sign-in with your account, notifications (APNs, FCM), and, with your consent, usage statistics and crash reports (Firebase)
• An e-mail sending provider, for the service e-mails

The competent authorities may also have access to it where required by law. Any transfer outside the European Union is subject to appropriate safeguards (the European Commission's standard contractual clauses).

6. Your rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure (“right to be forgotten”): see the section “Deleting your account”
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw your consent at any time

You can correct your profile in the application. The application does not yet offer an automatic export: to get a copy of your data, write to us. We reply within one month.

To exercise these rights: laboon.app@gmail.com

You may also lodge a complaint with the CNIL (www.cnil.fr).

7. Deleting your account

You can ask for your account and the associated data to be deleted at any time, in one of two ways.

In the application:

Profile, then “Delete my account”, then confirm. The deletion is immediate and permanent. For a “Sign in with Apple” account, Apple also asks you to confirm, and the authorisation given to Laboon is revoked.

Without opening the application:

Write to laboon.app@gmail.com from the e-mail address of your account, stating “Laboon account deletion”. We delete the account within one month and confirm by e-mail.

What is deleted:

• Your profile, your links, instruments, genres and influences, your photo and the visuals of the bands where you were the only member
• Your ads, favourites, saved searches, blocks, notifications and notification tokens, consents and acceptances of the legal documents
• The bands where you were the only member. If other members remain, ownership passes to an administrator, otherwise to a member.

What is kept:

• The messages you sent remain visible to the other person, without your name (“Deleted account”). A conversation with no participant left is deleted.
• The reports you made or received, without naming you, for 12 months at most, for moderation.
• Technical backup copies, temporarily, until they are automatically overwritten.

Laboon offers no paid subscription: there is none to cancel before deleting the account.

8. Minimum age

Laboon is reserved for adults (18 and over). We do not knowingly collect data from minors. If you believe an account belongs to a minor, write to us: we will delete it.

9. Cookies and trackers

The Laboon mobile application does not use cookies. Our website does not use tracking cookies: it measures its audience with a tool that uses neither cookies nor identifiers and cannot recognise you from one visit to the next. No consent banner is therefore needed.

10. Security

Laboon implements appropriate technical and organisational measures to protect your data: encrypted exchanges (HTTPS), encrypted passwords, and access to data restricted account by account.

11. Changes to this policy

Laboon reserves the right to change this policy at any time. Any substantial change will be notified to you by e-mail or by a notification in the application.