Skip to main content

Your rights over your data

Under the GDPR you have a set of rights over the personal data we hold about you. This page says what each one means here, and how to use it.

Two of them you exercise yourself, in the app, in minutes. Access and erasure both live in Settings → Your data and need nobody's approval.

For the rest: privacy@alpik.fr, from the email address on your account. Once requested, we will respond to you within one month.

Access — Art. 15​

You can ask for a copy of the personal data we hold about you, and for information about why we hold it, who it has been shared with, and how long we keep it.

In practice that means your account details, your outings and tracks, your contacts and sharing relationships, your messages, your registered tags, and the technical data associated with your devices.

Do this one yourself

Settings → Your data → What do you know about me. You get the whole thing as a zip file, usually within minutes, with the Art. 15 information about purposes, recipients and retention written out inside it. One copy every 30 days.

See What do you know about me.

Rectification — Art. 16​

You can have inaccurate data corrected.

Your name is the one worth keeping accurate, because it is what your contacts and, potentially, a rescue team see.

Erasure — Art. 17​

You can delete your data. This is covered in detail in Delete your account and your data.

Do this one yourself too

Settings → Your data → Delete my account. It runs in seconds, nobody has to approve it — and for the same reason, nothing can stop it once it starts.

Three honest limits:

  • The security trail is kept, indefinitely and by design: timestamps, event names, identifiers and IP addresses, never content or positions. It is what makes the deletion itself provable, and no account in the platform can alter it. It is the only category that survives.
  • While an SOS is raised, or an outing you own is active and shared, deletion is refused rather than carried out — taking tracking away from people who are relying on it is not something a delete button should be able to do. Clear or end it, then delete.
  • Backups are not rewritten on request. Deleted data persists in backups until those backups expire on their normal cycle, and is not restored into service.

Restriction — Art. 18​

You can ask us to stop processing your data while a dispute about its accuracy or lawfulness is resolved. The data is retained but not used.

Portability — Art. 20​

You can have the data you provided to us in a structured, machine-readable format — principally your positions, tracks and outing plans.

The same archive answers this right. The copy you get from Settings → Your data → What do you know about me carries full-fidelity JSON and GeoJSON alongside the readable document, plus every GPX file you imported returned byte for byte as you gave it to us. Nothing is reduced or rounded in those files.

Your GPX route files are already yours regardless: they are on your phone, in a standard format, and you can copy them off it at any time without asking anyone.

Objection — Art. 21​

You can object to processing based on our legitimate interests.

The processing based on legitimate interest here is security, abuse prevention, diagnostics and the tag sighting relay. Objections are assessed individually: we weigh your objection against the interests relied on, and we tell you the outcome and the reasoning.

Two things you can stop yourself, immediately

You do not need to write to anyone to stop the two most significant kinds of processing:

  • Stop the outing. Position recording and sharing stop at once.
  • Do not start one. Nothing is recorded at all between outings.

Where processing is based on your consent, you can withdraw it at any time. That does not affect processing carried out before you withdrew it.

The system-level permissions you granted — location, notifications, Bluetooth — can be withdrawn at any time in your phone's settings. The app will keep working and will do less; what stops working is described in Permissions.

Complaining​

If you are not satisfied with how we have handled a request, you can complain to a supervisory authority.

In France this is the CNIL — https://www.cnil.fr. If you live elsewhere in the EU, you may complain to your own national authority.

You do not have to raise it with us first, although we would rather you did, and we would rather fix it.

Rights of people who are not our users​

Two cases that come up here and deserve an explicit answer.

Someone who carries a Jikita tag that is heard by other people's phones has the same rights over the sightings of that tag. Contact privacy@alpik.fr.

Someone named as a participant in another user's outing plan, without having an account themselves, has rights over that mention. Contact us and we will handle it.

Contact​

Data protection: privacy@alpik.fr Support: contact@alpik.fr