NotamePrivacy policy
Last updated: November 6, 2026
This policy explains what personal data the Notame app collects, why, who can see it and how to exercise your rights. It applies to the Notame mobile app and to the notame.app website. In case of discrepancy, the French version prevails.
1. Who is responsible for your data?
Notame is published by Hugo Vaugrenard, a private individual, who is the controller of your personal data.
For any question about your data: support@notame.app.
2. Minimum age
Notame is only for people aged 18 or over. If we learn that an account belongs to a minor, we delete it.
3. What data do we collect?
| Category | Data | Source |
|---|---|---|
| Account | Email address, password (stored only in hashed form, never in plain text), email verification status. | You |
| Sign in with Google (if you choose it) | Your Google account ID, first name, last name, email address and its verification status, sent by Google in an ID token. This token may also contain a link to your Google photo, which Notame does not use. | |
| Profile | First name, last name and, if you provide them: country, gender, profile photo. | You |
| Reviews you write | Rating from 0 to 5, comment (up to 1,000 characters), optional photo, assessment of personality traits of the person rated, date. | You |
| Information produced about you | Reviews received, average rating and its history, place in the leaderboard, personality profile (see section 6). | Other members and automatic calculation |
| Likes | Reviews you liked. | You |
| Notifications | Your phone’s notification token, app language. | Your phone |
| Technical data | IP address and device type linked to your sign-in session, sign-in dates. | Your phone |
| Support and reports | Your name, your email address, the content of your message or report, and the reported review. | You |
Notame shows no ads and uses no analytics or advertising trackers.
4. Why do we use your data?
| Purpose | Legal basis |
|---|---|
| Create your account, sign you in (including with Google, if you choose it), secure access with codes sent by email. | Performance of the service you request (contract) |
| Display your profile, publish and display reviews, calculate ratings, the leaderboard and personality profiles. | Performance of the service you request (contract) |
| Send you account emails: codes, email address change, deletion confirmation. | Performance of the service you request (contract) |
| Notify you when you receive a review. | Your consent, which you can withdraw at any time in the app or phone settings |
| Protect members and the service: limit sign-in attempts, prevent abuse, handle review reports. | Legitimate interest |
| Answer the messages you send to support. | Legitimate interest |
5. What other members can see
Notame is a network between members. All signed-in members can see:
- your first name, last name, photo, country and gender; you can be found by searching for your first or last name;
- your average rating, how it changes and, once you have received 10 reviews, your place in the leaderboard;
- the reviews you received and your personality profile;
- the reviews you wrote. Reviews are not anonymous: the person rated and other members can see who wrote them.
Photos (profile and reviews) are stored with Cloudflare R2 and displayed through a web link: anyone who has this link can see the photo.
Your password, your sign-in and notification tokens and your technical data are never visible to other members.
6. Personality profile
When a member writes a review, they can assess personality traits of the person rated (low, neutral, high or “I don’t know”). Notame automatically combines the assessments of several members to calculate your personality profile, which is recalculated every time a review is added, edited or deleted.
This profile reflects how other members see you. It is not a diagnosis, and it does not lead to any decision that would produce legal effects concerning you or similarly significantly affect you.
You can object to this processing by writing to support@notame.app, or delete your account at any time.
7. Who receives your data?
Your data is never sold. Apart from other members (see section 5), only the publisher and the following service providers have access to it, solely to run the service:
- Cloudflare (United States): secure connection between the app and the server (IP address), photo storage (Cloudflare R2, in the European Union) and hosting of this website.
- Resend (United States): sending emails (email address and email content).
- Expo (United States) and Google Firebase Cloud Messaging (United States): delivering notifications (notification token and notification content).
- Google: sign in with Google, only if you choose it.
The app server and the database are hosted in France. Your data may also be disclosed to authorities where required by law.
8. Transfers outside the European Union
Some providers are based in the United States. These transfers are covered by the safeguards provided by the GDPR: the European Commission’s adequacy decision for the EU–US Data Privacy Framework, or the European Commission’s standard contractual clauses.
9. How long do we keep your data?
| Data | Retention |
|---|---|
| Account, profile, photos, reviews written and received, likes, ratings, personality profile | Until you delete your account |
| Sign-in session (IP address, device) | Valid for 7 days without using the app, deleted when you sign out or delete your account |
| Codes sent by email | Valid for 5 minutes, single use |
| Notification token | Until you sign out, turn off notifications or delete your account |
| Messages sent to support and reports | 1 year after the last exchange |
| Database backups | Deleted data may remain in them for up to 30 days |
10. Deleting your account
You can delete your account at any time from the app. Deletion is immediate and permanent: it erases your profile, your photo, the reviews you wrote (they no longer count in averages), the reviews you received, your likes and your personality profile. The steps are described on the Delete my account page.
11. Security
- Communications between the app and the server are encrypted (HTTPS).
- Passwords are stored only in hashed form.
- Codes sent by email are single use, expire after 5 minutes and only allow a limited number of attempts.
- Sensitive actions (changing your email address, setting a password for a Google account, deleting your account) are confirmed by a code sent to your email address.
- On your phone, your session is kept in the system’s secure storage.
12. Phone permissions, cookies and trackers
- Photos: the app asks for access to your photos only when you choose a profile or review photo. Only the chosen photo is sent.
- Notifications: optional, you can turn them off in the app or phone settings.
- The notame.app website uses no cookies or trackers. The app only stores your sign-in session and your language preference on your phone.
13. Your rights
Under the GDPR and the French Data Protection Act, you have the following rights over your data:
- access: get a copy of your data;
- rectification: correct your data (your profile can be edited directly in the app);
- erasure: delete your account and your data;
- restriction of and objection to processing;
- portability: receive your data in a machine-readable format;
- set instructions on what happens to your data after your death.
To exercise these rights, write to support@notame.app from your account’s email address. We reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
14. Changes to this policy
This policy may change, for example when the app changes. The date of the last update is shown at the top of the page. If there is a significant change, we will let you know in the app or by email.