TerrAddict is a mobile app dedicated to the terrarium-keeping community (reptiles, amphibians, insects, arthropods and other exotic pets). We place great importance on protecting your personal data. We process your data in accordance with Regulation (EU) 2016/679 (GDPR), the amended French Data Protection Act (loi Informatique et Libertés) and the recommendations of the CNIL (the French data protection authority) for mobile apps (2024-2025 updates).
This policy explains what data we collect through the app, why and how, who we share it with, how long we keep it and what your rights are.
1Who is the data controller?
- Data controller: TerrAddict
- Registered office: 8 Rue Pierre Nion 49800 Trélazé, France
- SIRET: Being assigned
- Data protection contact: confidentialite@terraddict.app (or through the in-app form “Contact” → “Privacy”)
2What data do we collect through the app?
Data you provide directly
- Sign-up / profile: username, email, password (hashed), profile picture, bio, town/region (optional)
- For professionals: SIRET / RNA number, phone number, specialty, catalogue (photos, prices, descriptions…)
- Content: photos/videos of animals/terrariums, stories (24h), comments, likes, marketplace listings, chat
- Personal animal profiles (Premium)
Data collected automatically by the app
- Technical identifiers: IP address, device ID (IDFV/iOS or Android ID), OS version, app version, screen resolution
- Usage data: date/time of login, pages/features viewed, time spent, crashes
- If you enable the feature: precise or approximate location (interactive marketplace map)
- Permissions you explicitly grant:
- Access to the camera / photo library → to post photos/videos
- Push notifications → for likes, comments, messages, news (you can turn them off at any time in your OS settings)
- Location → only for the marketplace map (granular consent requested on first use)
Payment data
For Premium (€2.99) / Pro (€9.99) subscriptions, processing is carried out exclusively by Apple In-App Purchase / Google Play Billing. We neither store nor see your full bank details.
Sensitive data
We do not ask for or collect health data, ethnic origin, etc. If you voluntarily publish sensitive information in a description or photo, you do so under your own responsibility.
3Why do we collect this data?
| Purpose | GDPR legal basis | Indicative retention period |
|---|---|---|
| Account creation/management & authentication | Performance of the contract (terms of use) | Life of the account + 12 months after deletion |
| Publishing / displaying content (feed, stories, marketplace) | Consent / performance of the contract | While published + 12 months after deletion |
| Marketplace / chat / interactive map | Performance of the contract + consent (location) | 5 years (limitation period) for transactions |
| Subscriptions & payments | Performance of the contract | Subscription period + 5 years (invoicing) |
| Non-marketing push notifications | Legitimate interest | Life of the account or until withdrawn |
| App improvement, anonymous statistics | Legitimate interest | 13-25 months max (analytics) |
| Security, anti-fraud, moderation | Legitimate interest + legal obligation | 12-24 months |
| Transactional emails (forgotten password, etc.) | Performance of the contract | Life of the account |
| Direct marketing (news, promotions) | Consent | Until consent is withdrawn |
When you first launch the app, a consent screen lets you accept or refuse non-essential trackers and optional permissions (location, push…).
4Who do we share your data with?
- Moderators (employees/contractors under NDA)
- Authorities, upon judicial request
- Other users: according to your visibility settings (public profile, followers-only stories)
- Apple / Google: to comply with their store rules (e.g. App Tracking Transparency on iOS)
We never sell your data to advertising third parties.
5Transfers outside the EU
Most processing takes place in the EU. If a processor is located outside the EU, we rely on standard contractual clauses or an adequacy decision.
6Your rights (GDPR)
- Access, rectification, erasure, restriction, portability
- Objection (direct marketing, profiling)
- Withdrawal of consent (push, location, etc.)
- Post-mortem instructions
Exercise them via confidentialite@terraddict.app or in-app → Settings → Privacy → “My GDPR rights”. We reply within 1 month (extendable by 2 months). Proof of identity may be requested.
7Security
Encryption in transit (HTTPS/TLS), encrypted storage, restricted access, regular app updates. In the event of a breach posing a risk, the CNIL is notified within 72 hours and you are informed directly if necessary.
8Trackers / SDKs / mobile cookies
The app uses analytics and functional trackers. Consent is requested on first launch through a (granular) consent management screen. You can change your choices at any time in Settings → Privacy → “Manage trackers”. Some SDKs (e.g. Firebase Analytics) can be turned off.
9Minors
The app is not intended for people under 16. If we discover data belonging to a minor under 16 without parental consent, we delete it immediately.
10Changes
Significant changes are notified by in-app push or email. Check this page regularly (link in Settings).
Questions? → confidentialite@terraddict.app or through the in-app support chat.
Thank you for your trust in the TerrAddict community!