Privacy — À Deux Pas | Jack of All Trades

In short

À Deux Pas shows you what to do right now, close by, in Paris — away from the usual tourist listings.

To do that, the application needs to know where you are. Here is the essential, set out section by section below:

The event catalogue is downloaded onto your phone. Distance sorting is computed on the device: your position is not sent to any server to be matched against the catalogue.
One exception, and it matters: to display the name of the neighbourhood or street you are in, your coordinates are sent to the Base Adresse Nationale, the French state address service.
Your GPS position is never passed to advertisers, or to any ad network.
You can refuse location access. The application remains fully usable: you then pick a starting point by hand.
No account, no password, no email address, no payment. The application is free and stays free in its current version.

This summary is provided for readability and does not replace the sections that follow, which alone are binding. This English version is provided for convenience. In the event of any discrepancy, the French version prevails.

Data controller

The data controller is Jonathan Marcel MONDAUT — Entrepreneur Individuel (EI), 3 avenue de la République, APT G32, 92230 Gennevilliers, France, SIRET 109 251 801 00014. Full details in the legal notice.

For any question about your personal data, or to exercise your rights: mondautjonathan@gmail.com — +33 7 69 32 01 82.

The publisher is not required to appoint a Data Protection Officer under article 37 GDPR; the address above serves as the single point of contact.

Scope

This document covers only the À Deux Pas mobile application, distributed on Google Play under the identifier com.jackofalltrades.adeuxpas.

The site jack-of-all-trades.dev and the publisher's other applications are governed by the general privacy policy. On any point specific to À Deux Pas, this document prevails.

It does not cover processing carried out by Google Play on its own account — user account, installation, download history — for which Google is an independent controller.

Your location

The application requests precise and approximate location access (the Android ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION permissions), only while it is open and on screen.

That position serves one purpose: computing the distance between you and the events in the catalogue, so the feed can be ordered by proximity and show “300 m away” rather than an unordered list.

This computation happens on your device, against a database downloaded in advance. Your coordinates are not sent to the publisher, are not stored on any server, and are not used to build any record of your movements.

No background location. The ACCESS_BACKGROUND_LOCATION permission is not requested, and the application does not track you when it is closed.
Refusing is designed for and costs you no feature: you pick a starting point in the address selector, and the feed is ordered from there.
The permission can be revoked at any time in the system settings, without uninstalling the application.
The last known position may be held on the device for the duration of the session, to avoid querying the GPS on every screen. It is discarded when the application closes.

Your GPS position is disclosed to no ad network. The only transmission of coordinates off the device is the one described in the next section, to a French public service.

Place names and address search

To name where you are — “11th arrondissement” rather than two numbers — and to power the address search in the starting-point selector, the application queries the Base Adresse Nationale (BAN), the reference address service of the French state, through its public interface api-adresse.data.gouv.fr.

Two cases, and only two, trigger a call:

Reverse geocoding — your GPS coordinates are sent, and the label of the matching address or municipality comes back.
Search — the text you type into the address selector is sent, and suggestions come back.

These calls carry no account identifier, no advertising identifier and no device identifier: the BAN receives a query and the IP address it arrives from, nothing more. The service is operated by the French administration and falls under the data.gouv.fr personal data policy. The publisher receives no data back from this service beyond the answer shown on screen. If the service is unavailable, the application falls back on its bundled directory: a geocoder outage never prevents you from using the application.

Data kept on your device

The following is stored locally, in the application's private storage. It is not transmitted to the publisher, and it is destroyed when you clear the application's data or uninstall it:

The downloaded event catalogue, in a local SQLite database, so the application works offline.
The events you save, your filters and your display preferences.
Your choice about personalised advertising, and the date of that choice.
The starting point you picked manually, if any.
Catalogue images cached to avoid downloading them again.

The publisher makes no backup of any of this. If you change phone, your saved events do not follow you — that is the accepted trade-off of an application with no account.

Catalogue downloads

The event catalogue and its images are downloaded over HTTPS from the publisher's delivery infrastructure.

As with any network connection, the responding server sees your device's IP address, the timestamp and the resource requested. These technical logs serve security and service reliability, and are not used to profile you.

The catalogue request does not contain your position: the catalogue, or an update to it, comes down to the device, and the sorting happens locally afterwards.

Advertising

The application is free and funded by advertising, delivered by Google AdMob. Ad slots are always labelled as such.

To deliver those ads, Google AdMob processes the device's advertising identifier (Android Advertising ID), the IP address — from which it infers an approximate city- or region-level location itself — and interactions with the ads.

In the European Economic Area, the United Kingdom and Switzerland, no personalised advertising is served and no advertising identifier is shared before your consent is collected through Google's User Messaging Platform (UMP), which is compliant with the IAB Transparency and Consent Framework. That form is shown on first launch.

Where consent is absent, or for as long as you have not answered, only non-personalised or contextual advertising is served: it rests on no profile and is not used to follow you from one application to another.

Declining is as easy as accepting, and the application is otherwise identical beyond the personalised nature of the ads.
You can change your choice at any time from the “Privacy” screen in the application's settings.
You can also delete or reset the advertising identifier in the Android settings: Settings › Google › Ads.
No GPS-derived location data is passed to Google AdMob. The approximate location the ad network has is the one it infers from the IP address, as for any internet connection.

Notifications

The application may alert you to nearby or upcoming events. The POST_NOTIFICATIONS permission is requested explicitly, and refusing has no effect on the rest of the application.

If you accept, a technical token specific to your installation may be registered with the notification service in order to route messages. That token is not an identity: it is tied to no name, no email address and no account, and it is invalidated on uninstall.

Notifications can be turned off at any time in the system settings or in the application's own.

Analytics

Limited analytics may be carried out to know which screens are used and which features are worth keeping: screens viewed, saving an event, opening directions, sharing.

These events are aggregated and are linked neither to your identity nor to your precise location. Crash and performance reports provided by the platform serve the same reliability purpose.

What the application does not collect

The following list matters as much as the ones above, and binds the publisher in the same way:

No account, login, password, name, postal address or email address.
No banking or payment data: the application offers no in-app purchase, no subscription and no paid tier.
No health, fitness or financial data.
No access to contacts, photos, files, microphone, camera, SMS, or the list of installed applications.
No background location, and no history of your movements.
No sale, rental or transfer of data to third parties for commercial purposes.

Purposes and legal bases

Each processing operation rests on one of the legal bases in article 6(1) GDPR:

Ordering events by distance and naming the place — performance of the contract to supply the service you asked for, article 6(1)(b), after system authorisation for location access.
Address search and reverse geocoding against the BAN — performance of a contract, article 6(1)(b): without that call, the requested feature cannot be delivered.
Personalised advertising and sharing the advertising identifier — consent, article 6(1)(a), collected through UMP and withdrawable at any time.
Non-personalised or contextual advertising — legitimate interest in funding the application, article 6(1)(f), with data access strictly limited to display and frequency capping. Reading or writing information on the device remains subject to consent where article 82 of the French Data Protection Act requires it.
Notifications — consent, article 6(1)(a), given through the system permission.
Analytics, crash reporting, security and fraud prevention — legitimate interest, article 6(1)(f).
Responding to your requests and complaints — legitimate interest, article 6(1)(f).

Recipients and processors

Google Ireland Limited / Google LLC — Google AdMob: ad delivery, advertising identifier, IP address, ad interaction data. Privacy policy — how advertising data is used.
Google Ireland Limited / Google LLC — Google Play: application distribution, Android Vitals crash reporting. Independent controller for the user account. Privacy policy.
French administration (DINUM / IGN) — Base Adresse Nationale: geocoding and address search. A public service, queried with no key and no identifier. Information.
Vercel Inc. — hosting of the catalogue delivery infrastructure and connection logs. Privacy policy.
Cloudflare, Inc. — storage of catalogue data and images, network protection. Privacy policy.

Any new third-party library that collects data will be added to this list, and the Play listing's Data safety declaration updated, before the version concerned is published.

Transfers outside the European Union

The Base Adresse Nationale is operated in France; no transfer outside the European Union takes place for geocoding.

The other providers are established in the United States or may transfer data there. Depending on the provider, those transfers rest on the European Commission's adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework where the recipient is certified under it, or otherwise on the standard contractual clauses adopted by the Commission, supplemented by appropriate technical and organisational measures.

A copy of the applicable safeguards can be requested from the contact address.

Retention periods

Data stored on the device (catalogue, saved events, settings, advertising choice) — until you clear the application's data or uninstall it.
Location — held for the session only, never written to a server.
Delivery infrastructure technical logs — 12 months.
Advertising data held by the ad network — per Google's policy, generally 14 months for data linked to an identifier.
Notification token — until notifications are turned off or the application is uninstalled.
Correspondence with the publisher — 3 years from the last exchange.

Your rights

You have the rights of access (art. 15), rectification (art. 16), erasure (art. 17), restriction (art. 18), portability (art. 20) and objection (art. 21), together with the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may also give directions on what happens to your data after your death.

In practice, most of these rights are exercised straight from the device: the data the application keeps being local, clearing the application's data or uninstalling it deletes them immediately and in full. Revoking the location permission or withdrawing advertising consent takes effect at once.

For anything else, write free of charge to mondautjonathan@gmail.com or to the publisher's postal address. A reply is provided within one month, extendable by two months for complex requests. Proof of identity may be requested where there is reasonable doubt.

You may lodge a complaint with the CNIL, the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.

Children

À Deux Pas is not intended for children and is not directed to them. No personal data is knowingly collected from a child below the age of digital consent, which is 15 in France.

Where a user is identified as being below that age, the Tag For Child-Directed Treatment (TFCD) and Tag For Users under the Age of consent (TFUA) settings are passed to the ad network: no persistent advertising identifier is used for targeting, no profile is built, and only contextual, non-personalised ads are served.

If you hold parental authority and believe a child has provided personal data, write to mondautjonathan@gmail.com: it will be deleted without delay.

Google Play rating: Content rating and target audience declared in the Play Console — to be reported here
Families programme: The application is not published in the Google Play “Designed for Families” programme, nor in a category reserved for children.

Security

All of the application's network traffic goes over HTTPS. Locally retained data sits in the application's private storage, isolated from other applications by the operating system.

In the event of a personal data breach, the publisher notifies the CNIL within 72 hours of becoming aware of it, under article 33 GDPR, unless the breach is unlikely to result in a risk to your rights and freedoms. Where the risk is high, affected individuals are informed without undue delay (article 34).

California residents (CCPA / CPRA)

The application is published in French and built for Paris, but remains technically installable elsewhere. This section applies to residents of the State of California.

Categories of personal information collected in the last twelve months: identifiers (advertising identifier, IP address), internet activity information (interactions with the application and with ads), approximate geolocation inferred from the IP address by the ad network, and commercial inferences drawn by it.

The publisher does not sell personal information for monetary consideration. However, sharing the advertising identifier with Google AdMob for cross-context behavioural advertising constitutes a “sale” or “share” under the CCPA as amended by the CPRA.

Do Not Sell or Share My Personal Information — to opt out, open the “Privacy” screen in the application and turn off personalised advertising, or send a request to mondautjonathan@gmail.com stating “Do Not Sell or Share”. Browser opt-out preference signals (Global Privacy Control) are honoured on the publisher's site. You will not be discriminated against for exercising these rights.

Changes

This policy may be updated to reflect changes in processing or in the law. The date of last update appears at the top of the page.

Any material change — in particular the addition of a third-party library that collects data — is notified in the application, and the Google Play listing's Data safety declaration is updated before the version concerned is published.