Dernière mise à jour : 4 juin 2026
Contents
1. WHO WE ARE
Grid Team is a mobile app published by Milan Labs, a French micro-business owned by Thomas Pensec.
- Data Controller: Thomas Pensec (Milan Labs)
- Address: France
- Contact email: contact@gridteam.app
- Website: gridteam.app
We're a team of one. No investors, no media group behind us. This policy reflects our genuine commitment to your privacy.
2. WHAT DATA WE COLLECT
| Data | When | Why |
|---|---|---|
| Sign-up | Authentication + transactional notifications | |
| Name / Nickname | Sign-up | Display in leaderboards and leagues |
| Predictions | Each GP | Core of the service — without this, the app doesn't work |
| Pit Wall messages | During races | Real-time community chat |
| Language preferences | Settings | Localize UI |
| Favorite sport (F1 / MotoGP) | Onboarding | Personalize content |
|---|
| Data | Source | Why |
|---|---|---|
| Ad identifier (IDFA / GAID) | Your phone OS | Native ads via AdMob (optional, opt-out) |
| Anonymized crash logs | Sentry | Debug without identifying you |
| Anonymous usage stats | Server logs | Understand which features work |
| IP address | Connection | Security (anti-spam) — anonymized after 30 days |
| Device type + OS | OS | Adapt performance |
|---|
- ❌ Precise location
- ❌ Contacts
- ❌ Photos / videos
- ❌ Microphone / camera
- ❌ Browsing history outside the app
- ❌ Behavioral data for ad profiling
3. WHY WE PROCESS YOUR DATA
GDPR Article 6 legal bases:
| Purpose | Legal basis | Data |
|---|---|---|
| Provide the service (auth, picks, leagues, standings) | Contract performance (6.1.b) | Email, name, picks |
| Transactional comm | Contract performance | |
| Security (anti-spam, anti-abuse) | Legitimate interest (6.1.f) | IP, logs |
| Personalized AdMob ads | Consent (6.1.a) | IDFA / GAID — you can refuse via UMP on launch |
| Contextual ads (no tracking) | Legitimate interest | No personal data |
| Marketing comm (newsletter) | Consent | Email — explicit opt-in |
|---|
5. HOW LONG WE KEEP YOUR DATA
| Data | Duration |
|---|---|
| Active account | As long as you use it |
| Inactive account | Auto-deletion after 24 months of inactivity |
| Predictions | Kept while account exists (deleted with it) |
| Pit Wall messages | 90 days then archived anonymized |
| Server logs | 30 days then deleted |
| Crash logs | 90 days then deleted |
| Newsletter email opt-in | Until you unsubscribe |
|---|
6. YOUR RIGHTS (GDPR)
You have the right to:
- ✅ Access your data (full JSON export on request)
- ✅ Rectify inaccurate data (editable in app)
- ✅ Delete your account and all data (button in Settings → "Delete account" → or email contact@gridteam.app)
- ✅ Restrict processing (temporarily suspend)
- ✅ Receive your data in portable format (JSON)
- ✅ Object to processing based on legitimate interest
- ✅ Withdraw consent for personalized ads anytime (Settings → Privacy)
- ✅ Complain to the French data authority CNIL (cnil.fr) or your local EU equivalent
To exercise these rights: contact@gridteam.app — reply within 30 days max.
7. DATA SECURITY
We implement technical and organizational measures:
- 🔒 Encryption in transit: HTTPS everywhere, TLS 1.3
- 🔒 Encryption at rest: Supabase DB encrypted
- 🔒 Authentication: Secure JWT tokens, time-limited sessions
- 🔒 Passwords: bcrypt hashed (never stored in plain text)
- 🔒 Internal access: Minimal — only the solo dev (Thomas) accesses prod DB, read-only except critical interventions
- 🔒 Backups: Daily, encrypted, 30-day retention
In case of a data breach affecting your rights, we'll notify you within 72 hours (GDPR Article 33).
8. MINORS
Grid Team is intended for users 13 years and older.
- If you're under 13, don't create an account. If we find a child account, we delete it.
- If you're a minor in France (under 15 for digital consent), sign-up requires parental approval.
9. INTERNATIONAL TRANSFERS
Some processors (Resend, AdMob, Sentry US) may process data outside the EU. Guarantees:
- EU Standard Contractual Clauses approved by the European Commission
- Transfer Impact Assessment for each service
10. ADMOB NATIVE ADS — HOW IT WORKS
The app is funded by native ads (cards that look like articles, frequency-capped to 1 ad max per 5 cards).
- With your consent (UMP popup on first launch) → personalized AdMob ads using your IDFA / GAID
- Without consent → contextual ads (no tracking, based only on app content)
You can change your choice anytime: Settings → Privacy → Ad personalization.
12. POLICY CHANGES
If we change this policy, we notify you:
- By email (if the change is significant)
- Via an in-app banner on next launch
- By updating the "Last updated" date at the top
13. CONTACT
For any question, request, or complaint:
- 📧 Email: contact@gridteam.app
- 📬 Response: Within 30 days (usually faster)
- 🇪🇺 Complaints: Your local EU data protection authority (or CNIL in France)
Version 1.0 — 4 juin 2026 · Made with 🏁 in France