Back to home

Privacy Policy

Last updated: April 8, 2026 — Version 1.0

1. Data Controller

The personal data collected through the application 12 Testers - App community is processed by:

Indevo

SIRET: 93806683400020

Data Protection Contact: [email protected]

2. Data Collected

2.1 Data you provide

  • Account information: Email address, display name, profile picture (via Google Sign-In).
  • App information: When publishing a Campaign, the app name, developer name, Google Play Store link, app icon URL, description, and testing instructions.

2.2 Data collected automatically

  • Device information: Device type, operating system version, unique device identifier (for push notifications).
  • Usage data: App usage patterns, features accessed, test completion status.
  • Connection logs: IP address, timestamps, for security and fraud prevention.

2.3 Data from third parties

  • Google Sign-In: Basic profile information (name, email, profile photo) when you authenticate.
  • Google AdMob: Advertising identifiers for personalized ads (subject to your consent).

3. Purpose of Data Processing

Your data is processed for the following purposes:

  • Account management: Creating and managing your user account (legal basis: contract performance).
  • Service delivery: Enabling Campaign creation, testing features, Cheese transactions (legal basis: contract performance).
  • Push notifications: Sending you updates about your Campaigns and test requests (legal basis: legitimate interest, with opt-out available).
  • Security: Detecting and preventing fraud, abuse, and unauthorized access (legal basis: legitimate interest).
  • Advertising: Displaying relevant ads via Google AdMob (legal basis: consent).
  • Analytics: Understanding app usage to improve the service (legal basis: legitimate interest).

4. Data Retention

  • Active account: Data is retained for the duration of your account activity.
  • Inactive account: Data is retained for up to 3 years after last activity, then automatically deleted.
  • Deleted account: Personal data is deleted within 30 days of account deletion. Some data may be retained longer for legal obligations (e.g., transaction records for tax purposes).
  • Connection logs: Retained for 12 months as required by French law.

5. Data Sharing

We do not sell your personal data. Your data may be shared with:

  • Google: For authentication (Google Sign-In), push notifications (Firebase Cloud Messaging), and advertising (AdMob).
  • Hosting provider: Our servers are hosted by IONOS SE (Germany, EU), GDPR compliant.
  • Other Users: Your display name, profile picture, and Campaign information are visible to other Users of the App.

6. International Data Transfers

Some of our service providers (Google) may process data outside the European Economic Area. These transfers are protected by Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring an adequate level of data protection.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • HTTPS encryption for all data in transit.
  • Secure password hashing (bcrypt).
  • JWT-based authentication with token rotation.
  • Regular security audits and updates.
  • Access controls limiting data access to authorized personnel.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and French data protection law (Loi Informatique et Libertes), you have the following rights:

  • Right of access: Obtain a copy of your personal data.
  • Right to rectification: Correct inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to data processing based on legitimate interest.
  • Right to restrict processing: Limit how your data is used.
  • Right to withdraw consent: For consent-based processing (e.g., advertising).

To exercise these rights, contact us at: [email protected]

You also have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr

9. Cookies and Trackers

As a mobile application, 12 Testers does not use browser cookies. However, the App uses:

  • Local storage: To save your authentication state and preferences.
  • Advertising identifiers: Used by Google AdMob, subject to your consent via the App Tracking Transparency prompt.
  • Firebase Analytics: For anonymous usage analytics, with no personally identifiable information collected.

10. Minors

The App is intended for users aged 18 and over, or 16 and over with parental consent. We do not knowingly collect data from children under 16. If you believe we have collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be communicated via in-app notification. Continued use of the App after modifications constitutes acceptance of the updated policy.

12. Contact

For any questions regarding this Privacy Policy or your personal data, please contact us at: [email protected]