Privacy Policy
Plain-language summary: We have no user database. Your GPS position is used only locally on your phone to help you follow the route — it is never sent to our servers. We never sell data, never retarget you, never build audiences or "lookalike audiences", and we show no advertising. We use only aggregated, anonymized usage statistics to see where users drop off in the route and improve future versions.
1. Introduction
This Privacy Policy explains how Unicorn United ("we", "us"), publisher of the Big Paris Tour and Secret Paris apps (the "Apps"), processes data when you use the Apps and the ParisVisitsAndTours.com website. This policy complies with the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and French data protection law.
2. Information We Collect
We apply a strict data minimization principle: we only collect what is strictly necessary for the Apps to function.
| Category | What we collect | Where it's processed |
|---|---|---|
| GPS location | Your device's coordinates, only while actively using a route | Locally, on your phone only |
| Usage statistics | Route steps reached, drop-off points, app version, general device type — aggregated and non-identifying | Usage analytics tool, aggregated data |
| Contact form | Name, email, message — only if you voluntarily write to us | Our team's mailbox |
| Purchase | Processed by the App Store, Google Play, or our payment provider — we never receive or store your payment details | Purchase platform / payment provider, outside our control |
We require no account creation to use the Apps.
3. Location Data (GPS) — On-Device Processing Only
- Your GPS position is used exclusively locally, on your own device, to display your position on the map and guide you toward the next stop.
- We never transmit your position to our servers and keep no history of your movements, anywhere.
- Location access is requested only when you start a route; you can revoke it at any time in your phone's settings.
- If you revoke this permission, on-map tracking will not work correctly, but the route's stories and content remain accessible.
4. No Account, No User Database
We do not create, operate, or maintain any user account database. No identity, profile, or visit history tied to a person is stored on our servers.
5. Aggregated Usage Statistics
We measure, in aggregated and anonymized form, at which steps of a route users stop, solely to improve the content and pacing of future routes. These statistics cannot identify you individually and are never cross-referenced with your precise GPS position or used for advertising purposes.
6. No Advertising, No Ad Partners
The Apps display no advertising and work with no advertising network (no Google AdMob or equivalent). No data is transmitted to any advertiser, ad network, or marketing partner. This is precisely what the Apps' purchase price is designed to guarantee — see the "Our Commitment" section of our Terms of Service.
7. No Selling, No Retargeting, No Audiences
We never sell your data, to anyone. We do not engage in advertising retargeting, do not build custom or "lookalike" audiences, and do not share your data with any partner for marketing or data-brokerage purposes.
8. Technical Processors
A deliberately small number of technical providers keep the site and Apps running: our web host, our transactional email tool (for the contact form), and the platform through which purchases are made (App Store, Google Play, or our online payment provider). These providers act strictly as data processors under GDPR, under contract, and do not use your data for any purpose of their own.
9. Data Retention
Your GPS position is never stored: it is processed in real time on your device and then discarded. Messages sent via the contact form are kept for as long as needed to handle your request, then archived or deleted within a reasonable period. Aggregated usage statistics are kept in a form that cannot identify you.
10. Your GDPR Rights
Under GDPR, you have the following rights over your personal data: access, rectification, erasure, restriction of processing, portability, and objection. Since we hold no account or user profile, these rights mainly apply to data you voluntarily send us (e.g. via the contact form). To exercise a right, write to us at the address in Section 15. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés) — www.cnil.fr — or with your own country's data protection authority.
11. Children's Privacy
The Apps are not specifically directed at children under 15 (the digital age of consent in France) and we do not knowingly collect personal data from them. The Secret Paris treasure hunt can be enjoyed as a family, under adult supervision.
12. Data Security
We implement reasonable technical and organizational measures, proportionate to the very limited volume of data we process. No method of electronic transmission or storage is 100% secure.
13. International Data Transfers
Our technical providers (hosting, transactional email) are selected primarily within the European Union. Should any provider process data outside the EU, that transfer would be governed by appropriate GDPR safeguards (standard contractual clauses or an adequacy decision).
14. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by a revised "last updated" date at the top of this page.
15. Contact Us and Supervisory Authority
Unicorn United
6 rue d'Aramillé, 75017 Paris, France
Email: contact@unicorn-united.com
Competent supervisory authority: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, 75007 Paris, France — www.cnil.fr. EU residents outside France may also contact their local data protection authority.