Privacy Policy

Effective date: March 23, 2026

OMNIA FLUIDES, SAS, registered at 12 Rue Albert Einstein, 77420 Champs-sur-Marne, France (RCS Meaux 880 596 945), is the data controller for the PhotoReport service (iOS application, web dashboard, shared report viewer, and marketing website). This Privacy Policy explains how we collect and process your personal data in accordance with the GDPR and applicable French data protection legislation.

1. Data We Collect

We collect the following categories of data:

  • Account: email address, name, sign-in method (email/password, Apple, Google), subscription tier
  • Projects: plans (PDF), annotations, photos, videos, audio recordings, collaboration data (invitations, members, roles)
  • Usage: storage used, push notification tokens, notification preferences
  • Shared reports: hashed passwords, download counters, expiration dates
  • Marketing website: preferences (language, theme, cookie consent), contact form submissions (name, email, message)

We process your data for: account management, project storage and synchronisation, collaboration, report sharing, and subscription management — based on performance of contract. Push notifications and display preferences are based on legitimate interest. The contact form is based on your consent. We do not engage in automated decision-making or profiling.

Where a Teams subscription is held by a business, OMNIA FLUIDES may act as a data processor under the GDPR for project content. A Data Processing Agreement (DPA) is available on request at contact@photoreport.app.

3. Third-Party Services

We use the following third-party services:

  • Firebase / Google Cloud Platform (Google Ireland Limited): authentication, database, file storage, server-side processing, push notifications — Privacy Policy
  • Apple / Google OAuth: sign-in via Apple or Google. Only your user ID, email, and name (if authorised) are transmitted to us
  • Apple App Store: subscription billing via In-App Purchase. We do not collect any payment data
  • Subscription management provider: entitlement and subscription plan management
  • Email delivery provider (marketing website only): delivery of messages submitted through the contact form

4. International Transfers

Your data may be transferred and processed outside the European Economic Area via our technical service providers. These transfers are governed by the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.

5. Data Retention

Account and project data are retained until deleted by you. Deleted data is kept in a recoverable state for 30 days before permanent deletion. Shared reports and expired invitations are automatically deleted. Contact form data is retained for 12 months, then deleted. Local preferences (language, theme) are stored in your browser.

6. Security

We protect your data through encryption in transit (HTTPS) and at rest, password hashing, time-limited access tokens, database security rules, and brute-force protection.

7. Your Rights Under the GDPR

You have the following rights regarding your personal data:

  • Access: obtain a copy of your data
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data
  • Restriction: limit processing in certain circumstances
  • Portability: receive your data in a structured format (data export available in the application)
  • Objection: object to processing based on legitimate interest
  • Withdraw consent: withdraw your consent at any time

To exercise these rights, contact us at: contact@photoreport.app. We may need to verify your identity before fulfilling your request. We will respond within one month; this period may be extended by two additional months for complex or numerous requests, in which case we will inform you within the first month.

8. Changes and Contact

We may update this policy at any time. Where changes are material, we will notify you by email or through the application. You can contact us at:

OMNIA FLUIDES — 12 Rue Albert Einstein, 77420 Champs-sur-Marne, France — contact@photoreport.app

If you believe your rights have not been respected, you may lodge a complaint with the CNIL: https://www.cnil.fr — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.