Privacy Policy

Effective date: February 14, 2026

OMNIA FLUIDES, SAS, registered at 12 Rue Albert Einstein, 77420 Champs-sur-Marne, France (RCS Meaux 880 596 945), is the data controller for the PhotoReport service (iOS application, web dashboard, shared report viewer, and marketing website). This Privacy Policy explains how we collect and process your personal data in accordance with the GDPR and applicable French data protection legislation.

1. Data We Collect

We collect the following categories of data:

  • Account: email address, name, sign-in method (email/password, Apple, Google), subscription tier
  • Projects: plans (PDF), annotations, photos, videos, audio recordings, collaboration data (invitations, members, roles)
  • Usage: storage used, push notification tokens, notification preferences
  • Shared reports: hashed passwords, download counters, expiration dates
  • Marketing website: preferences (language, theme, cookie consent), contact form submissions (name, email, message)

We process your data for: account management, project storage and synchronisation, collaboration, report sharing, and subscription management — based on performance of contract. Push notifications and display preferences are based on legitimate interest. The contact form is based on your consent.

Where a Teams subscription is held by a business, OMNIA FLUIDES acts as a data processor under the GDPR for project content. A Data Processing Agreement (DPA) is available on request at contact@omniafluides.com.

3. Third-Party Services

We use the following third-party services:

  • Firebase / Google Cloud Platform (Google Ireland Limited): authentication, database, file storage, server-side processing, push notifications — Privacy Policy
  • Apple / Google OAuth: sign-in via Apple or Google. Only your user ID, email, and name (if authorised) are transmitted to us
  • Apple App Store: subscription billing. We do not collect any payment data
  • Formspree: processing of the marketing website contact form

4. International Transfers

Your data may be transferred and processed outside the European Economic Area via Google Cloud infrastructure. These transfers are governed by Google’s Data Processing Addendum and the European Commission’s Standard Contractual Clauses (SCCs).

5. Data Retention

Account and project data are retained until deleted by you. Shared reports are automatically deleted upon expiration. Contact form data is retained only as long as necessary to respond to your enquiry. Local preferences (language, theme) are stored in your browser.

6. Security

We protect your data through encryption in transit (HTTPS) and at rest, password hashing, time-limited access tokens, database security rules, and brute-force protection.

7. Your Rights Under the GDPR

You have the following rights regarding your personal data:

  • Access: obtain a copy of your data
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data
  • Restriction: limit processing in certain circumstances
  • Portability: receive your data in a structured format (data export available in the application)
  • Objection: object to processing based on legitimate interest
  • Withdraw consent: withdraw your consent at any time

To exercise these rights, contact us at: contact@omniafluides.com. We will respond within one month.

8. Changes and Contact

We may update this policy at any time. Where changes are material, we will notify you by email or through the application. You can contact us at:

OMNIA FLUIDES — 12 Rue Albert Einstein, 77420 Champs-sur-Marne, France — contact@omniafluides.com

If you believe your rights have not been respected, you may lodge a complaint with the CNIL: https://www.cnil.fr — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.