Courtesy translation — the French version prevails. See the original French privacy policy.
LASTLINE is built to keep your information on your phone. Some of it does leave, so you can get it back if you change devices. This document states exactly which, why, and what you can demand.
It covers the lastline.fr website and the LASTLINE mobile app.
1. Who is responsible
Data controller: LASTLINE PPS FR (sole proprietorship), Immeuble les Twins 2, 885 avenue du Docteur Julien Lefebvre, 06270 Villeneuve-Loubet, France.
Contact: support@lastline.fr.
2. The lastline.fr website
The website is a static showcase site. It creates no account, offers no form, and collects no personal data directly. No tracking cookie, no third-party analytics (no Google Analytics, no advertising pixel). Fonts are hosted on our own server and trigger no third-party call.
"See on Amazon" links redirect you to a partner merchant, which then sets its own cookies and applies its own policy. We receive only aggregated, anonymous statistics from Amazon — never your identity or the details of your purchases.
Technical logs from our host OVH SAS (2 rue Kellermann, 59100 Roubaix) temporarily retain connection data for security purposes.
3. The app — what never leaves your phone
This information is never sent to our servers, whatever your settings:
- your medical profile: blood type, allergies, treatments, conditions;
- the health tags you attach to your relatives;
- the photos of your medical and identity documents;
- real-time family location sharing;
- your location consents, which never transfer from one device to another.
If you lose your phone without a backup, this information is lost. That is the price of the guarantee, and we accept it.
4. The app — what is saved to your account
If you create an account, we save, so you can find everything again on another device:
- your account: email address (magic-link sign-in, no password), name, phone number;
- your preparedness: inventory, missions, progress, 72 h bag, water points, evacuation plan, pets, alert settings;
- your home address and its coordinates — a dedicated setting, on by default, which you can switch off at any time;
- the composition of your household and circle, including their contact details (see §5);
- your photos of your profile, relatives, pets and items, in a private space accessible to you alone.
Legal basis: performance of the service you request (art. 6.1.b GDPR). Retention: for as long as your account exists; deleting it erases everything, immediately.
5. Your relatives' data
When you add someone to your household or circle, we store their contact details: first name, last name, phone number(s), email(s), city, photo.
That person is not our user. They have signed nothing with us. We process this data on the basis of legitimate interest (art. 6.1.f): allowing someone to reach their relatives in an emergency — which also serves the interest of the person being reached, who can be warned and help.
This data is never analysed, exploited commercially, or passed to anyone. It is kept for as long as the account that entered it exists, and erased with it. Health tags you may attach to a person are never stored.
Are you one of these people? You can ask what is stored about you, have it corrected, have it erased, or object to the processing. Write to support@lastline.fr — we handle your request even if you do not use the app.
6. Alerts and emergencies
Hazard alerts (earthquake, flood, fire, weather warnings): only if you turn them on. We transmit an approximate geographic cell of about 40 km — never your precise location, with no journey history. The alert log is purged automatically after 12 months.
SOS: when you trigger an alert, your location and its timestamp are sent to the people you designated.
Location sharing: with consent, given on the device concerned. These positions are deleted automatically after 48 hours.
7. Who else sees this data
- Supabase — database, storage and server functions. Data hosted in France (Paris region).
- Expo — app updates and push notification delivery (United States).
- Apple — distribution and notifications (United States).
No advertising tracker, no third-party analytics, no reselling of data — we do not collect it for that.
8. Security — and what we do not guarantee
Your data is partitioned per account and encrypted in transit.
It is not encrypted at rest on our servers: our technical administrator can access it, and a breach of the database would expose it. We would rather write this than let you believe in a protection we have not yet put in place. Encryption at rest is work in progress.
9. Your rights
You have the rights of access, rectification, erasure, portability, objection and restriction (art. 15 to 21 GDPR).
In the app: Settings → My data & rights lets you export your data in a readable file, and erase everything — on the device and on our servers.
In writing: support@lastline.fr. You may also lodge a complaint with the French data protection authority, the CNIL, 3 place de Fontenoy, 75007 Paris.
10. Changes
Any change to this policy is published here with its date. Changes that broaden what we collect are signalled in the app.