Privacy Policy

Effective date: September 22, 2025
Product: Gericos BInformed (“the App”)
Owner: Jean-Claude CHRISTOPHE, Gericos (“we”, “us”, “our”)
Contact: jclaude95@gmail.com

This Privacy Policy explains what information we collect when you use the App and our website, how we use and share it, and the choices you have.

1. Information we collect

1.1 Account information

• Email address and an encrypted password when you create an account or sign in.

1.2 Device and push information

• Mobile device identifiers (e.g., device model, OS version).
• Push notification tokens (e.g., Firebase Cloud Messaging “FCM” tokens) that allow us to send notifications to your device.

1.3 Usage and log data

• Basic server logs (IP address, request headers, timestamps, error logs) when you access our API or website.
• Diagnostic information from the App to help us maintain reliability and security.

1.4 Notification payloads

When you or an authorized integration sends a notification through our service, we process the notification payload (title, body, optional URL) to deliver it to your device(s). We do not scan, sell, or share the content of your notifications for advertising.

We do not knowingly collect information from children under 13, and the App is not directed to children.

2. How we use information

• Provide, operate, and maintain the App and push delivery.
• Authenticate users and secure accounts.
• Send notifications you request or authorize.
• Monitor performance, fix bugs, and improve reliability.
• Comply with legal obligations and enforce our Terms.

3. Legal bases (EEA/UK users)

Where GDPR applies, we process personal data on the following bases: Performance of a contract (operate your account, deliver notifications); Legitimate interests (fraud prevention, service improvement); and Consent where required (e.g., enabling push notifications). You can withdraw consent in your device settings for notifications at any time.

4. Sharing and disclosure

We do not sell personal data. We share information only with:

• Service providers acting on our behalf (e.g., Google Firebase for push delivery, hosting providers). These providers are bound by contractual obligations to protect your data and use it only as instructed.
• Authorities if required by law or to protect rights, property, or safety.
• Successors in a merger, acquisition, or asset sale, where permitted by law and subject to safeguards.

5. Data retention

• Account data is retained while your account is active.
• Push tokens are retained while your device remains registered.
• Notification payloads may be cached briefly for delivery and troubleshooting, then deleted or anonymized.
• Logs are kept for a limited period for security and operations, then deleted or aggregated.

You can request deletion of your account; see Your choices below.

6. Security

We use administrative, technical, and organizational measures to protect personal data, including encryption in transit (HTTPS). No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. International transfers

If we transfer data outside your region (e.g., to the United States), we implement appropriate safeguards (such as standard contractual clauses) as required by law.

8. Your choices and rights

• Notifications: enable/disable in your device settings or app preferences.
• Access & deletion: contact us to request a copy of your data or deletion of your account.
• EEA/UK rights: you may have rights to access, rectify, erase, restrict processing, object, or data portability. You also have the right to lodge a complaint with your local supervisory authority.

To exercise your rights, contact us at jclaude95@gmail.com.

9. Third-party services

The App uses third-party services, which may collect information according to their own policies. Key providers include: Google Firebase (Cloud Messaging, Analytics/Crash reporting if enabled). See Google’s Privacy Policy.

10. Children’s privacy

We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction). If you believe a child provided us with personal data, contact us and we will take appropriate steps to remove it.

11. Changes to this Policy

We may update this Policy from time to time. We will post the new Policy with an updated “Effective date” and, where appropriate, provide additional notice.

12. Contact