Privacy policy - Nidora
Last updated: 2026-10-25
This is an English translation of the French policy. If the two differ, the French version applies.
1. Who processes your data
The data controller is Leo Virgo, a SASU with share capital of €2,000, whose registered office is at 6 rue d'Armaillé, 75017 Paris, France (SIREN 105 436 562), publisher of the Nidora app.
For any question about your data: bonjour@nidora.family
2. What Nidora collects, and why
Your account
| Data | Where it comes from | Why |
|---|---|---|
| Email address | Sign in with Apple, or entered by you | To identify your account |
| Apple identifier | Apple, if you use Sign in with Apple | To recognise you when you sign in again |
| First name | Apple, at your first sign-in only | To name your profile |
| Creation date | Automatic | Account management |
If you choose "Hide My Email" when signing in with
Apple, we never receive your real address: Apple gives us a relay
address of the form xxxx@privaterelay.appleid.com.
Nidora does not ask for your surname, and does not store the one Apple sends.
Your contributions
Reviews (rating, assessments of facilities, the child's age, the context of the visit, date, free comment), places you add, facilities you confirm, photos, reports and suggested corrections.
These contributions have a single purpose: helping other parents. They are publicly visible in the app, except for reports and suggestions, which only we read.
Your location
The app asks for your location while you are using it, never in the background, and only for two things: showing places near you, and giving the search a starting point.
Your location is never stored. It stays in memory for the session and is gone when you close the app.
Usage measurement and error reports
The app measures eight actions. Here is the complete list, as it exists in the code:
| What is counted | What is sent with it |
|---|---|
| Opening the app | nothing |
| Creating an account | the method used (Apple or email) |
| Running a search | the length of what you typed, never the text |
| Viewing a place | the place's identifier, which is public |
| Confirming a facility | the facility and your answer (yes / no) |
| Posting a review | the number of assessments and the length of the comment |
| Uploading a photo | what the photo shows (entrance, changing table, high chair…) |
| Adding a place | the place's category |
Each action is also sent with information about the device, added by the measurement tool: iPhone model and screen size, iOS and Nidora versions, the phone's language and time zone. None of it contains anything you typed.
What you type in the search and what you write in a comment are never sent. Only their length is counted.
No account identifier is attached to these actions. To count installations rather than openings, the measurement tool gives the app a random number, stored on the phone. That number is linked neither to your email, nor to your name, nor to your Nidora account, and it changes if you reinstall the app. Like any server, the measurement tool also sees the IP address of the connection; it is not linked to any account. We do not know it is you: we know that a parent performed this action, on one installation of Nidora.
Separately, when the app crashes, an error report is sent: the technical trace of the crash, the iPhone model, the iOS version and the Nidora version. The addresses of network requests appear in it stripped of their content: the path called, never what you were searching for or where you were.
These two measurements serve one purpose only: knowing what breaks and what nobody uses. They are hosted in the European Union.
What Nidora does not do
- No advertising trackers, no ad network, no cookies.
- No tracking across apps or websites. What you do elsewhere does not reach us, and what you do here is not passed to anyone to follow you elsewhere. The providers that receive data, and which data, are listed in section 4.
- No profiling, no automated decision about you.
- No resale, no sharing for commercial purposes.
- No screen recording, no capture, no session replay.
This is why the app never asks for permission to track you across apps: it uses no advertising identifier (IDFA) and does not follow you from one app or website to another.
3. On what legal basis
| Processing | Legal basis |
|---|---|
| Creating and managing your account | Performance of the contract (Art. 6(1)(b) GDPR) |
| Publishing your contributions | Performance of the contract |
| Using your location | Your consent, which you can withdraw at any time in the iPhone settings |
| Accessing your photos | Your consent, which you can withdraw in the same way |
| Measuring usage and receiving error reports | Our legitimate interest (Art. 6(1)(f) GDPR): fixing failures and understanding what is useful |
On this last line: the measurement is limited to Nidora, is not linked to any account, and is shared with no one. You can object to it by writing to bonjour@nidora.family.
4. Who else receives this data
| Recipient | What it receives | Where |
|---|---|---|
| Supabase: hosting and database | All account and contribution data | European Union (Ireland) |
| Resend: sending the sign-in email | Your email address and the sign-in code it contains | European Union (Ireland) |
| Apple: Sign in with Apple | You identify yourself directly with Apple; we receive the result | As set out in Apple's policy |
| Google Maps Platform: place search | Your search and your phone's location, when you search for a place | Outside the European Union |
| DeepL: translation | The text of a public comment, when a reader asks for its translation | European Union (Germany) |
| PostHog: usage measurement | The eight actions listed in section 2 and the device information sent with them, with a random number per installation, without any account identifier | European Union |
| Sentry: error reports | The technical trace of a crash, the iPhone model, the iOS and Nidora versions | European Union (Germany) |
These providers act on our behalf and are bound by data protection obligations equivalent to ours. Transfers outside the European Union are covered by the European Commission's standard contractual clauses.
Google does not receive your identity. What is sent is your search and your phone's location at the time of the search, so that nearby places are ranked first, with no email, no name and no account identifier.
Neither PostHog nor Sentry receives your identity. No email, no name and no account identifier is sent to them.
5. How long
| Data | Duration |
|---|---|
| Account and profile | Until you delete it |
| Contributions | See section 6 |
| Location | Never stored |
| Data cached on your phone | 24 hours |
| Usage measurements | 1 year |
| Error reports | 30 days |
6. What happens when you delete your account
You can delete your account at any time, from the app: Profile → Delete my account. Deletion is immediate and permanent.
What is deleted:
- your account and your access to Nidora;
- your email address and your display name;
- the link between you and everything you have published.
What is kept, with no link to you:
- your reviews, ratings and comments;
- the facilities you confirmed;
- the places you added.
These contributions remain online after your account is deleted. They describe businesses, not people, and they continue to help other parents. Nothing allows them to be linked back to you.
One reservation: the free text you wrote stays as it is. If you mentioned a first name, an address or a detail that identifies you, that mention remains. This is why the app asks you, under each text field, not to include any information that could identify you.
If a comment about you needs to be removed, write to bonjour@nidora.family: we will delete it.
7. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data.
| Right | How to exercise it |
|---|---|
| Erasing your account | Directly in the app: Profile → Delete my account |
| Changing your display name | Profile → Edit my profile |
| Withdrawing access to your location or photos | iPhone Settings → Nidora |
| Access, rectification, portability, objection | bonjour@nidora.family |
We reply within one month.
If our reply does not satisfy you, you can lodge a complaint with the CNIL (www.cnil.fr) in France, or the FDPIC (www.edoeb.admin.ch) in Switzerland.
8. Security
Exchanges between the app and our servers are encrypted. Your sign-in token is kept in your iPhone's secure Keychain, never in plain text. Access to data in the database is partitioned row by row: an account can neither read nor modify what belongs to another.
9. Children
Nidora is for parents, not children. The app is not intended for people under 16 and does not knowingly collect any data about them.
Reviews mention the child's age in months. This describes the context of a visit, such as "a changing table suitable for a 6-month-old baby", and does not identify anyone.
10. Changes
Any change to this policy will be published on this page, with its date. A substantial change will be flagged to you in the app.