Privacy Policy

Review version of 15 October 2026 — being finalised. This version does not certify compliance. Outstanding points are expressly identified; an effective date has not been set.

1. Controller and contact

212.social is published by Tijani Moutrous, an individual entrepreneur trading as GoNetwork, who is the controller for the processing described here. For personal data matters: contact@212.social. Full business contact details are available in the Legal Notice.

This policy covers the website and features accessible through the Android application when distributed.

2. Account and profile

We process your email address, sign-in information and preferences needed for your account. Your password is not kept in plain text for the Publisher to consult. If you choose Google sign-in, information necessary for that connection is exchanged with Google.

You may add your identity, username, photo, introduction, occupation, skills and a location you provide. Optional fields and visibility settings determine what other users can see.

3. Content and interactions

We process your posts, media, comments, reactions, subscriptions, contributions and participation to provide requested features. Visibility depends on the feature and settings. Participation hidden from other members may still count towards a total.

Professional or organiser contact details may appear in submitted listings. Visible content may be viewed, shared or copied by its recipients.

4. Messages, support and reports

We process messages, recipients and read information needed for exchanges. Messaging is not end-to-end encrypted. Enabled email notifications may include the sender's identity and a message excerpt.

Support requests and reports include contact details, facts, references, relevant material and follow-up. Access to private information is limited to authorised persons for operation, support, security, moderation and legal duties.

5. B2M journey and relatives

B2M uses your answers to prepare an assessment and relocation journey: household circumstances, plans, destinations, procedures, notes, document tracking and budget. Some information concerns relatives, including people without accounts, and may be supplied by a journey participant.

Answers about medical follow-up, a condition or dependency, and information inferred from them, may constitute health data. A private journey does not remove their special protection.

Journey access depends on authorised roles; the questionnaire assessment is restricted to the owner and managers. A draft may remain saved on your device so that you can resume. On a shared device, do not leave this information accessible.

Accepting the Terms does not constitute consent to health processing or each adult relative's consent. You may exercise rights over information about you, including information entered by another member, at contact@212.social.

6. Lives and device permissions

When you broadcast your voice or image in a Live, they are transmitted to authorised participants. Microphone and camera use depends on your permissions. Watching a Live does not require you to broadcast voice or image.

The service provides no stream recording or replay. Certain participation and moderation information is retained separately. Participants may make independent recordings.

The prepared Android version does not read your address book or collect GPS location. A voluntarily entered city or address and technical information needed for a connection are different matters.

7. Purposes and legal bases

Data necessary for accounts, exchanges and requested features is processed to perform the service. Service protection, abuse prevention and handling incidents or reports may rely on legitimate interests, subject to your rights. Certain retention, disclosures and responses to rights requests follow legal obligations.

Optional audience measurement relies on consent. Health processing requires an appropriate legal basis and a specific condition permitting it; Terms acceptance, a cookie choice or device permission does not replace that condition.

We do not use member content to promote the service or sell member data.

8. Recipients

Depending on the feature, data is accessible to authorised users, the Publisher and providers needed for the service.

Technical providers support hosting, account management, content storage and delivery, communications and security. They include Supabase, Netlify, Cloudflare and OVHcloud. Google is involved when you select its sign-in, accept Google Analytics or use a device notification delivery service. Mapping providers, including CARTO, receive requests needed to display maps.

These activities may require technical information such as IP address, browser, date and requested resource. Authorities and legally authorised persons may receive required information. External websites you open apply their own policies.

9. International processing

The Publisher is established in France. Some providers may process data outside the European Economic Area. You may request information about destinations and applicable transfer safeguards at contact@212.social.

10. Cookies and audience measurement

Necessary cookies and storage support sign-in, security, language and remembering choices. Your audience measurement choice is kept for 180 days.

When enabled, Google Analytics measures pages and service usage with prior consent, including registrations, search counts, procedures and B2M progress. Search text, questionnaire answers, private messages and profile names are not sent by these measurements. Browser identifiers and technical information are still used: this measurement must not be assumed anonymous. Advertising personalisation features are disabled.

Analytics cookies are configured for a maximum of 180 days, without automatic renewal on each visit. Detailed event data is retained for 2 months and user data for 14 months, without extending retention on new activity. These periods do not by themselves limit the retention of aggregated statistical reports.

You may refuse or withdraw consent through “Cookie settings” in the public footer or Account tab. Refusing this measurement does not prevent account access. This choice is not consent to health processing.

11. Notifications

Push notifications, when available and enabled, use a device subscription and your preferences. The device delivery service receives information necessary to deliver them.

The sender's name may appear on your lock screen, without a private-message excerpt in the prepared push notifications. Emails may contain an excerpt. You may disable notifications in the relevant settings; sign-out unregisters the device from the account under the intended operation.

12. Retention and deletion

We retain necessary data while accounts and relevant features are used. After deletion or use ends, some data may remain for legal duties, disputes, abuse prevention or justified technical constraints for a proportionate period.

You can delete your account through My space → Account → Delete my account or request deletion at contact@212.social. Uninstalling the application does not delete your account.

Deleting an owner's account deletes the shared B2M journey after warning and confirmation; other participants keep their accounts. Leaving another owner's journey does not delete it. Some collective content may remain; removing its account link does not alone ensure anonymity. Deletion of every copy is not instantaneous and no restoration is promised.

13. Your rights

Under legal conditions, you may request access, copies, correction, deletion, restriction, portability or object, and withdraw consent without affecting earlier lawful processing. In France, you may also give instructions about data after death.

Contact contact@212.social, including without an account. Proportionate identity checks may be needed; identity documents are not systematically required. We normally respond within the statutory one-month period, with a reasoned extension where the law permits.

You may complain to the CNIL — www.cnil.fr or the competent authority in your country.

14. Security and minors

We apply protection measures suited to the data and risks. No system guarantees absolute security. Protect your credentials and report suspicious access.

The service is intended for people aged at least 15, subject to their country's rules for minors. A declared age is not identity verification or parental authorisation. Information about a child in a household remains protected even without a child account.

15. Changes

This policy may change with the service or applicable rules. Material changes are brought to your attention and a new choice is obtained where necessary. Changing the wording does not itself constitute fresh consent.