Legal

Privacy Policy

BesideU — Last updated: May 26, 2026

This Privacy Policy explains how BesideU collects, uses, and protects your personal data. By using the app, you agree to the practices described below.

1. Data Controller

BesideU is operated by Ilias Lamrani, an individual acting as data controller under the General Data Protection Regulation (GDPR).

Contact: mrani.apps@gmail.com

2. Data We Collect

Account data

Your first name, collected from Apple on your first sign-in when you use Sign in with Apple. Apple only provides this once — we do not receive your email address through Apple.
Your email address and password, if you register using the email/password method. Passwords are managed and hashed by Firebase Authentication and are never stored in plain text.
A profile icon you choose within the app.
An invite code used to connect with your partner.

Location data

Your precise GPS location, collected while a trip is active — including in the background.
Location is used solely to share your real-time position with your partner and estimate your arrival time.
Location tracking stops automatically when a trip ends or is canceled.

Trip data

Saved itineraries (label, destination, transport mode).
Trip history (start time, arrival time, route distance and duration).
Number of trips taken (used to manage free-tier limits).

Device data

Push notification token, to send you trip updates.
Platform and app version, for diagnostic purposes.

Purchase data

Subscription status (active or inactive), managed through Apple and RevenueCat.
We do not collect or store your payment card information.

3. How We Use Your Data

Purpose	Legal basis
Share your real-time location with your partner during a trip	Performance of contract / consent
Calculate your estimated time of arrival	Performance of contract
Send push notifications (trip started, arrived, etc.)	Consent
Manage your subscription and free-tier trip count	Performance of contract
Authenticate your identity	Performance of contract

4. Third-Party Services

BesideU uses the following third-party services, each subject to their own privacy policy:

Service	Purpose	Privacy Policy
Firebase (Google)	Authentication and database	firebase.google.com
Google Maps Platform	Route calculation and reverse geocoding	policies.google.com
RevenueCat	Subscription management	revenuecat.com
Apple	Sign In, In-App Purchases, push notifications	apple.com
Expo (Expo Push)	Delivery of push notifications	expo.dev

Your GPS coordinates are transmitted to Google's Directions API solely to compute route distance and duration. Google processes this data according to their own privacy policy linked above.

5. Data Sharing

We do not sell your personal data. No data is shared with advertisers or other third parties beyond the services listed above.

Within the app, the following information is visible to your designated partner once connected:

Your display name and profile icon — visible at all times while connected.
Your real-time GPS location, trip destination, and estimated arrival time — visible only during an active trip.

Disconnecting from your partner in the app settings immediately removes their access to your data.

6. Data Retention

Account data — retained as long as your account is active.
Trip data — retained as long as your account is active.
Location data — not persisted beyond an active trip. Current location is overwritten with each location update.
When you delete your account, all associated data (user profile, itineraries, trips) is permanently deleted.

7. Your Rights (GDPR)

As a user in the European Union, you have the following rights:

Right of access — request a copy of the data we hold about you.
Right to rectification — request correction of inaccurate data.
Right to erasure — request deletion of your data. You can also delete your account directly within the app (Settings → Profile → Delete account).
Right to restriction — request that we limit how we process your data.
Right to data portability — request your data in a structured, machine-readable format.
Right to object — object to data processing based on legitimate interests.

To exercise any of these rights, contact us at mrani.apps@gmail.com. We will respond within 30 days.

8. Background Location

BesideU accesses your location in the background only while a trip is active. This is necessary to track your progress and notify your partner when you arrive — even if the app is not in the foreground. Background location access stops automatically when the trip ends. You can revoke location permissions at any time in your device settings, which will prevent trip tracking from functioning.

9. Children's Privacy

BesideU is not intended for users under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

10. Security

Data is stored in Firebase Firestore with access rules that restrict each user to their own data and their designated partner's data. Communication between the app and our servers uses HTTPS encryption.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The "Last updated" date at the top of this page reflects the most recent revision.

12. Complaints — CNIL

If you believe that your personal data is being processed in violation of applicable regulations, you have the right to lodge a complaint with the French data protection authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, 75007 Paris, France
www.cnil.fr

We encourage you to contact us first at mrani.apps@gmail.com so we can resolve any concern directly.

13. Contact

For any questions or requests regarding your privacy, please contact:
mrani.apps@gmail.com