Privacy notice

1. Scope and controller

This notice covers the My Estate Map website and iOS application. LE LAB IMMO is the controller for private-workspace administration, subscription status, service security and support requests.

For owner and contact information entered by a real estate professional on behalf of their business, the professional determines the purpose and means of the processing. LE LAB IMMO acts as processor for that portfolio content under the Data Processing Addendum in the Terms.

2. Information processed

The app starts without visible account creation and uses a random anonymous Firebase identifier to isolate and back up the workspace. A name, email and Apple identity are processed only if the user later chooses optional synchronization with Apple. The service can also process subscription entitlement and lifecycle, Apple Ads attribution and campaign identifiers, limited Meta Ads conversion milestones, property addresses and coordinates, owner/contact details, notes, appointments, import data, photos and synchronization metadata.

The website does not collect information through a contact form. A support request sent by email contains the information the sender chooses to provide.

3. Purposes and legal bases

• Provide the anonymous workspace, optional synchronization and requested product features: performance of the service contract.
• Manage subscription entitlement and accounting records: performance of the contract and legal obligations.
• Protect accounts, diagnose incidents and prevent abuse: LE LAB IMMO’s legitimate interests in service security.
• Answer support and data-rights requests: performance of the contract, legal obligations and legitimate interests, depending on the request.
• Analyze unresolved CSV columns after the user selects an import file, then present only property-level issues and possible duplicates.
• Process subscription lifecycle and revenue information needed to operate the paid service: performance of the contract, legal obligations and LE LAB IMMO’s legitimate interests depending on the information.

4. Service providers and recipients

• Firebase (Google): authentication, Firestore database, file storage, App Check and server functions.
• Apple: optional Sign in with Apple synchronization, StoreKit subscriptions, App Store server notifications, MapKit and AdServices attribution for installs resulting from Apple Ads.
• RevenueCat: StoreKit 2 observation, subscription lifecycle, entitlement and revenue metrics. It receives an app-specific random identifier and Apple purchase data, but no account email or portfolio content. App Store server notifications are forwarded through RevenueCat to Firebase; Firebase remains the source of truth for app access.
• Meta: no Meta SDK is embedded and the app sends no event or identifier directly to Meta. Meta may receive only Apple’s delayed, aggregated AdAttributionKit/SKAdNetwork postbacks when a Meta campaign is attributed. Meta receives no account email, Firebase identifier, property address, contact, location, photo, note, document or CSV content.
• OpenAI GPT-5.6 Luna: automatic matching of unresolved CSV columns using bounded profiles and representative samples after email addresses, phone numbers and URLs are redacted. Samples may contain a property address, name or categorical value needed to understand the column. The complete CSV, complete rows and account identifier are never sent.
• Vercel: static website hosting, content delivery and limited technical logs used for security and operation.
• Authorized LE LAB IMMO personnel and providers receive only the access needed for their duties and are subject to confidentiality obligations.

5. Location

With permission, precise device location is used locally to recenter the map while the app is in use. It is not stored as portfolio data and no background route history is created. Coordinates saved for a property describe that property, not the user’s movement.

6. International transfers

RevenueCat and Meta may store or process limited service and advertising-measurement data in the United States. Some Apple, Google/Firebase and OpenAI services may also process limited data outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard. Additional information on the applicable safeguard can be requested from support.

7. Retention and deletion

• Ending or expiring a paid entitlement does not delete portfolio content. Existing properties, contacts, photos and appointments remain readable, editable, exportable and deletable; only new creations and Pro features are blocked.
• An anonymous user can erase the workspace in Settings. A user who linked Apple can delete the linked workspace there. Deletion removes the portfolio, entitlement association, authentication record and RevenueCat customer profile, subject to records that must be retained by law, and does not cancel an Apple subscription.
• Support correspondence is retained for up to 3 years after the last exchange; security logs for 30 days; backups containing deleted data for no more than 30 days; accounting evidence for the legally required period.
• A resolved Apple Ads attribution that is not linked to an account is deleted within 30 days. Once linked, it follows the purchase-context retention and is removed with manual account deletion.

8. Website and advertising

The website uses no audience analytics, advertising pixel, session replay or non-essential analytics cookie. Personal data is not sold. Vercel may create limited technical logs needed for security, delivery and operation of the website.

The iOS app sends Meta only app activation, completed onboarding, anonymous-workspace creation, first-property creation and automatic StoreKit subscription events for advertising conversion measurement. These milestones contain no account identifier or portfolio content. RevenueCat separately processes technical subscription and revenue information needed to operate billing and understand the paid service.

On first launch, the iOS app requests an Apple AdServices attribution token without displaying an App Tracking Transparency prompt. The token expires within 24 hours, is sent to an App Check-protected Firebase function, is never logged, and is deleted after Apple returns the attribution result. Resolved campaign, ad-group, keyword and ad identifiers are linked only to the random purchase-context identifier shared by Firebase and RevenueCat. No IDFA, account email or portfolio content is used, and this does not enable cross-app tracking.

For Meta campaigns, AdAttributionKit/SKAdNetwork sends only Apple-generated, delayed and aggregated postbacks to Meta. The app contains no Meta SDK, does not request App Tracking Transparency, uses no IDFA and enables no cross-app tracking.

9. Security

LE LAB IMMO applies access controls, encrypted transport, provider security controls, account isolation and limited administrative access. No system can be guaranteed completely secure; suspected incidents should be reported promptly to support.

10. Your rights

Depending on the processing, you may request access, rectification, erasure, restriction, portability or object to processing. You may also define instructions concerning your data after death where French law applies. Requests can be sent to contact@myestatemap.app and may require identity verification.

You may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or through cnil.fr.

11. Changes and contact

Material changes will be dated and communicated through an appropriate channel before they take effect when required. Privacy questions can be sent to contact@myestatemap.app or by post to LE LAB IMMO at the address in the Legal Notice.