Effective date: 24 May 2026 · Last updated: 24 May 2026
This Privacy Policy explains how the mobile application Fantrack (the “App”) and its supporting back-end service (the “Service”) collect, use, and protect your personal data. It applies to every user of the App, on every device.
1. Who is responsible for your data
The data controller is the publisher of the App:
Marcazzan Romain, sole proprietorship (entrepreneur individuel)
No Data Protection Officer is appointed; the controller answers your privacy requests directly at the address above.
2. What data we collect
2.1 When you use the App without signing in
An anonymous user identifier generated by the Service on first launch (random ID, not tied to your device hardware or your identity).
Authentication tokens (a short-lived access token and a refresh token) needed to authenticate your requests to the Service.
If you allow push notifications, a device push token (issued by Google’s Firebase Cloud Messaging and stored by our notification provider) used to send you delivery notifications.
Service usage data: the episodes you add to your library, your favourites, your saved playback positions, your search tags, the device type (Android / iOS), and a per-device “incognito” preference.
Technical logs: standard HTTP request logs (timestamp, path, status code, duration, generic user-agent). These logs do not contain your personal content and are rotated automatically.
2.2 When you sign in with Google
If you choose to sign in (currently via Google Sign-In), Google provides the App with an ID token. From that token we store:
Your Google account identifier (a stable, opaque string called the “sub”), used to recognise you across reinstalls.
Your email address, used to identify you in the App’s “Account” section and to contact you about service-related matters.
We do not receive your Google password, your contacts, your Google Drive content, or any Google data beyond what is listed above.
2.3 When you subscribe to a paid plan
Payment is processed by Google Play Billing and managed on our side through RevenueCat. We never see your payment card or billing address. We only store: your active plan (free or paid), the renewal/expiry date, and the events sent to us by Google / RevenueCat (purchase, renewal, cancellation, billing issue, expiration).
3. Why we use your data (purposes & legal basis)
Run the Service (find, import, stream and resume audio content; sync your library across devices). Legal basis: performance of the contract you accept by using the App.
Send you push notifications tied to your activity (import success/failure). Legal basis: performance of the contract; you can disable notifications in your device settings at any time.
Manage your subscription (if applicable). Legal basis: performance of the contract.
Detect abuse and protect the Service (rate-limit usage, enforce plan limits, detect anomalies). Legal basis: our legitimate interest in keeping the Service usable for everyone.
Comply with legal obligations (respond to lawful requests, keep accounting records of subscriptions). Legal basis: legal obligation.
4. Who we share your data with
We do not sell or rent your personal data. We use a small number of data processors that handle specific tasks on our behalf:
Google LLC – Google Sign-In (authentication), Firebase Cloud Messaging (push delivery), Google Play Billing (subscriptions).
OneSignal Inc. – push-notification delivery and per-device subscription state.
RevenueCat Inc. – subscription state aggregation and webhook delivery to our Service.
Taddy Inc. – podcast catalogue search (server-to-server queries; we send only the search terms you type, never your user identifier).
Our hosting provider within the European Economic Area, on which the Service’s database and files are stored.
Each processor is bound by a contract requiring it to handle your data only on our instructions and to apply appropriate security measures.
5. International transfers
The Service’s database and audio files are stored within the European Economic Area. Some processors listed above are based in the United States or other countries outside the EEA. Where applicable, those transfers are covered by the European Commission’s Standard Contractual Clauses or by an adequacy decision (e.g. the EU-U.S. Data Privacy Framework for U.S. processors that are certified to it).
6. How long we keep your data
Account & library data: kept for as long as your account exists. Anonymous accounts that show no activity for an extended period may be deleted automatically.
Imported audio files: subject to a short retention window (a few days by default) unless you mark them as “Protected”, in which case they are kept as long as your account is active.
Subscription records: kept for the duration legally required for accounting purposes (10 years under French law).
HTTP logs: rotated automatically; no long-term archive.
7. Your rights
Under the EU General Data Protection Regulation and the French « Informatique et Libertés » Act, you have the right to:
Access your personal data and obtain a copy.
Have inaccurate data corrected.
Have your data erased (“right to be forgotten”) when no overriding legal obligation applies.
Restrict or object to certain processing.
Receive your data in a portable, machine-readable format.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with the French data-protection authority (CNIL) or your local supervisory authority.
To exercise any of these rights, write to contact@pro974.re. We will reply within one month.
8. Security
We apply industry-standard safeguards: TLS encryption in transit, hashed refresh tokens, no plaintext storage of credentials, automatic database backups, and access control on our infrastructure. No system is perfectly secure; if you become aware of a vulnerability, please report it to contact@pro974.re.
9. Children
The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will reflect the most recent change. Material changes will be announced inside the App.