Privacy Policy
Personal data protection: effective from 29 October 2026.
This policy explains, simply, which data Mingle processes, why, who sees it and how long it is kept, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
1. Who is responsible for your data
The data controller is PEACH IMMO, SAS, whose registered office is at 81 rue de Laseppe, 33200 Bordeaux, registered under number 927 783 753. Contact: [email protected].
2. The data Mingle processes
2.1 What you give us
- Sign-in: your e-mail address (we send you a code), or the identifier Apple or Google gives you if you sign in with them.
- Profile: first name, date of birth (never displayed), a photo if you choose to add one, your city picked from a list.
- Quest photos: the photo of the place you add for a solo badge (camera or library), and the photos you add to an outing’s album.
- Messages: those you write in the group chats of outings.
- Reports you send, and what you add to them.
2.2 What your use produces
- The outings you book, cancel or wait for a spot on, and the reminders you ask for.
- Your check-ins (date, place of the quest, your location at that moment and the measured distance to the place), your badges, your points and your level.
- The members you block.
- Your notification settings.
- The city you choose.
2.3 Technical data
- IP address, type of device and browser, language, and connection logs.
- The token that lets us send you a notification, if you allow them.
- A short list of usage events, described in section 7.
2.4 Location
Mingle reads your location only at the moment you check in, after you have allowed it on your device, to check that you are within 300 meters of the quest’s place. The location read and the measured distance are recorded with that check-in. Mingle does not track your location in the background and builds no history of movements. Without the permission, you can browse the Service but cannot check in. You can withdraw the permission at any time in your device settings.
2.5 What we do not ask for
Mingle asks for no sensitive data within the meaning of Article 9 of the GDPR (health, origin, opinions, orientation…). Do not write any in your profile or in chats.
3. Why, and on what legal basis
| What it is for | Legal basis |
|---|---|
| Creating your account, signing you in, checking that you are 18 | Performance of the contract (terms of use) and legitimate interest |
| Showing you quests and outings, counting your badges, points and level | Performance of the contract |
| Booking your spots, running group chats and albums | Performance of the contract |
| Checking your location at the moment of a check-in | Consent (your device permission) and performance of the contract |
| Showing your first name and profile photo to other members | Performance of the contract |
| Notifications on your device | Consent (your device permission) |
| Reminder and service e-mails (you can turn reminders off in Notifications; the cancellation of an outing is always sent to you) | Performance of the contract |
| Automatic moderation of your photos (section 6) | Consent, given in the application before your first photo |
| Safety, reports, moderation, fraud prevention | Legitimate interest and legal obligations |
| Usage events (section 7), to understand how the Service is used and improve it | Legitimate interest |
| Answering your support messages | Legitimate interest |
4. Who sees your data
Other members see your first name and your profile photo. Participants of an outing see the other participants. Your messages are read by the participants of the outing. An outing’s album is visible only to the participants who checked in to it. Your e-mail address, your date of birth, your sign-in identifier and your location are never shown to other members.
What stays private: the photo of your solo badges (visible only to you), your check-ins and your location.
Partner venues receive no data about you.
The Publisher’s authorised team accesses data to run the Service, handle reports and help you. Data may also be disclosed to the authorities on request.
5. The providers involved
They process data on our behalf, only for what follows.
| Provider | Role |
|---|---|
| Hetzner Online GmbH (servers in Finland, European Union) | Stores the data and runs the Service |
| Cloudflare | Network that carries the exchanges between the application and our servers (IP address, requests) |
| Resend | Sending e-mails (sign-in code, reminders) |
| WorkOS, Apple, Google | Signing in with Apple or Google |
| Apple, and your browser’s notification services | Delivering notifications |
| Vercel (AI Gateway) and Google | Automatic analysis of photos (section 6) |
| OpenStreetMap Nominatim | Finding a city from the text you type when you choose yours. It receives only that text, sent by our servers, never your identity. |
6. Your photos
Every photo you add (quest, album, profile and chat) is checked by an automated artificial intelligence moderation service, Google Gemini through Vercel AI Gateway, only to block inappropriate content such as nudity or contact details. The legal basis is your consent: before your first photo, the application asks for it and names this service. Without it you can use the Service, but you cannot add a photo. The check is not used to identify you, builds no biometric profile, and the service keeps no copy of the photo for its own purposes. If the service does not answer, the photo may be accepted and then reviewed by a moderator. The profile photo is optional and does not need to show a face. Quest and album photos are shown only to the people described in section 4, and each of them can be reported.
7. Usage events
To understand how the Service is used, Mingle keeps a short list of usage events: the application being opened, the tab shown and the sign-up steps. These events are tied to your account once you are signed in. The application does not record your session: no copy of what is displayed on screen is made. Nothing you type is recorded, and chat messages are not in it.
These events are read only by the team, are used only to improve the Service, and are never used for advertising. They are kept as long as your account exists and erased with it.
8. How long we keep it
| Data | Duration |
|---|---|
| Account, profile, photos, check-ins, badges, points, messages | As long as your account exists. When you delete it, they are erased immediately. |
| Reports and moderation measures | Kept without your name after your account is deleted, for as long as needed for the community’s safety |
| Usage events | As long as your account exists |
| E-mail sign-in codes | A few minutes, then they can no longer be used |
| Notification token | Until the account is deleted or the permission withdrawn |
9. Transfers outside the European Union
Some providers in section 5 may process data outside the European Union, in particular in the United States. The transfer is then covered by appropriate safeguards: an adequacy decision or the European Commission’s standard contractual clauses.
10. Security
Exchanges with Mingle are encrypted, access to data is limited to the authorised team and administration access is protected and logged. Your account is protected by a one-time code sent by e-mail, or by your Apple or Google account: Mingle keeps no password.
11. Minors
Mingle is reserved for people aged 18 or over. If you enter a date of birth that makes you a minor, your sign-up stops, and Mingle keeps only what is needed so that you cannot start again.
12. Your rights
You have the right to access your data, correct it, erase it, restrict its use, object to it, receive it in a common format and withdraw your consent at any time, as well as to give instructions on what happens to it after your death. You correct your profile from My passport, and you erase everything in one step from My passport, Settings, “Delete my account”.
For any other right, write to [email protected] or by post to 81 rue de Laseppe, 33200 Bordeaux. We answer within one month. An identity document may be requested in case of reasonable doubt. You can also contact the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or its website.
13. Changes
This policy may change. You are informed of any significant change before it takes effect.