This is a courtesy translation. The French version is the only legally binding one. Read the French version
Personal data
Privacy policy
This policy explains what data Aule processes, why, for how long and how to exercise your rights.
Data controller
AULE SYSTEM, association déclarée, régie par la loi du 1er juillet 1901 (a not-for-profit association declared under the French Act of 1 July 1901) (RNA W442032304), is the controller of the processing described on this page. The full identity of the publisher is given in the legal notice. You can reach the person responsible for data protection at contact@aule.fr for any question or request concerning your personal data.
Data processed
Depending on the services used, Aule processes a random installation identifier, account and authentication data (in particular the email address), the profile information you choose to provide (first and last name, phone number, postal address, date of birth, gender and photo), saved places and favourites, contributions and reactions, your device’s notification token when you enable notifications, requests sent to support, technical security data and crash reports, and your location when you voluntarily enable geolocation. All profile fields are optional. The professional areas also process the information needed to operate the network and manage access rights. If you join the association or make a donation to it, Aule also processes your identity and the amount, date and reference of the payment; bank details are processed solely by the payment provider and never reach the association.
Purposes and legal bases
The data is used to provide the map, routes, alerts, accounts and support (performance of the service), to secure the platform and prevent abuse (legitimate interest), to keep the register of members and the association’s accounts in the event of membership or a donation (performance of the membership contract and legal accounting obligation), to comply with legal obligations, and, only after you have made your choice, to use geolocation or optional features that require your consent. Aule does not sell your data and does not use it for targeted advertising.
Geolocation
In the mobile app, your location is used to show nearby stops and to offer “My location” as a starting point. When you start guidance or a stop-alert watch, the app keeps following your location while it is active, including with the screen off or the app in the background: a visible notification or indicator shows this, and the tracking stops with the guidance. The app never accesses your location in the background outside guidance or a watch that you started. To calculate a route, the start and end points are sent to Aule’s servers. If you separately enable community sharing, pseudonymised location events are sent during a guided trip or a ride watch, roughly every fifteen seconds, under a random identifier renewed every twenty-four hours and unrelated to your account, in order to estimate how crowded vehicles are; their raw coordinates are deleted as soon as they are more than fifteen minutes old. On the website, your location may centre the map and tailor nearby services, but it is not linked to your account. You can refuse or withdraw permission in your device or browser settings, and Aule remains usable without geolocation.
Recipients and processors
Access is limited to authorised persons at Aule and, depending on the service, to the transport operators concerned. Strictly necessary technical providers may receive certain data: website hosting, Supabase hosting and authentication, OpenStreetMap/OpenFreeMap mapping, Géoplateforme IGN geocoding, Open-Meteo weather, notification delivery through Firebase Cloud Messaging (Google), sign-in with Google or Apple when you choose those options, and Sentry, hosted in the European Union, which receives crash and error reports (device type, system and app version, without IP address or location) and, on the website, page performance measurements. They act solely to provide their service and under their own data protection safeguards. Aule servers also send departure and arrival points to the OSRM routing services router.project-osrm.org (driving) and routing.openstreetmap.de (walking) to calculate routes, without including your account identifiers.
Retention periods
Account data is kept for the life of the account and then deleted at your request or, failing that, deleted or anonymised no later than three years after the last activity, unless a legal obligation applies. The raw coordinates from community sharing are deleted as soon as they are more than fifteen minutes old. The notification tokens of a device left inactive for thirty days no longer receive messages and are deleted after ninety days; the notification history is purged after ninety days. Accounting records relating to memberships and donations are kept for ten years, the retention period adopted for accounting records, and this retention takes precedence over a request for erasure. Support requests are kept for three years after they are closed, and technical and security logs for no more than twelve months. Local preferences remain on your device until you delete them. Any shorter periods stated for a particular feature prevail.
Your GDPR rights
You have the rights of access, rectification, erasure, restriction, objection and, where applicable, portability. You may withdraw your consent at any time, without affecting prior processing. To delete an account, use direct deletion in the app (account menu, “Deactivate or delete account”) or in the website settings, or follow the page aule.fr/suppression-compte. You may also write to contact@aule.fr; proof of identity may be requested. Aule normally replies within one month. Finally, you may lodge a complaint with the CNIL (the French data protection authority, cnil.fr).
Security and transfers
Aule applies access control, encryption of communications, logging and retention limitation measures. If a provider processes data outside the European Economic Area, Aule requires a mechanism recognised by the GDPR, in particular an adequacy decision or the European Commission’s standard contractual clauses.
Last updated: October 2026 · Contact: contact@aule.fr