Privacy policy
What we collect, why we do it and the choices available to you.
Updated 19 October 20261. Data controller
OnArriveBien's publisher, represented by Lilit Aslanian, is the data controller. Send privacy requests to contact@onarrivebien.fr.
Key point: profile addresses are not displayed in suggestions or on the discovery map. Accepted participants can see a journey's exact meeting point. An address can also be shared in a conversation.
2. Data we process
| Category | Data | Main use |
|---|---|---|
| Account | ID, name, phone number and authentication data | Account creation and security |
| Home | Postal address and geographic coordinates | Ranking journeys by proximity |
| Children | First name and year group | Relevance and context of suggestions |
| Activity | Journeys, requests, messages, notifications, blocks and reports | Service operation and safety |
| Mobile notifications | Device push token, alert content and delivery status | Sending push notifications when you enable them |
| Technical | Connection, error and moderation-access logs | Security, diagnosis and evidence |
| School enquiry | School name, contact, email, phone, levels, size and optional message | Responding to a setup request |
3. Purposes and legal bases
Account, matching, journey and messaging data is processed to provide the requested service. School enquiry details are used to respond to the request and can be accessed only by the platform administration team. Abuse prevention, moderation and security rely on the legitimate interest of protecting families and children. Rights requests are handled as a legal obligation.
4. Who sees what
Other families see a guardian's first name, useful journey details, relevant year group and an approximate distance or area.
Schools manage accounts and view aggregate indicators but cannot read private conversations. Moderators may access a conversation only for a report or safety purpose, and sensitive access is logged.
5. Providers
OnArriveBien uses Vercel for the web application, Supabase for data and authentication, Nominatim (OpenStreetMap) for address searches and OpenStreetMap for map tiles. Address searches are forwarded to Nominatim by our server. Displaying a map sends requests from your browser to OpenStreetMap tile servers, which receive your IP address. On iPhone, push notifications use Apple Push Notification service (APNs) when you enable them.
The web application (Vercel) and the database (Supabase) are hosted in regions located in Europe. Because Vercel Inc. and Supabase, Inc. are US companies, any transfer of data outside the European Economic Area is covered by those providers' contractual safeguards.
6. Retention
Account data is kept while the service is used. Operational data is limited to what is necessary. Deletion results in erasure or anonymisation, subject to legal duties and legitimate security needs.
7. Your rights
You may request access, correction, deletion, restriction or portability, and object to legitimate-interest processing.
To request deletion of your account and personal data, email contact@onarrivebien.fr and identify the account concerned. You can also use this address for other rights requests.
You may complain to the French data protection authority at cnil.fr.
8. Security
Data is encrypted in transit. Application access is separated by role and school; sensitive operations are controlled server-side and logged. Precise location data is limited to strictly necessary uses.
9. Children's data
Children's data is deliberately limited to a first name and year group needed for matching. The service is used by guardians, not directly by children.
10. Cookies and analytics
The service uses technical mechanisms required for authentication and security. The web application integrates Vercel Web Analytics for audience measurement and Vercel Speed Insights for performance measurement. OnArriveBien does not use advertising cookies.
11. Updates
This policy may change with the service or the law. Material updates will be brought to users' attention.