Privacy Policy

The data controller is SECUNARY, a French SASU with a share capital of €100, registered with the Paris Trade and Companies Register under number 942 117 771, whose registered office is at 102 avenue des Champs-Élysées, 75008 Paris, France.

For any question about your data or to exercise your rights: support@secunary.fr, or the messages with your concierge in the app.

Your account: first name, last name, date of birth, e-mail address (which may be an Apple private relay address), phone number, city, country, company name for a business account, billing address, and the identifier Sign in with Apple gives us. We never see your Apple ID password.

Your profile photo, if you add one.

Your requests and bookings: what you ask for, destinations, dates, budgets, number of guests, the travellers concerned and their flights, pick-up and delivery addresses, delivery recipients, special occasions, and any detail you give your concierge, as well as the proposals, orders, invoices and their status.

Your preferences (Tastes): what you like for stays, tables, cars, travel and gifts, and your sizes.

Your membership: your application (role, purpose and frequency of your trips, services sought, destinations, expectations, a professional or social profile link, the person who introduced you), your plan, its benefits and their history.

Your messages with your concierge, including the photos and files you attach, and your appointments with them.

Payments: amount, date, method and status of each payment, and for a bank transfer the name of the account holder who sent it. Card payments are handled by our payment provider Revolut: we never receive your card number or security code.

Problem reports you send from the app: your text, a photo if you add one, your iPhone model and your iOS and app versions.

Technical and security data: the push notification token of your device, its model, iOS version, app version and time zone, the identifier of your app installation, the authenticity checks of the app (Apple App Attest), and records of actions on your account (date, IP address).

With your consent only: usage measurement (the screens and actions used in the app), crash reports and performance measurements. They are linked to an identifier of your app installation, never to your name.

What we do not collect: your location, your contacts, an advertising identifier or your card details.

Identity documents: the app never asks for them. When a supplier requires identity information for a booking (an airline or an operator, for example), your concierge asks only for what that supplier requires, passes it only to that supplier, and deletes any copy at the latest 30 days after the end of the service. A watch or jewellery purchase above €10,000 may require an identity check under anti-money-laundering law; the documents are then kept for five years, as the law requires.

Some preferences may reveal your health or your religious beliefs: a dietary requirement (such as gluten-free, halal or kosher), an allergy, or a reduced-mobility or accessibility need noted for a trip. We record them only with your explicit consent, asked in the app at the moment you enter them, and only to arrange your bookings. You can withdraw this consent and delete these preferences at any time in the app.

You may give us information about other people: the travellers in a booking, the recipient of a delivery, or the loved ones you add to My people (first name, relationship, date of birth, sizes, special dates, tastes and things to avoid, delivery address and access details). We use it only to arrange what you ask for, such as a stay, a gift or a celebration.

Please share only what is needed, with the agreement of the people concerned, and tell them about this policy. Information about a minor, such as a child’s first name and date of birth, must be given by the child’s parent or guardian. Accounts are reserved for adults.

When you link your account with a loved one in My people, each of you can see the other’s first name and profile photo.

To provide the concierge service and perform your orders (contract): managing your account, handling your requests, preparing proposals, booking with suppliers, delivering, invoicing, collecting payments, providing your membership benefits and keeping you informed.

To comply with our legal obligations: accounting and tax records, the archiving of contracts, travel law, anti-money-laundering checks when they apply, and requests from authorities.

For our legitimate interests: securing the app and your account, preventing fraud and abuse, organising our team’s work (including an internal daily summary of open requests, see below), and establishing or defending legal claims.

With your consent, which you can withdraw at any time: sensitive preferences (see above), push notifications, access to your photos, and usage measurement and crash and performance reports. The app asks for this last consent before collecting anything; refusing changes nothing in the service, and you can change your choice at any time in the app’s settings.

To help our team prioritise its day, an AI service, Claude by Anthropic, prepares an internal summary of open requests. It receives, for this purpose only, the client’s name, the details of the request, recent messages and our team’s notes. It makes no decision about you: your concierge decides. Under our contract with Anthropic, this data is not used to train its models.

Our concierge team, bound by confidentiality, each member seeing what their role requires.

The suppliers of what you order (hotels, owners, yacht and aviation operators, chauffeur and car-hire companies, restaurants, boutiques and carriers), who receive only what the booking or the delivery requires.

Our technical providers, acting on our instructions: Apple (Sign in with Apple, iCloud storage of your account and requests, notifications), Google Firebase (database, file storage, server functions, authentication, notifications, usage measurement, crash and performance reports), Anthropic (internal summary, see above), Revolut (card and Apple Pay payments, and our business account that receives bank transfers), Whop (secure payment pages), and AviationStack (airport search, receiving only the city you type). If you choose to contact us on WhatsApp, Meta processes that conversation under its own terms.

Public authorities, courts and auditors when the law requires it, and, in the event of a merger or transfer of our business, the acquirer, which will be bound by this policy.

We never sell your data, and we do not use it for advertising.

Your account, requests and orders are stored with Apple (iCloud) and Google Firebase. Our Firebase database is located in Belgium (europe-west1) and our backups in Europe; our server functions run mainly in the United States.

Some providers therefore process data outside the European Union. Google, Anthropic and Whop process data in the United States under the European Commission’s adequacy decision for the EU-US Data Privacy Framework, for providers certified under it, or otherwise under the Commission’s Standard Contractual Clauses. Apple (Apple Distribution International, Ireland) transfers data to Apple Inc. in the United States under Standard Contractual Clauses. Revolut processes data in the European Union and in the United Kingdom, which benefits from an adequacy decision.

Account, preferences and My people: as long as your account is open; deleted when you delete your account.

Requests, proposals and messages: as long as your account is open, then kept in pseudonymised form for 5 years after your last order, to answer any claim, before being deleted.

Orders, invoices and payment records: 10 years, as required by accounting law (French Commercial Code, art. L123-22) and for the archiving of contracts.

Anti-money-laundering checks, when they apply: 5 years after the purchase concerned (French Monetary and Financial Code, art. L561-12).

Proof of your acceptance of our terms and of your payment consents: 5 years after the end of the contract concerned.

Membership application: for the duration of your membership; if it is declined, 1 year.

Identification data after account deletion (name, e-mail, phone, IP address): 1 year, accessible only to answer a request from the authorities.

Security records of actions on accounts: 1 year. Problem reports: 2 years. Crash and performance reports: 90 days. Usage measurement: 14 months.

Backups: 98 days at most.

You can delete your account yourself in the app: Settings › Delete my account. We then delete your account, profile, photo, preferences, My people, consents settings, membership, appointments, notifications and problem reports, and we revoke the link with your Apple ID.

What the law or the defence of our rights requires us to keep is kept separately, pseudonymised and for the periods above: your orders and invoices, your requests and messages, and your identification data for 1 year.

You can access your data, have it corrected or erased, receive it in a portable format, object to processing based on our legitimate interests, restrict a processing, withdraw your consent at any time, and give instructions on what happens to your data after your death.

To exercise these rights, write to support@secunary.fr. We reply within one month; we may ask for proof of identity if we have a reasonable doubt.

You can also lodge a complaint with the CNIL (www.cnil.fr), or with the data protection authority of your country.

Exchanges between the app and our servers are encrypted. Access to your data is restricted to the people and systems that need it, the actions of our team on accounts are recorded, and every request from the app is checked for authenticity. Card payments made in the app never pass through our systems: they go straight to Revolut.

We may update this policy. The version and date at the top tell you which one applies; we announce significant changes in the app before they apply.