Legal
Personal data
& processing agreement
What we collect, why, for how long, with which processors, and all your rights. Written to be read, in line with Regulation (EU) 2016/679 (“GDPR”) and the French Data Protection Act. This English version is a courtesy translation; the French text is the binding one.
1. Data controller
The controller of the data collected through the www.murmures-visites.com website and the Murmures app is Murmures [registered name to be completed], represented by its publication director, reachable at contact@murmures-visites.com.
2. A principle first: restraint
Murmures is designed to run on as little data as possible:
- Your location is not a product. The geolocation that triggers the narration is handled locally, on your phone. Your route is not continuously tracked by our servers, nor sold to anyone.
- This website sets no advertising cookie, no pixel, no third-party tracker.
- No data is ever sold. Never. Our business is selling walks, not data.
3. Data processed and purposes
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account: email, first name, password (encrypted), language | Create and manage your account, find your walks and write-ups again | Performance of the contract | Archived after 18 months of inactivity, permanently deleted after 36 months |
| Purchases: walk chosen, amount, payment status (card details are handled by our payment provider Revolut Merchant, on its hosted payment page; they never pass through our systems and we never see your card number) | Unlock your walks, invoicing, accounting | Performance of the contract, legal obligation | 10 years (accounting obligations) |
| Walk: places marked as visited, questions asked, length chosen | Adapt the route, answer your questions, write up your walk | Performance of the contract | Kept as long as you keep your account (it is your travel journal) |
| Location (group): location sharing within a walking group | Show group members on the map during the walk | Consent (switched on explicitly, can be switched off at any time) | Real time only; not kept after the walk |
| Partner code: discount code scanned, issuing partner | Apply the discount negotiated by the partner | Performance of the contract | Validity period of the code, plus proof of use |
| Support: emails exchanged with us | Answer you, improve the service | Legitimate interest | 3 years |
4. Processors (data processing agreements)
We work only with processors offering guarantees that meet article 28 of the GDPR, each bound by a Data Processing Agreement (DPA). Transfers outside the European Union, where they exist, are covered by standard contractual clauses (SCCs) or by the EU-US Data Privacy Framework (EU-US DPF).
| Processor | Role | Location | Safeguards |
|---|---|---|---|
| Supabase | Database, authentication, backend | European Union | Supabase DPA |
| Revolut | Secure payment (PCI-DSS) | European Union (Lithuania) | Revolut DPA |
| Cloudflare | Media delivery (audio, images) | Global network | Cloudflare DPA, SCCs / DPF |
| Anthropic | Generating answers to questions and walk write-ups (requests are not used to train models) | United States | Anthropic DPA, SCCs / DPF |
| Expo / Google Firebase | Push notifications | United States | DPA, SCCs / DPF |
| Resend | Transactional emails (confirmations, receipts) | United States | Resend DPA, SCCs / DPF |
| Sentry | Technical crash reports: error type, app version, device model. Configured to send no personal data | United States | Sentry DPA, SCCs / DPF |
4a. Artificial intelligence
Two features of the app rely on generative AI, Anthropic’s Claude model: the conversational guide, and the write-up you receive at the end of your walk. What that means, stated plainly:
- The guide’s answers and the write-ups are generated automatically and flagged as such in the app. Despite the care taken over sources, an error remains possible; a reliability indicator accompanies every answer.
- Your exchanges are not used to train Anthropic’s models.
- No decision producing legal effects or significantly affecting you is taken automatically (article 22 of the GDPR).
- Some audio narration is produced by speech synthesis, and identified as such.
4b. Notifications
Two separate consents, each revocable on its own from your profile: walk notifications (a story about a place you are approaching, your pass expiring) and news and offers, purely commercial, never switched on without your explicit agreement.
The current list of processors is available on request at contact@murmures-visites.com. Any substantial change to that list will be reflected on this page.
5. Your rights
Under articles 15 to 22 of the GDPR, you have the following rights:
- Access: obtain a copy of the data we hold about you;
- Rectification: correct inaccurate data;
- Erasure: delete your account and your data (including the write-up of your walk, if you wish; it belongs to you);
- Portability: receive your data in a machine-readable format;
- Restriction and objection: restrict certain processing;
- Withdrawal of consent: at any time, for processing based on it (for example group location sharing).
To exercise a right: contact@murmures-visites.com. We answer within 30 days. You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority, if you believe your rights are not being respected.
6. Security
Exchanges between the app, the website and our servers are encrypted (TLS). Passwords are stored hashed. Access to data is restricted by row-level security rules in the database, sensitive actions go through authenticated server functions, and payments are delegated entirely to our payment provider, on its hosted page: your card details never pass through our systems.
7. Minors
Murmures is made for families, but creating an account is reserved for people aged 15 and over (the age of digital consent in France). In Family mode, younger walkers’ devices are attached to an adult’s account.
8. Changes to this policy
This page will change as the service does, always towards more clarity. In the event of a substantial change, account holders will be told by email.
Last updated: July 2026 · pre-launch version