Last updated: 14 September 2026
This Privacy Policy explains how MyCivility processes personal data in connection with its mobile application and website.
MyCivility is an application that allows users to observe, report and understand everyday antisocial behaviour, in particular through user contributions and the presentation of statistical data.
Privacy protection is one of MyCivility’s core design principles. In particular, the application has been designed to allow users to report a situation without free text, photographs or identification of the individuals concerned.
The controller responsible for the processing of personal data in connection with MyCivility is:
Charles Heim
73 route de Sainte Marie aux Mines
67730 Châtenois
France
For any questions relating to the protection of personal data or to exercise your rights:
Website: mycivility.fr
MyCivility applies the principle of data minimisation. The data processed depends on the features actually used.
Creating a MyCivility account currently requires an email address.
It is used to:
Some MyCivility features remain accessible without creating an account, including viewing the observation map and official statistics.
The address no-reply@mycivility.fr may be used to send automated technical communications. This address is not intended to receive requests from users.
For any questions concerning personal data, please use:
When an account is created, a unique technical identifier is associated with the user.
This identifier is used in particular to:
This identifier is not intended to be displayed publicly.
Creating a MyCivility account requires confirmation that the user meets the age requirement specified in the application.
MyCivility does not request the user’s date of birth.
Only the following may be recorded:
Some MyCivility features require access to the device’s location.
This is particularly the case when a user wishes to submit a report.
When a report is submitted, the application may temporarily obtain the device’s geographical position in order to determine the area in which the observed incident occurred.
Exact GPS coordinates are not stored as the location of the report in the MyCivility database.
The position is converted on the device into an H3 resolution 10 geographical cell.
The system is therefore designed according to the following principle:
Device location → conversion into a geographical area → transmission of the area to MyCivility.
The geographical cell is used instead of exact GPS coordinates to record and geographically process the report.
This design makes it possible to represent incidents at a local level while avoiding publicly associating a report with a specific address or precise GPS coordinates.
Location data is not used by MyCivility for advertising purposes.
Users may refuse or withdraw location permission through their device settings. Certain features requiring location access may then become unavailable.
When a user confirms a report, MyCivility may record, in particular:
Reports are structured using predefined choices.
Users must not attempt to identify any individual or individuals who may be involved in the reported situation.
In its current version, MyCivility does not request, in particular:
MyCivility also does not ask users to identify individuals who are the subject of a report.
Data is processed only where necessary for the operation or protection of the service.
To allow users to:
To enable:
To determine the geographical area in which an incident is reported without storing exact GPS coordinates as the location of the report.
To aggregate reports in order to enable, in particular:
MyCivility implements mechanisms designed to limit, in particular:
Certain technical data may be processed to ensure the security, integrity and proper functioning of the service.
Depending on the nature of the processing, data may be processed on the basis of:
the performance of the service requested by the user, where processing is necessary to provide a MyCivility feature;
MyCivility’s legitimate interests, in particular to ensure the security of the service, prevent abuse and protect data integrity;
the user’s consent or permission, where required, in particular to allow the application to access the device’s location.
Users may withdraw permission granted to the application through their device settings.
Creating an account is not required to use certain MyCivility features.
In particular, the observation map and official statistics may be viewed without authentication.
However, certain features require an account.
When an account is created, the email address and information required for authentication become necessary for the operation of the account.
Location is used only when a feature requiring the user’s location is requested.
A user may refuse location permission, but features requiring this information may then not function.
Reports submitted by users may contribute to the information presented on the map and in MyCivility statistics.
This information is intended to represent:
It is not intended to identify the user who submitted the report.
The email address and account identifier are not displayed publicly with a report.
MyCivility may also present statistics from official sources, separately from reports submitted by users.
MyCivility uses technical services necessary for the operation of the application.
MyCivility uses Supabase, in particular for:
The main MyCivility project is currently configured in the following region:
Western Europe – Ireland (eu-west-1).
Systems required for authentication and security may also process technical data relating to connections, such as IP addresses and certain technical information transmitted when communicating with the service.
MyCivility uses map data from OpenStreetMap to display maps.
When a map is loaded, the device communicates with the servers required to provide the map elements.
As with any Internet communication, certain technical information, such as the IP address, may be transmitted to the relevant servers.
For the purpose of displaying maps, MyCivility does not transmit to OpenStreetMap:
MyCivility does not sell its users’ personal data.
In its current version, MyCivility does not use users’ personal data to provide them with targeted advertising.
The application does not currently include an advertising system intended to monetise its users’ personal data.
Account-related data is retained for as long as necessary for the operation of the account and the service, subject to applicable legal obligations or specific security requirements.
When a user deletes their account, data directly associated with that account is deleted in accordance with the way MyCivility operates.
Reports already submitted may be retained after account deletion in order to preserve:
In this case, they are disassociated from the deleted account.
The identifier that allows the report to be linked to the user’s account is deleted.
Certain technical information may also be retained for as long as necessary to ensure the security of the service, resolve an incident, prevent abuse or comply with a legal obligation.
Any user with a MyCivility account may request its deletion.
An account deletion feature is available directly within the application.
Upon deletion:
A user may also request deletion of their account without having access to the application.
A dedicated page is available at:
mycivility.fr/suppression-de-compte/
The request may also be sent to:
In order to protect users against fraudulent requests seeking to delete another person’s account, MyCivility may request only the information strictly necessary to verify the request.
MyCivility implements technical and organisational measures designed to protect data against, in particular:
Communications between the application and MyCivility services are carried out using secure connections with HTTPS/TLS.
Access rights to data and server-side functions are also restricted according to what is necessary for the operation of the application.
MyCivility also uses various mechanisms designed to prevent unauthorised data writes and limit abuse.
As no computer system can guarantee absolute security, these measures may evolve in response to risks and technical developments affecting the service.
MyCivility has been designed to limit the precision of geographical information retained when a report is submitted.
The GPS position obtained by the device is used to determine an H3 geographical area.
The exact GPS position is not stored as the location of the report in the MyCivility database.
This architecture is intended, in particular, to prevent a report from being publicly presented as having occurred at a specific address or exact GPS coordinates.
The map information presented to users is therefore based on a geographical representation appropriate to MyCivility’s purpose.
Creating a MyCivility account is subject to the age requirement specified in the application.
Users must confirm that they meet this requirement before completing the creation of their account.
MyCivility does not request the user’s date of birth.
If MyCivility becomes aware that an account has been created in breach of this requirement, appropriate measures may be taken, which may include deletion of the relevant account.
In accordance with the General Data Protection Regulation (GDPR) and applicable French legislation, depending on the circumstances, you may have the following rights:
To exercise your rights:
MyCivility may request only the information strictly necessary to verify the identity of the person making the request where there are reasonable doubts concerning their identity.
You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority.
Commission Nationale de l’Informatique et des Libertés (CNIL)
MyCivility’s main data infrastructure used through Supabase is configured in the Western Europe – Ireland region.
However, certain technical service providers may process technical data in other countries depending on their own infrastructure and the applicable legal mechanisms.
Where required by applicable law, transfers of personal data outside the European Economic Area must be subject to the safeguards provided for under applicable data protection legislation.
MyCivility may evolve over time.
New features may, in particular, result in changes to the categories of data processed, the purposes for which they are processed or the technical service providers used.
This Privacy Policy will be updated whenever necessary.
The date shown at the top of this Privacy Policy indicates when it was last updated.
In the event of a significant change concerning the processing of personal data, appropriate information may be provided to users.
For any questions relating to this Privacy Policy, your personal data or the exercise of your rights:
Data Controller: Charles Heim
MyCivility
Email: privacy@mycivility.fr
Website: mycivility.fr
To request deletion of an account:
mycivility.fr/suppression-de-compte/
The address no-reply@mycivility.fr is reserved for automated communications and is not intended to receive requests relating to personal data.