Privacy

Vigirota warns you of speed cameras and road hazards. To do that, it needs your location. This page says exactly what it does with it, plainly: your trips are only used to run and fix the app, they are deleted after 30 days, and nothing is sold to anyone.

Your location

Your location is calculated on your phone, and that is where it is used: the app, on the device, decides when to announce a speed camera or a danger zone. It only leaves the phone in these specific cases:

• To display the map: the app requests the reports for the rectangle shown on screen. It therefore sends the area you are looking at, not your exact position.
• When you report a danger zone or another event, or answer a question: the position of the reported point is sent, since that is the purpose of the report. It is then visible to other drivers.
• When you search for an address: what you type or dictate, and your position so that nearby addresses come first, are sent to our address-search partner, located in the European Union. Routes are calculated on our own servers; only a trip that leaves France goes through a partner, also located in the European Union, which then receives the start and destination. Neither knows who you are.
• For the technical log: your position every 5 seconds while the app is open (see "The technical log" below).

The base map is hosted on our own servers: displaying the map sends nothing to a third party. Our servers do not keep a log of IP addresses.

Sharing your speed

Accidents and roadworks are provided by French public services and by our partners. But nobody measures the secondary roads: only the drivers on them can tell that they are congested. That is why the app shares your speed.

This sharing is on by default: it is part of how the app works and is accepted with its terms of use and this policy. Nothing is sent before you accept them. This is what the app sends for this sharing:

• your position and your speed at the time of the reading;
• the road number, when it is known.

Our server never keeps this point: as soon as it arrives, it turns it into an area of about 200 metres and keeps only that area, the road number, the speed and the time it was received — for ten minutes, the time needed to work out the traffic.

And this is never sent:

• no identifier, not even your phone's: our servers cannot tell that two readings come from you;
• no tracked trip: the app sends only one reading per area crossed, in small batches, about once a minute. Our servers do not link these batches together, and each reading is deleted after ten minutes;
• nothing when you are stopped.

Readings are deleted after ten minutes. What remains is the usual speed of each area: a property of the road, no longer anyone's data.

Legal basis: our legitimate interest (article 6.1.f of the GDPR) in knowing traffic conditions to warn drivers.

Live position

To follow traffic in real time, spot a slowdown and warn the drivers concerned, Vigirota shows your phone's position on its traffic monitoring map. This sharing is on by default: it is accepted with the terms of use and this policy, and the app has no setting to turn it off. It stops when you close the app.

• your exact position is sent while the app is open, about once a minute, with the alert requests the app already makes;
• it is linked only to a session number drawn at random each time the app opens: not your name, not your number, not your phone's identifier;
• for this live tracking, only the last position is kept, in memory, and it is erased after ten minutes; the technical log, described below, has its own retention period;
• it is visible only to the operator of Vigirota, on a restricted internal tool, and is never sold or passed on to anyone.

Legal basis: our legitimate interest (article 6.1.f of the GDPR) in following traffic to warn drivers.

The technical log

While the app is open, it sends our servers a log of how it works: your position every 5 seconds, the alerts and beeps triggered, passages by danger zones, navigation, ad display and app errors.

It is used for one thing only: understanding and fixing what happens on the road — an alert that rings for no reason, a missed alert, a crash. It is linked to the identifier drawn at random by your phone, never to your name, and it is read only by the Vigirota team. It is deleted automatically after 30 days, and it is neither sold nor passed on to an advertiser.

This processing is based on our legitimate interest in fixing a driving aid. You can object at any time: write to contact@vigirota.fr giving the date, approximate time and town of one of your recent trips. This lets us find your phone in the log; nothing more is recorded from it, and we delete what already was.

Your phone's identifier

When first opened, the app draws an identifier at random and keeps it on the phone. It is used only to run the service: linking the technical log described above, preventing the same device from voting twice on the same report, limiting the number of reports sent by the same device (against abuse), recognising that a reopened road has been seen by several different drivers, and protecting our data against copying. It is not your advertising identifier or a device number, and it cannot identify you. Clearing the app's data deletes it permanently.

What stays on your phone

Your recent destinations, your Home and Work shortcuts, your sound and map settings are never sent. They live on the device and disappear with the app.

Voice search

When you tap the 🎤 button, the app listens to one sentence: the destination you dictate, then "oui" or "non" to confirm. Your voice is turned into text by your phone's speech recognition service (Google's on Android, Apple's on iPhone), which may use their servers.

Vigirota only uses the text, to look up the address exactly as if you had typed it. No sound is recorded or sent to Vigirota, and the microphone never opens unless you have tapped the button.

"Is this your town?" on Vigirota Maps

On a town's page, you can give it a heart and say how you are connected to it (home town, you live there, you work there, you often go there). No free text is asked for or published.

So that the same heart is not counted twice, your browser draws an identifier at random and keeps it on your device. The server keeps only a fingerprint of it, and a fingerprint of your connection address that limits how many hearts the same connection can give to the same town. Neither your address nor this identifier is stored in clear, and these fingerprints cannot identify you. Only the totals per town are shown. You can remove your heart at any time by clicking it again.

To keep the count honest (one person, one heart per town), giving a heart requires signing in with Google or Apple. We ask these services for neither your e-mail, your name nor your photo, and we do not store them. We keep only a fingerprint of the account number they send us: it is used to recognise your account and cannot lead back to you. Your sign-in session is kept on your device.

Your nickname is drawn at random from our lists (an animal and a quality, for example "Renard rusé du 01"): it is never typed. By default, your nickname appears in the "Aimée par…" list of the towns you like, with the size of your heart. Untick "Afficher mon pseudo dans la liste" on a town's page to no longer appear: your heart still counts in the total. You can sign out at any time, or delete your account from a town's page: the account, the nickname and all your hearts are then erased.

Advertising

The app is free thanks to advertising, shown by one of our partners in a banner at the top of the screen. This banner disappears as soon as an alert needs its place: a danger zone always comes before an ad. When first opened, you choose:

• accept advertising, and the app stays free;
• subscribe for 2.99 € a month, with no advertising at all.

You can change this choice at any time in the app's settings, on the "Confidentialité et publicité" line. The processing of advertising data is then the responsibility of our partners: see the policy of our advertising partners. The subscription is managed by Google Play; we see neither your payment method nor your identity.

How long

• A danger zone report stays visible for 2 hours, and each confirmation by another driver extends it; once confirmed by three drivers, it stays in place. It disappears if several people say it is no longer there. Other reports (accident, roadworks…) disappear on their own after twelve hours at most.
• The technical log is deleted after 30 days.
• Shared speed readings are deleted after ten minutes.
• Backups of our database are kept for 14 days on our server, and their backup copy for 30 days (see below).

Your rights

You can ask for access to, correction or deletion of the data about you, or object to the technical log, by writing to contact@vigirota.fr. As we keep no account, name or e-mail address, give the date, approximate time and town of a recent trip: that is what lets us find your phone's data.

You can also lodge a complaint with the CNIL, the French data protection authority.

Data controller

Data controller: CAPISTARS SAS (see the legal notice, in French).

So that nothing is lost in case of failure, a backup copy of our data is kept for 30 days in a country recognised by the European Commission as ensuring an adequate level of protection of personal data. It only serves to restore the service. Apart from this copy, data is transferred outside the European Union only if one of our partners does so for advertising, under its own rules.