Personal data and rights

This page presents the data used in the Binette app, on the website getbinette.com and for support. It also explains how to exercise your rights. The processing for the website and that for the app are separate.

1. Your contact

Nicolas Bruckert, sole trader, is the controller responsible for Binette’s personal data processing. SIRET: 842 848 145 00038. Address: 1114 route des Cadolles, 71470 Romenay, France. For your personal data: privacy@binette-app.fr. His professional contact details and those of the website host are also in the legal notices.

2. Account and vegetable garden tracking

Your email address, your account identifier and, where applicable, your display name are used to log in and retrieve your data. Authentication uses Supabase; Apple and Google logins involve these providers when you use them.

The plots and their location, crops, dates, notes, recorded actions, planting intentions and conversations make up your vegetable garden tracking. This information is linked to your account. Do not include sensitive information or information about other people that the service does not need in your notes or messages.

Creating and managing the account, recording and synchronising the vegetable garden tracking rely on the performance of the service you request, for the data necessary for these functions (Article 6, paragraph 1, b of the GDPR). Your email address and account identifier are required to access your personal tracking. The optional display name and notes are not required to open an account; you choose the observations and planting intentions you record.

3. Map, weather and artificial intelligence

The phone’s location is used to centre the map. You can control access to it in your phone’s settings. The coordinates of your plots are also used for weather requests sent by the server to Open-Meteo. Rounding these coordinates does not make them anonymous. Mapbox provides the map base layers and satellite imagery used for the plots.

You can place your plot manually on the map and refuse access to the phone’s location. Map requests sent to Mapbox transmit, among other things, your IP address and the requested map area. The mobile component also includes usage and location telemetry mechanisms, as described by Mapbox, to improve its maps and services. GPS permission and participation in this telemetry are separate. Refusing GPS access does not remove map requests or guarantee the absence of any usage measurement by the component.

The assistant uses Mistral. Binette sends it your messages, part of the history, and selected context from the vegetable garden: plots, crops, weather, available diagnostics, recent tasks, and notes. Conversations are recorded in Binette. Plot diagnostics use a satellite image obtained via Mapbox, stored in Supabase, and sent to Mistral. Questions and the diagnostic summary also use Mistral.

The data required for map, weather, and assistance functions you request is also processed to provide these services: plot location for local information, messages, and relevant context to prepare a response. This basis does not automatically cover the map component’s telemetry or usage measurement intended to improve the app. You can use the vegetable garden tracking without asking the assistant a question; a message is required to obtain a response. Dictation is optional, and you can type the message using the keyboard.

On 17 October 2026, API call sharing for model training was disabled in Binette’s Mistral account. According to the provider’s interface, disabling this sharing excludes new interactions from training through that data-sharing arrangement. It does not guarantee a retroactive effect on data already transmitted and does not enable zero retention. Mistral’s terms include exceptions, such as feedback voluntarily submitted to the provider with associated exchanges, and Labs or Preview models. The Labs option remained disabled in Binette’s account.

If you choose dictation, the microphone and the phone’s speech recognition service convert your voice into text. On iOS, this recognition uses Apple’s Speech API; on Android, it depends on the installed and configured recognition service. This service may process voice data on its servers: recognition is not guaranteed to be entirely local. The text then appears in the message field, and you can edit it before sending it to the assistant. This opportunity to review the text comes after speech recognition and does not prevent potential audio transfer to this service. Dictation does not send audio files to the Binette server. Satellite image analysis is separate from sending plant photos, which Binette’s chat does not offer.

4. Notifications, usage measurement, and errors

Reminders use your settings and a token sent to Firebase Cloud Messaging, together with the notification title, content, and information needed to open the relevant screen. The token is used to deliver a notification; it is not a universal hardware identifier. Firebase also uses installation IDs, separate from the Binette account. Delivering the reminders you request forms part of providing this service. You can control notification display permissions in your phone’s settings. Firebase is initialised when the app launches; this display permission does not, on its own, control the creation or deletion of Firebase’s technical identifiers.

PostHog is used to understand how Binette is used and to improve the app. It receives usage events, technical information about the app and device, and, when available, your account ID, email, and account creation date. Events prior to login may be linked to the account. This measurement is therefore not anonymous.

Data collection is enabled in the app, and events are also sent by the server. The app does not offer a setting to refuse this usage measurement. Logging out or deleting your account does not automatically delete events and profiles already received by PostHog. For any request concerning this data, email privacy@binette-app.fr. Viewing this page or accepting the terms of use does not constitute consent to usage measurement.

Permission for PostHog to use aggregated and anonymised data to train its AI features is disabled in Binette’s organisation, as are features that use external AI services. These settings were verified on 18 October 2026; they do not allow reconstruction of past usage and do not anonymise usage events linked to the account.

Sentry receives error reports from the app and server, as well as certain performance measurements. Depending on the error and integrations, these reports may include system and app version information, execution traces, and error context. On the server side, this includes, where available, the account ID, request address, and, in case of deletion failure, the relevant file paths. Elements of request content may also be attached. These reports may be linked to your account.

AI call logs include account or resource IDs, the model, token volumes, cost, and call duration. An account ID does not make these logs anonymous.

To limit abusive requests and maintain chat availability, Binette also uses in-memory server counters associated with the account ID and message timestamps. These counters do not contain message text. This limitation is based on the legitimate interest of protecting the service’s operation and availability (Article 6, paragraph 1, f of the GDPR); it is separate from PostHog statistics.

5. Website, external resources, and support

The website is hosted by Cloudflare Workers. Google Fonts and certain Supabase illustrations require requests to these services. A resource request may transmit your IP address and technical information, even without cookies. Dated observations and their scope are listed on the Cookies and site resources page. These do not describe the mobile app’s statistics.

To deliver the pages you request, servers process, among other things, your IP address and request information. This processing, necessary for page transmission, is based on the legitimate interest of making the site accessible. This basis does not automatically cover other uses of data by external services or traffic measurement.

If you email Binette, your email address, message, and attachments are used to process your request. Incoming email for the domain is handled by the mail servers of OVH and the contact and privacy addresses are forwarded to a personal Gmail inbox, where messages are stored. No inbox or local copy is configured in Binette’s OVH forwarding service as of 18 October 2026. This observation does not cover the provider’s technical logs and backups. Nicolas is the only person at Binette with access to these exchanges.

Communications needed to provide the service or handle a warranty claim are processed as part of fulfilling the service obligations. For a general question you send to Binette, processing your contact details and the information needed to reply is based on the legitimate interest of responding to people who contact us. Your reply address and enough information to understand the request are needed to act on it; attachments are optional. Processing requests to exercise your rights is based on obligations under the GDPR, particularly Articles 12 to 22 (Article 6, paragraph 1, c).

6. Providers and processing locations

Supabase handles authentication, the database, and file storage; Railway hosts the app server. Mistral, PostHog, Sentry, Firebase Cloud Messaging, Mapbox, Open-Meteo, Apple, and Google are involved in the functions described above. Cloudflare, Google Fonts, Supabase, OVH, and Gmail are involved in the website or messaging.

The Supabase project is located in the European region eu-west-1. As of 16 October 2026, Railway services were configured in a region in the Netherlands, and the identified PostHog collection address was European. The Sentry account indicates storage within the European Union, verified on 18 October 2026. These details do not guarantee that all access, data processors and processing remain within the European Union.

Provider terms allow for processing outside the European Union and various safeguarding mechanisms, including the European Commission’s standard contractual clauses. The Supabase processing terms and those of Mistral are incorporated into their contractual terms. Data processing agreements with PostHog, Sentry and Railway were concluded on 18 October 2026 for the business operating Binette. The applicable safeguards depend on the services and transfers involved. You can request details or a copy of the applicable transfer safeguards from privacy@binette-app.fr.

The Gmail inbox used for these exchanges is part of the consumer service, without a Google Workspace contract. Google states that it does not offer a data processing agreement or act as a data processor for this service in its privacy help centre. The Google Privacy Policy describes the processing it carries out as part of the service and how to contact it regarding your data. Requests concerning Binette’s processing of your correspondence should still be sent to privacy@binette-app.fr. Google states that it uses servers in several countries, including outside the European Union, and describes the adequacy decisions and standard contractual clauses used for the relevant transfers in its legal frameworks for transfers.

7. Retention and deletion

Account and vegetable garden data are retained so you can access your garden records through your account. Deletion can be requested from Profile → Delete my account or by email. The page Delete my account explains the data concerned and the limits of the mechanism: AI call logs and installations follow a separate cycle; deletion of authentication and diagnostic images may fail without preventing the operation from completing. Deleting the account does not trigger a full purge with all providers.

Chat abuse prevention counters are stored in the server's memory. The limit calculation is based on a rolling 24-hour window. Expired records are removed during clean-ups triggered by service activity, or disappear when the process restarts; their removal is not guaranteed exactly 24 hours after the message.

• For ordinary support emails, the rule is deletion 12 months after resolution, to retain a history for one gardening season. Rights requests and disputes are handled separately; this rule is not an automated purge.
• For error events in the free Developer plan, Sentry provides 30 days of retention, with a duration determined upon receipt of the event. This does not cover all its other data types.
• For the standard API, Mistral states that data is retained during processing and then for a rolling 30-day period for abuse monitoring, unless zero data retention is enabled. Exceptions apply for legal or litigation-related reasons. This period does not determine how long conversations recorded in Binette are kept.
• The one-year window for viewing events in the free PostHog plan does not constitute a guarantee of their deletion after one year.
• Open-Meteo states a retention period of 90 days for its individual API request logs, which may contain coordinates. This does not determine the retention of plots in Binette.

Backup copies are separate from current data. Binette uses the daily backups included in Supabase Pro, with access to the last seven days. This window does not correspond to a deletion period for all copies, and Storage files are not included in these database backups. No immediate deletion of all copies results from account deletion. A technical difficulty does not constitute a basis for retaining your data without a justified duration.

The Railway Hobby plan allows viewing seven days of server logs. According to Railway's documentation, changing the plan may make logs previously outside this window accessible again: these seven days therefore do not constitute a guarantee of log deletion. The service's rules are described in its log documentation.

8. Exercising your rights

You can request access to your data, its rectification, erasure or restriction of processing, under the conditions provided by the GDPR. Portability concerns the provided data processed automatically on the basis of contract or consent. You can object, for reasons relating to your situation, to processing based on legitimate interest and withdraw your consent for the future when it constitutes the basis of the processing.

Email privacy@binette-app.fr and provide the information needed to locate your account. Losing access to your old email address does not affect your rights. If there is reasonable doubt about your identity, proportionate additional information may be requested.

You must receive a response explaining the action taken without undue delay and within one month at the latest. This period may be extended by two months depending on the complexity and number of requests, with an explanation provided within the first month. Where the conditions for erasure are met, the data must be erased without undue delay, subject to legal exceptions. You can file a complaint with the CNIL.

Minors also benefit from these rights. For a question concerning their data, use the same contact address.

9. Information on changes

The update date is at the top of the page. Making this text available does not replace the information that must be provided if a processing activity changes substantially, and does not cancel any previous commitments to keep you informed.