Privacy Policy for TooGather

This Privacy Policy applies to the TooGather mobile application (Package ID: com.twonights.app), published by YA, Inc.
2 Square du Menou, 35200 Rennes, France
Email: yohann.ait-seddik@2-nights.com

2. Data We Collect

Category	Data	Purpose	Retention
Identifiers	Name, email, phone, username	Authentication, account management	While account is active + 2 years after deletion
Profile	Date of birth, profile picture	Personalization, recommendations	While account is active
Location	GPS position	Nearby events suggestions	Usage period + 30 days
Analytics & Tracking	Anonymous identifiers, usage logs	Service improvement, targeted ads	12 months

3. Legal Bases (GDPR)

Contract performance (authentication, account services).
Consent (location, analytics, advertising).
Legitimate interest (security, fraud prevention).

4. Sharing & Transfers

Data hosted on MongoDB Atlas (USA) and Firebase (USA).
Standard Contractual Clauses (SCC) in place for EU–US transfer.
No sale of personal data to third parties for marketing.

5. Cookies & Trackers

Our website uses Google Analytics and Firebase for traffic analysis. You can manage or refuse cookies via your browser settings.

6. Security Measures

TLS 1.2+ in transit, at-rest encryption, role-based access, quarterly audits.

7. User Rights

You have the right to:

Access, rectify, or delete your data via the app or at yohann.ait-seddik@2-nights.com.
Object to processing or request limitation.
Withdraw consent at any time (app settings, browser).
File a complaint with a supervisory authority (e.g. CNIL).

8. Minors

Our services are intended for users aged 16 and over. Minors under 16 require parental consent.

9. Policy Updates

We may update this policy. Changes will be communicated in-app and via email at least 30 days prior.

10. Contact

For privacy inquiries: yohann.ait-seddik@2-nights.com