31.10.2026
Alexandre Latour, Les Vernayes 11, 2607 Cortébert, Suisse. Contact: contact@app4all.ch.
Email address and (hashed) password; the content you create; IP address for login throttling (kept 15 minutes); for each open session, the device, IP address and last visit; a log of sensitive actions (sign-ins, security changes), kept 180 days; language preference; referrals: the link between your account and the account that invited you or that you invited, with its dates, deleted with either account.
Providing the portal features, securing your account (MFA, throttling), sending service emails. No advertising, no profiling, no data resale.
Hosting, object storage and email delivery: Infomaniak (Switzerland). Payment: Stripe — card details are entered at Stripe, never with us; in the Android app, Google Play, which collects the payment and only passes us the state of the subscription. Sign-in with Google or Microsoft: the chosen provider receives your sign-in request and passes us your verified address. Device notifications: your browser's push service (Google, Apple, Microsoft, Mozilla or Samsung) only receives an empty signal, never the content of the notification. AI assistant, translation and dictation: Infomaniak AI Tools — only the excerpts needed for your question, the text to translate or the dictated audio, for the duration of processing; audio is not kept. Meals: shopping dictation is transcribed by Infomaniak AI Tools, then the recognised text and the titles of your recipes (150 at most) go to the language model, which finds the recipe mentioned; to import a recipe, the App4All server downloads the page and its photo, so the site visited never sees your IP address. Weather: Open-Meteo, queried by the server with the coordinates of the chosen city and, in Travel, those of the starting stage of a trip outside Switzerland (to learn its time zone). Public transport (Travel): the server sends the exact coordinates of two stages, with the date and time of the journey, to transport.opendata.ch (Switzerland) or api.transitous.org (elsewhere). Visit ideas (Trips): the server sends the coordinates of each stop, or your location when you ask for “Near me”, to Wikipedia (Wikimedia Foundation) and caches the answers for a week; article thumbnails are loaded by your browser from Wikimedia servers. Route drawing (Trips): the server sends the coordinates of two consecutive stops to the OpenStreetMap routing service (routing.openstreetmap.de, FOSSGIS e.V., Germany) and caches the routes for a month. Geocoding: OpenStreetMap Nominatim — the search text goes through the server, which caches the answers for a week. Maps (Travel): OpenStreetMap tiles (tile.openstreetmap.org, OpenStreetMap Foundation, United Kingdom) are loaded DIRECTLY by your browser when a map is shown; that service then sees your IP address, the site of origin and the areas viewed. Video calls (Calendar): a meet.jit.si link leads to the public Jitsi Meet service, which sees the participants who open it. Photo places (Gallery): the GPS position stored in your photos is read, and only the square of about one kilometre that contains it is kept; that square, with nothing that identifies you, is sent to Nominatim (OpenStreetMap) to learn the name of the town.
Technical cookies only: session (30 days without a visit, 90 days at most), language (1 year), and during a sign-in, for a few minutes, those of the second factor, of signing in with Google or Microsoft and of a family invitation; after an invitation link, the code of the person who invited you (30 days). No third-party cookies, no trackers.
Your data is kept as long as your account exists. Backups: 14 days. Technical logs: automatic rotation. Files in a transfer: erased at the expiry chosen by the sender, at most 30 days, or as soon as it is withdrawn.
Access, rectification, portability (JSON export from your profile), erasure (account deletion from your profile, immediate and irreversible).
Hashed passwords (bcrypt), MFA, vault documents and files in transfer encrypted at rest (XChaCha20-Poly1305), security headers, backups to Swiss storage.