Privacy Policy for the LasKar Mobile Application

Last updated: July 7, 2025

At KARDINAL, safeguarding your personal data is our top priority. This Privacy Policy explains, in clear and comprehensive terms, what data we collect, how we process it, and what rights you have.

1. Who we are

LasKar is published by KARDINAL, a simplified joint-stock company with share capital of €3,627.70, registered in the Paris Trade and Companies Register under number 809 234 586 (SIRET 809 234 586 00034), whose registered office is at 10 rue de Penthièvre, 75008 Paris, France.

Publication Director: Jonathan Bouaziz.

If you have any questions, please call us at +33 1 85 76 20 29 or email contact@kardinal.ai.

As the data controller, we comply with the EU General Data Protection Regulation (GDPR, Regulation 2016/679).

2. What data we collect

When you install and use LasKar, we only gather the information strictly necessary for the app to function:

  • Phone number: Required at sign-up and used as your unique identifier.
  • First name: Optional, to personalise your in-app experience.
  • Route and favourite addresses: Stored only on your device to plan and save your itineraries. Uninstalling the app deletes these local data automatically.
  • Payment data: For Pro subscriptions, we collect minimal details—transaction ID, subscription type (Freemium or Premium), and purchase/renewal date—via Google Play or Apple’s in-app purchase system. We do not store or access your credit card information; it is handled exclusively by Google Play or Apple.
  • Technical data (anonymised): Device type, operating system, IP address, performance metrics—collected via Firebase Analytics.
  • Usage data (anonymised): Frequency of use, errors encountered, navigation patterns—also via Firebase Analytics.

3. Sign-up and authentication

  • Registration and login are managed through Google Firebase Authentication, which retains only your phone number and first name.
  • A one-time code (OTP) is sent by SMS during your first login; it expires after 5 minutes and is not stored after verification.
  • After multiple failed attempts, Firebase temporarily blocks further sign-in attempts according to its security policy.

4. Why we process your data and our legal bases

We process your data to:

  • Operate and enhance LasKar: Route calculation, tour optimisation, and feature development.
  • Provide customer support: Responding to inquiries and resolving issues.
  • Ensure security: Verifying accounts, detecting fraud, and maintaining system stability.
  • Send transactional communications: Sign-up confirmations, subscription reminders, and security alerts.
  • Conduct marketing (with your consent): Newsletters and targeted promotions.
  • Fulfil legal obligations and protect legitimate interests: Regulatory compliance, dispute management, and potential M&A activities.

Our processing is based on:

  • Performance of the contract (your access to the app)
  • Your consent (for marketing)
  • Our legitimate interests (app improvement and security)

5. Who sees your data

  • Our authorised internal team
  • Key subprocessors:
    • Google Firebase (Authentication & Analytics)
    • Google Play (In-app purchases)
    • Apple App Store (In-app purchases)
    • Analytics providers (Firebase Analytics)
    • Email-based customer support
  • Public authorities, if required by law

We do not sell, trade, or rent your personal data. No data are transferred outside the EU without GDPR-compliant contractual safeguards.

6. Data retention and inactivity

  • Account and subscription information are retained as long as your account remains active.
  • Accounts inactive for 24 consecutive months will have their personal data deleted.
  • Route and favourite addresses remain on your device until you delete them or uninstall the app.
  • Marketing data are kept until you request erasure.

7. Policy updates

We may update this Privacy Policy at any time. The “Last updated” date at the top reflects the most recent revision. Please review it periodically.

8. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing, object, and port your data. To exercise these rights, email rgpd@kardinal.ai

You may also lodge a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr

9. Minors

LasKar is intended for users aged 18 and over only.

 

By continuing to use LasKar, you acknowledge that you have read and accept this Privacy Policy in its latest version.