Privacy policy

Last updated : 2026-07-28

Privacy Policy — Fenua'p

Last updated: July 2026. This policy describes the processing of personal data carried out in connection with the Fenua'p application, in accordance with amended Act No. 78-17 of 6 January 1978 on Information Technology and Civil Liberties, applicable in French Polynesia.

1. Data controller

The publisher of the Application (contact: [email protected] and in-app support — Account → Help & support).

2. Data processed

• Account: email address, first and last name, phone number (optional), language, island.
• Use of the services: ride requests, orders, bookings, messages exchanged through the in-app messaging, reviews, saved addresses.
• Location: pickup and destination location of a ride; the driver's position during a ride (shared only with the Customer concerned). Location is never collected in the background outside an active service.
• Providers: professional data (vehicle, license plate, profile photograph) and verification documents (regulatory paperwork) stored in a private storage area and accessible only to persons authorized to carry out verification.
• Identity verification (customers): where a booking requires it (accommodation, vehicle rental — article 10 of the Terms), a copy of an official identity document, a verification photograph where applicable, and the surname, given names and date of birth as shown on the document. These items are stored in a private area, encrypted in transit, accessible only to persons authorized to carry out verification.
• Technical: session identifiers, notification token if notifications are enabled.

3. Purposes and legal bases

• Providing the connection service, fulfilling requests, messaging, ratings and receipts — performance of the contract (Terms).
• Regulatory verification of Providers (in particular passenger transport) — legal obligation and legitimate interest in safety.
• Fraud prevention, platform security, dispute handling — legitimate interest.
• Verifying customers' identity before a booking that exposes a Provider to a risk of material damage, and handling the related claims — legitimate interest in the safety of the property entrusted, balanced against your rights: verification is requested only for the bookings concerned, never for a simple order or a ride.
• Notifications related to account activity — performance of the contract; their receipt can be disabled in the phone's settings.
• No data is used for targeted advertising or transferred to third parties for commercial purposes.

4. Recipients

Data is only accessible to those who need it: the Provider and the Customer of the same service see of each other only the strictly necessary information (first name, masked phone number, position during the ride); the administration team for verification and support; the technical hosting subcontractors and, where applicable, the licensed payment services providers when electronic payments are used.

5. Retention periods

Account data is retained for the duration of use of the service. Service data (rides, orders, bookings, receipts) is retained for the applicable statutory limitation periods. Providers' verification documents are retained for the duration of the partnership. Identity documents provided by customers under article 10 of the Terms are deleted as soon as the service concerned ends, and no later than three (3) months afterwards; where a damage claim is raised, they are retained until the dispute is finally settled, then deleted. If the account is deleted, the data is erased or anonymized, subject to legal retention obligations.

6. Security

Encryption of communications (TLS), compartmentalization of access through security rules at the level of each record, private storage of sensitive documents, encrypted backups, phone numbers systematically masked between users.

7. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. They are exercised directly in the Application: export of your data and deletion of the account (Settings → Privacy), or by email to the contact address. You may also refer the matter to the French Data Protection Authority (CNIL).

8. Minors

The Application is not intended for unaccompanied minors under 15 years of age.

9. Changes

Any substantial amendment to this policy is notified in the Application.