Privacy policy

This English version is provided for convenience. In the event of any discrepancy, the French version (Politique de confidentialité) prevails.

1. Data controller

Oraklia Technologies SAS

497 route de Nice, 06560 Valbonne, France

GDPR contact: rgpd@five-angels.com

2. Data collected and purposes

2.1 Account data

When you create your account, we collect:

• ·First and last name
• ·Mobile telephone number (login identifier)
• ·Email address (optional)
• ·Password (encrypted, never accessible in clear text)

Purpose: Creation and management of your account, authentication, communication about the service.

2.2 Location data (GPS)

During an alert or while preventive mode is active, we collect your GPS position in real time.

Purpose: Transmission of your position to your designated guardian angels during an alert. This data is never used for commercial or advertising purposes.

2.3 Video and audio data

In Alert mode, the application records 5 to 10 second video and audio sequences transmitted to our secure servers. In Preventive mode, only sound is captured: short audio sequences of about fifteen seconds are recorded and then transmitted to our secure servers to be analysed by our artificial intelligence model. The camera is not used during monitoring; video only starts if an alert is triggered.

Purpose: Gathering evidence during an alert and automatic danger detection by the AI. In Preventive mode, the sound analysis is carried out on our secure servers hosted in France, not on the device. The sequences are kept for as long as necessary for the analysis and, in the event of an alert, for gathering evidence.

2.4 Protection circle data

We store information about your guardian angels (name, email or telephone number) as well as the status of the relationship (invited, accepted, refused, revoked).

Purpose: Management of your protection circle and sending alerts to your designated guardians.

2.5 Subscription data

Information about your subscription (type, status, renewal date), processed through the App Store or Google Play. We never store your bank details.

2.6 Technical data

Device identifier, OS version, application version, anonymised usage logs.

Purpose: Proper functioning of the service, debugging, improvement of the application.

2.7 Contact form

Name, email, telephone (optional), message.

Purpose: Responding to your request.

2.8 Website audience measurement

When you visit the five-angels.com website, we record the page visited, the date and time, the website you came from where applicable, the category of your device (desktop, mobile or tablet) and the language of your browser.

Your IP address is never stored. It is used only, for the duration of the calculation and without being kept, to produce a hashed technical identifier using a secret key drawn at random every day and then destroyed together with that day's data. It is therefore technically impossible for us to re-identify you, or to know that you had already visited the day before.

Purpose: Knowing how many people visit the website and which pages interest them. This data is never sold, never used for advertising purposes and never matched with your account if you have one. No third-party measurement tool is used, and no data is transmitted outside our hosting provider.

2.9 Newsletter

Email address, chosen language, date of subscription confirmation.

Purpose: Sending you, with your consent, news from Five Angels (new features, premium zone openings, life of the project). These emails are rare: a few messages a year. A subscription made from the website only takes effect once confirmed through a link sent to your address (double opt-in): without a click within 48 hours, the address is not kept. Users of the app who tick "receive news" in their profile fall under the same processing. Every message contains an unsubscribe link, effective immediately. Subscribers are managed in the Brevo tool (see section 5).

3. Legal basis for processing

4. Retention periods

• ·Account data: duration of the contractual relationship + 3 years after the account is closed
• ·Alert video/audio data: 2 days after a confirmed return to safety, 30 days if the alert was never closed - unless retention is requested for legal proceedings
• ·Preventive mode audio recordings: 2 days, and immediate deletion if you confirm that you are safe at the end of the monitoring session
• ·Contact form data: 3 years from the last contact
• ·Newsletter: until you unsubscribe, and at the latest 3 years after your last interaction with our emails; an unconfirmed subscription is never recorded
• ·Technical logs: rolling 12 months
• ·Website audience measurement: 30 days for detailed data, 24 months for aggregated daily counters, which no longer allow any visitor to be singled out

5. Recipients of the data

Your data is accessible:

• ·To the authorised teams of Oraklia Technologies SAS (support, security, technical)
• ·To your designated guardian angels for alert data (GPS position, video, status)
• ·To our technical processors (hosting, infrastructure), all bound by strict confidentiality obligations

We never sell your data to third parties.

Main processors:

• ·OVH (hosting of the five-angels.com website, France)
• ·Scaleway (hosting of the application infrastructure and data storage, France)
• ·Brevo (sending of transactional SMS and emails, management of newsletter subscribers, European Union)
• ·Apple Inc. / Google LLC (distribution of the application, payments and push notifications)
• ·Expo Application Services, Inc. (technical routing of push notifications, United States)
• ·Google Maps Platform (conversion of a GPS position into a readable address, United States)
• ·OpenStreetMap Foundation / Nominatim (locating the addresses of partner organisations)

6. Transfers outside the European Union

Your video and audio recordings, as well as the analyses carried out by our artificial intelligence, are hosted and processed exclusively within the European Union. They are not transferred outside the EU.

Some processors may, however, process data outside the EU:

• ·Apple Inc. and Google LLC: subscription management and routing of push notifications
• ·Expo Application Services, Inc.: technical platform for routing push notifications. These notifications contain the first name of the protected person and a technical alert identifier, and never any video or audio recording or GPS position
• ·Google Maps Platform: conversion of a GPS position into a readable address, when that address needs to be shown to a guardian angel or inserted into an emergency message

These transfers are governed by standard contractual clauses approved by the European Commission or by other appropriate mechanisms in accordance with the GDPR.

7. Data security

Oraklia Technologies SAS implements appropriate technical and organisational measures to protect your data:

• ·Encryption of data in transit (TLS 1.2 and 1.3)
• ·Encryption at rest of video and audio recordings (AES-256)
• ·Daily database backups, encrypted before being stored off the server, kept for 30 days
• ·Storage of media on a European infrastructure isolated from the public web, accessible only through time-limited signed links
• ·Data access restricted to authorised staff
• ·Access logging
• ·Regular security testing
• ·Security incident management procedure

8. Your rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679), you have the following rights:

• ·Right of access: obtain a copy of your personal data
• ·Right to rectification: correct inaccurate or incomplete data
• ·Right to erasure: request the deletion of your data ("right to be forgotten")
• ·Right to restriction: temporarily restrict the processing of your data
• ·Right to data portability: receive your data in a structured, machine-readable format
• ·Right to object: object to the processing of your data in certain cases
• ·Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before that withdrawal

To exercise your rights: rgpd@five-angels.com

We undertake to respond within one month of receiving your request. This period may be extended by two further months for complex requests.

You also have the right to lodge a complaint with the CNIL (the French data protection authority, Commission Nationale de l'Informatique et des Libertés): www.cnil.fr

9. Cookies, audience measurement and similar technologies

The five-angels.com website does not set any cookies. No advertising cookies, no third-party trackers, no external measurement tool. This is why no consent banner is shown to you: we have nothing to ask, since we write nothing on your device for tracking purposes.

Only two pieces of information are remembered in your browser's local storage: your language preference (French or English) and, where applicable, the fact that you dismissed the English-version suggestion shown to English-speaking browsers. This information never leaves your device, is never transmitted to our servers, and disappears if you clear the site data. It is strictly necessary for the service you yourself requested by choosing a language or dismissing that suggestion.

Website audience measurement is carried out entirely on our server, without setting or reading anything on your device and without ever storing your IP address - see section 2.8.

The mobile application does not use cookies. Technical device identifiers may be used for security purposes and for the proper functioning of the service.

10. Minors

The Five Angels service is intended for people aged 15 and over. For any minor user (aged 15 to 17), the consent of the holder of parental authority is required. We do not knowingly collect data about people under 15.

11. Changes to this policy

Oraklia Technologies SAS reserves the right to amend this policy at any time. In the event of a substantial change, you will be informed by email or by notification in the application at least 30 days before the changes take effect.

Last updated: October 2026