Last updated: 11 October 2026
1. Data controller
The data controller is Linier Labs SAS, 9 allée du Bigné, 64140 LONS, France, reachable at contact@girlsconnect.net (the "Publisher").
2. Data collected
- Profile data: first name/username, date of birth, photos, description, interests, city.
- Verification data: items provided during profile verification (e.g. verification photo), used only to check eligibility.
- Location data: approximate location used to suggest nearby members, groups and outings. It is never shown precisely to other members.
- Content: posts, comments, outings, groups, private messages, reports.
- Account and usage data: email, login credentials (including Google Sign-In where applicable), preferences, technical logs, device identifiers, push notification token.
- Purchase data: subscription status and in-app purchase history (via the app stores), without your payment card details, which we never receive.
3. Purposes and legal bases
- Providing the service (account, connecting members, outings, messaging) — performance of the contract (Terms of Use).
- Profile verification and moderation (community safety, handling reports) — performance of the contract and legitimate interest.
- Notifications (push and service-related emails) — performance of the contract; configurable in the App.
- Subscriptions and purchases — performance of the contract.
- Advertising and marketing measurement (ad display, install attribution) — consent where required.
- Service improvement and statistics — legitimate interest.
- Legal obligations (retention of certain data, legal requests) — legal obligation.
4. Recipients and processors
Your data is processed by our technical providers, solely on our behalf:
- Amazon Web Services — hosting of servers, data and images (eu-west-3 Paris region).
- Google Firebase — sending push notifications.
- Google — sign-in with a Google account (if you choose it), map services.
- RevenueCat — management of subscriptions and in-app purchases.
- Google AdMob — displaying advertising in the app.
- AppsFlyer — install attribution measurement (referrals, deep links for external sharing, marketing).
Your data is never sold or rented to third parties.
5. Transfers outside the European Union
Some providers may process data outside the EU. In such cases, transfers are governed by appropriate safeguards (European Commission standard contractual clauses, adequacy decisions).
6. Retention periods
- Profile data and content: for the lifetime of the account.
- After account deletion: profile data and content are deleted, subject to legal retention obligations.
- Technical logs and moderation data: limited and proportionate periods, in particular for security and the management of sanctions.
7. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection, portability, as well as the right to set post-mortem instructions. You can exercise these rights at contact@girlsconnect.net. You can also delete your account at any time from the App.
8. Security
Communications between the App and our servers are encrypted (HTTPS). Access to data is restricted and controlled, and a moderation team ensures the safety of the community (profile verification, handling reports).
9. Minors
The App is strictly reserved for adults (18 and over). See our note on the protection of minors.
10. Cookies and trackers
On the girlsconnect.app website
On your first visit, a banner asks for your consent before any advertising cookie or tracker is placed. Until you click “Accept”, no advertising measurement tool (Google Ads, AppsFlyer) is loaded. “Decline” is just as easy as “Accept”, and declining has no effect on your visit.
If you accept, two tools are activated for a single purpose: measuring the effectiveness of our advertising campaigns.
- Google Ads tag (Google Ireland Limited) — conversion measurement: it tells us whether a visit coming from a Google ad led to a click to the App Store or Google Play. It places measurement cookies on the website (“_gcl_au”, “_gcl_aw”) lasting up to 90 days. We do not use it to personalise advertising (no retargeting).
- AppsFlyer Smart Script (AppsFlyer Ltd) — install attribution: when you arrive from an ad, it adds the origin of your visit (for example the Google click identifier “gclid” or “utm” parameters) to the download links, so that an installation of the App can be linked to the campaign that generated it. This information is kept in your browser's local storage (advertising parameters expire after 2 hours) and sent to AppsFlyer when you tap a download link.
Legal basis: your consent (Article 82 of the French Data Protection Act and Article 6(1)(a) GDPR). Duration: your choice, accept or decline, is kept for 6 months in your browser and then asked again; storing this choice does not require consent.
Withdraw your consent at any time, as easily as you gave it: click the “Manage cookies” link at the bottom of every page (or here), then “Decline”. The Google Ads cookies placed on the website and the Smart Script data are then deleted from your browser, and no further measurement takes place. You can also delete cookies in your browser settings.
In the mobile App
The mobile App uses technical identifiers necessary for its operation, as well as advertising trackers (AdMob) and marketing measurement trackers (AppsFlyer) subject to your consent where regulations require it (in particular via the tracking consent prompt on iOS).
11. Changes to this policy
This policy may change. In the event of a substantial change, you will be informed by any appropriate means. The update date appears at the top of this document.
12. Contact
For any questions regarding your personal data: contact@girlsconnect.net.