This privacy policy describes how Ibrahima Sory Diallo, sole trader (French entrepreneur individuel) trading under the name Diallo Geo (brand DialloGeo), collects, uses and protects the personal data of visitors to the diallogeo.fr website and the numerique.diallogeo.fr portal, and of users of the DialloGeo iOS app available on the App Store. The other apps have their own policies: DialloGeo Collect (in French), Sama Faktur, Fotoklin, Geoshot and eCarte.
Ibrahima Sory Diallo
Sole trader (French entrepreneur individuel) trading under the name Diallo Geo (brand DialloGeo)
SIREN: 988 751 616 — Trade and Companies Register (RCS): Besançon 988 751 616
SIRET: 988 751 616 00026
APE code: 7112B — Engineering and technical studies
Address: 1 Place de la Mairie, 25500 Les Combes, France
Phone: +33 7 69 37 54 64
Email: contact@diallogeo.fr
The DialloGeo iOS app is a business management tool (cockpit, quotes, invoices, missions, prospects, agenda, SOPs) intended for personal use by the account holder. It talks to a private server hosted on Vercel and to a Supabase database located in Paris (European Union).
Account credentials: email address, hashed password, name — required for authentication.
Business data entered by the user: quotes, invoices, clients, prospects, missions, agenda events, SOPs, notes. This data remains the user's property and is accessible only to them.
Technical data: server logs (IP address, timestamp, route called) for diagnostics and security. Anonymous crash reports via Apple Crash Reports (only if the user has enabled sharing with developers in iOS Settings).
Device identifiers: no advertising identifier (IDFA) is used. No third-party analytics SDK is included.
Face ID / Touch ID — local unlock of the app. Biometric authentication is handled by iOS; no biometric data is sent to DialloGeo.
Camera — optional scanning of paper invoices to extract information (amount, number, date, client). Processed images stay on the device and are not sent to a third-party OCR service.
Notifications — agenda reminders and Pomodoro alerts. No advertising messages.
Providing the management service, backing up the user's business data, account security, technical diagnostics in case of incident.
Performance of the user agreement accepted at account creation (Art. 6(1)(b) GDPR), and the controller's legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
Contact form: name, email address, phone number, company or organisation, type of service, sector, budget and message. This data is used only to answer your request and, where relevant, to prepare a quote. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). The message is stored in the website's administration database and a copy is emailed to contact@diallogeo.fr. An acknowledgement is sent to the address you entered; it repeats only your name, never the content of your message or the other fields. The request is also stored with the page of the form, the first page you visited, the site you came from (address without parameters) and, if the link carried them, the "utm" campaign parameters, so that we know which pages bring in requests.
Abuse protection: the sender's IP address is stored together with the time of sending, to limit the number of messages per address. It is deleted automatically within 25 hours (legitimate interest, Art. 6(1)(f) GDPR).
Audience measurement: Vercel Web Analytics counts page views, country, device type and referring page, without cookies or persistent identifiers: a visit is recognised by a fingerprint of the request that is valid for one day only. No tracking or advertising cookies are placed.
Browser local storage: your light or dark theme choice and a copy of the site's colours are kept in your browser's local storage. This information never leaves your device.
Browser session storage: the first page of your visit, the site you came from and any "utm" parameters of the link are kept in the tab's session storage, which is cleared when the tab is closed. They leave your device only if you send the contact form, together with your request.
Call-back or quote request: name, organisation if any, phone number and/or email address, type of need, preferred call-back time and a description of the fault or need. This data is used to call you back, to diagnose the problem or prepare a quote, and to arrange the service visit. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). The request is recorded as a prospect in the business's management tool and a copy is emailed to contact@diallogeo.fr.
Reserving a hardware item: when sales are open, a reservation records the same contact details, for the same purpose and the same period.
Clients: once a service is ordered, the necessary information (identity, address, content of the service) appears on the quote and the invoice. Legal basis: performance of the contract and accounting obligations (Art. 6(1)(b) and 6(1)(c) GDPR).
“Create my mock-up” simulator: the mock-up is built in your browser, which keeps a draft of it (without the images) until you clear it. When you send it, we receive its configuration (trade, name and town of the business, style, colours, pages, written notes), your contact details and, if you add them, your logo and up to six photos. These data are used only to prepare our conversation about your website project. Legal basis: pre-contractual measures taken at your request (article 6.1.b GDPR). The logo and photos are kept in a private storage space, with no public address, that only the data controller can access. If your request is not followed up, the mock-up and its files are deleted 12 months after it was sent; you can ask for an earlier deletion at contact@diallogeo.fr.
Customer reviews: the reviews shown on the portal are copied from our Google Business Profile, with the name or first name their author chose there. On simple request to contact@diallogeo.fr, a review is removed from the portal.
The portal uses the same cookieless audience measurement as the website, and keeps a single display flag for the reviews in the browser's session storage, cleared when the tab is closed.
Subprocessors (they process data on our behalf and on our instructions):
— Vercel Inc. (United States) — hosting of both sites and of the API functions, which run in Paris; Vercel Web Analytics audience measurement.
— Supabase Inc. — PostgreSQL database, authentication and file storage, hosted in Paris (Amazon Web Services, eu-west-3 region); portfolio and blog images are served through its content delivery network.
— Resend (United States) — sending the email that notifies us of each message received through the forms, and the acknowledgement of the website's contact form.
— OVHcloud (France) — business email (Zimbra) and domain name.
— Apple Inc. — iOS app distribution, push notifications (APNs), optional crash reports.
Third-party services loaded by your browser. When some pages are displayed, your browser contacts the following services directly; they receive your IP address and the technical details of the request (browser, referring page). Nothing you type into the forms is sent to them.
— cdnjs (Cloudflare, Inc., United States) — mapping libraries (MapLibre, Leaflet) for the public map, the drone flight-planning tools and the portal map.
— OpenStreetMap (OpenStreetMap Foundation, United Kingdom) — base-map tiles for those same maps, and the place search (Nominatim) of the mission generator: the text typed into that field is sent to Nominatim.
— Esri World Imagery (Esri Inc., United States) — satellite base map of the drone flight-planning tools.
The typeface is served from our own servers. Links to LinkedIn, Google Maps or the App Store load nothing until you click them. No share buttons or embedded videos are used.
Transfers outside the European Union: several of these providers are based in the United States or the United Kingdom. Depending on the provider, these transfers rely on a European Commission adequacy decision (for example the EU-US Data Privacy Framework, for companies that have joined it) or on the standard contractual clauses adopted by the Commission.
No data is sold, rented out or passed on to third parties for commercial or advertising purposes.
App account and business data: kept while the account is active. Deleted on the user's request (see section 8).
Messages sent through the website and portal forms (prospects): kept for 3 years from the last contact.
Mock-ups sent from the portal (configuration, logo, photos): deleted 12 months after they were sent if the request was not followed up.
Client quotes and invoices: kept for 10 years, the period required for accounting records (article L123-22 of the French Commercial Code).
IP address used for abuse protection: less than 25 hours.
Technical logs: kept for 12 months at most.
Encrypted connection (HTTPS / TLS 1.3) across the whole website and API. Passwords stored hashed (bcrypt). PostgreSQL Row Level Security policies on the database. Optional biometric lock on the iOS app.
Under the GDPR, you have the following rights:
— Right of access: obtain a copy of your data.
— Right to rectification: correct inaccurate data.
— Right to erasure: request deletion of your account and data.
— Right to restriction of processing.
— Right to data portability: retrieve your data in a structured format (JSON / PDF export).
— Right to object to processing.
— Right to give instructions on what happens to your data after your death (French law).
— Right to lodge a complaint with the CNIL (cnil.fr, the French data protection authority).
To exercise these rights, contact contact@diallogeo.fr or write to the address given in section 1. We reply within 30 days.
Deleting your account from the iOS app: Settings → Account → Delete my account. This action is irreversible and permanently deletes all associated data within 30 days.
Downloading, installing and using the app through the App Store involves data processing by Apple Inc. under its own terms, available at apple.com/legal/privacy.
This policy may change to reflect legal or technical developments. The date of the last update is shown at the bottom of the page. App users are informed of any substantial change by email or in-app notification.
Last updated: 9 October 2026