This policy describes the data processed by the Agoh mobile app (iOS and Android) and its sign-in page auth.agoh.app. Agoh helps organizers find event providers, and helps providers showcase their work, receive requests and coordinate events.

1. Data controller

The data controller is Ramah GUEDEGBE, sole proprietor, trading as Glabs325 (SIREN 523 501 765), 235 rue Saint-Honoré, 75001 Paris, France. Contact: [email protected].

2. What Agoh does not do

  • Agoh does not process payments: the current version has no in-app purchases, no paid subscriptions, no wallet, no escrow and no ticketing. Payments between organizers and providers are made directly between them, outside the app.
  • Agoh does not collect your payment card details.
  • Agoh does not sell your personal data and does not run targeted advertising.

3. Data we process

3.1 Account and sign-in

You sign in with your Google or Apple account, on the secure page auth.agoh.app, through Firebase Authentication (Google). We receive a technical account ID, your email address and, depending on what the provider shares, your name and photo. Agoh never receives your Google or Apple password. If you use Apple's "Hide My Email", we only receive a relay address.

3.2 Profile and showcase

The information you enter: display name, profile picture and banner, description, trades and services, service areas, prices or products, reception venues, portfolio (photos and descriptions of past work) and the contact details you choose to show. A provider profile is public: other users can see it and it can be shared by link.

3.3 Events, requests and messages

The events you create (title, date, place, photos, visibility), participations, crews and coordination tasks, requests sent or received between organizers and providers, and the messages exchanged in those requests.

3.4 Places

Places (city, area, event address) are the ones you enter. Address search and validation use Google Maps Platform (Places, Geocoding).

3.5 Technical data

  • Notifications: a Firebase Cloud Messaging device token, if you allow notifications.
  • Usage statistics (Firebase Analytics): screens viewed, main actions, app version, device type, country and language, technical installation identifiers.
  • Crash reports (Firebase Crashlytics): technical error trace, device model, OS and app version.
  • Remote configuration (Firebase Remote Config): app settings, including the minimum required version.

3.6 Support

If you contact us (email, WhatsApp or Messenger), we process your message and anything you attach to it.

4. Purposes and legal bases

  • Providing the service (account, profile, showcase, events, requests, messages, notifications): performance of the contract (terms of use).
  • Security, fraud prevention and moderation (reports, abuse, impersonation): legitimate interest.
  • Statistics and crash fixing to improve reliability: legitimate interest.
  • Push notifications and access to photos or camera: consent, given through your device permissions and revocable at any time in its settings.
  • Support and requests about your rights: legitimate interest and legal obligations.

5. Hosting and service providers

Data is hosted by Google Firebase (Google Cloud):

  • Firebase Authentication (accounts), Realtime Database (profiles, events, requests, messages), Cloud Storage (photos), Cloud Functions (server-side processing, including account deletion), Cloud Messaging, Analytics, Crashlytics, Remote Config;
  • Google Maps Platform for address search;
  • Google and Apple as sign-in providers;
  • Pexels, if you pick an illustration from its image library: only your search query is sent;
  • Apple App Store and Google Play to distribute the app;
  • our email provider for support.

Some of these providers may process data outside the European Economic Area, in particular in the United States. These transfers rely on the safeguards provided by law (EU-US Data Privacy Framework adequacy decision or standard contractual clauses).

6. What other users can see

Your provider profile, portfolio and public events are visible to other users. Your private events are only visible to you and the people you add to them. A request and its conversation are visible to both parties involved.

7. Retention

  • Account, profile, events, portfolio, photos: as long as your account exists. They are deleted when you delete your account (see the account deletion page).
  • Requests and conversations with another user: they are also part of the other party's history. After you delete your account they are kept for that person, but without your profile or contact details: you appear as "deleted account". The messages you sent remain readable by that person. If the other party has also deleted their account, the request and the conversation are deleted.
  • Statistics and crash reports: according to Google's retention periods (Crashlytics: 90 days; Analytics: 14 months after the last activity).
  • Support exchanges: as long as needed to handle the request, then at most 3 years after the last exchange.
  • Payment-related data from older versions (before 6.0): kept for the legal accounting periods (up to 10 years).

8. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, and the right to set instructions about your data after your death. You can edit your profile directly in the app and delete your account from the Profile tab, Danger zone section (see the dedicated page). For any other request, email [email protected] from your account's address. We reply within one month. You can also lodge a complaint with the CNIL (www.cnil.fr) or your country's data protection authority.

9. Device permissions

  • Photos and camera: to add a profile picture, a banner, event or portfolio photos.
  • Notifications: to be told about new requests, messages and invitations.
  • Location: if the app asks for it, only to suggest results near you; you can refuse and still use the service.

10. Minors

Agoh is open to people aged 15 and over, the age of digital consent in France. Between 15 and 18, use is under the responsibility of a parent or guardian. Creating a pro page and offering services is reserved for adults. We do not knowingly collect data about children under 15; if you believe a child has created an account, contact us and we will delete it.

11. Security

Communication with our servers is encrypted (HTTPS). Data access is restricted by Firebase security rules: each user can only modify their own data.

12. Changes

This policy may change, in particular if paid plans are added. The update date shown on this page is authoritative; we will tell you in the app about any significant change.

13. Contact

Ramah GUEDEGBE, sole proprietor, trading as Glabs325 (SIREN 523 501 765), 235 rue Saint-Honoré, 75001 Paris, France. Email: [email protected].