Privacy policy
v9 · 2026-10-13
Privacy Policy — Fenua'p
Version 9 · effective 13 October 2026
Fenua'p is published by Tepaeva Taiore, a sole trader established in French Polynesia and director of publication: Immeuble Les Petits Gauguins, 98714 Papeete, French Polynesia · phone +33 7 66 00 48 32 · [email protected]. Registration details (Tahiti number, patente) will be published here once obtained. Hosting: Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany (contabo.com).
Language. These terms are written in French. The English and Japanese versions are provided for information; in case of discrepancy, the French version prevails.
1. Who processes your data
Data is processed by Fenua'p, publisher of the Platform, in French Polynesia. Contact: [email protected].
The General Data Protection Regulation (GDPR) has applied in French Polynesia since 1 June 2019, alongside Law no. 78-17 of 6 January 1978 on data protection, applicable to the territory since 1980. The CNIL is the competent authority: anyone who believes their rights have been disregarded may lodge a complaint with it.
2. Data collected
| Category | Examples | Why |
|---|---|---|
| Account | email, password (hashed), public pseudonym, real identity (private), phone, language | create and secure the account |
| Transactions | bookings, orders, rides, amounts, dates | deliver the service, provide receipts |
| Location | position during a ride or delivery | compute a route, track a ride |
| Content | messages, reviews, published photos | run chat and reviews |
| Professional documents | ID, licences, certificates, date of birth, nationality (Providers) | verify the right to operate and the minimum age of 18 |
| Technical | device, connection logs, notification token | security, notifications |
| Server access log | date and time, IP address, country, requested address, response code, browser and system, referring page | server security, understanding usage to improve the platform |
No banking data is collected: Fenua'p collects no payment.
3. Purposes and bases
- Performance of the service (matching, bookings, messaging);
- Legal obligations (retention of records, fraud prevention);
- Legitimate interest (security, abuse prevention, service improvement);
- Consent for non-essential communications and background location,
withdrawable at any time.
3 bis. Audience measurement
We count visits to know which services are used, and on which islands. This measurement is hosted on our own server: no outside provider receives it.
No cookie is set, and no IP address is stored. What is recorded: the page viewed, the country and approximate city, the language, the device type and the browser. None of it identifies you, and none of it is linked to your account.
That is why no banner is shown: there is nothing to accept or refuse. If you would rather not be counted, your browser's "Do Not Track" setting is respected.
4. Who receives your data
- The Provider concerned by your booking: strictly necessary information
(pseudonym, then phone at the time of the service).
- Our technical subcontractors: server hosting, email delivery, push
notification service, maps and routing engine.
- Authorities where the law requires it.
Your data is never sold, rented or shared for advertising purposes.
5. Retention periods
| Data | Period |
|---|---|
| Active account | while the account exists |
| Deleted account | profile anonymised immediately |
| Transactions (records) | 10 years (accounting obligations) |
| Messages | 3 years after the last exchange |
| Professional documents | validity period + 3 years |
| Server access log | 366 days, then automatic deletion |
| Ride location | deleted at the end of the ride |
The access log is kept on Fenua’p’s server, with an encrypted backup at Hetzner (Germany). It is never sold, transferred, or used for advertising.
6. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability.
The app lets you exercise two of them directly: export all your data and delete your account (Account → Privacy). For the others, write to [email protected]; you will receive an answer within 30 days.
7. Security
Exchanges are encrypted (HTTPS). Passwords are stored hashed. Mobile sessions are encrypted in the device's secure keychain. Data access is partitioned by row-level rules in the database: a user can only read their own data. Identity documents are stored in a private area, accessible only to the depositor and the administration.
8. Reviews and anonymity
Reviews are published under the pseudonym chosen by the user, separate from their real identity. Given the size of the territory, authors' identities are never exposed, including to the Provider being reviewed.
9. Cookies and trackers
The Platform uses no advertising cookies and no third-party trackers. Only technical storage necessary for operation is used (session, language, display preferences).
10. Minors
Client access is open from the age of 15. Below 15, a parent or legal guardian creates and manages the account. Fenua’p does not knowingly collect the data of a child under 15 without a parent’s involvement. Becoming a provider requires being an adult — 18 or over.
11. Changes
Any substantial change is notified in the app and requires fresh acceptance.
12. Provider feedback
Feedback left by providers about a customer (rating and tags) appears on their public profile in aggregate only — recommendation percentage and most frequent tags — from three ratings onwards, so that no individual author can be identified. No individual rating is published.
13. Residency declaration
Users who want the resident rate declare that they live in French Polynesia and state their island. Only that island is recorded, with the date of the declaration; it appears on bookings made at the resident rate, so the Provider knows what to check on site. No identity document is requested or kept for a User: the document is shown to the Provider on site, and Fenua’p receives no copy of it. The declaration can be withdrawn at any time in the Application; it is erased with the account.