Privacy Policy

Last updated: October 10, 2026

1. Who we are

iPool is published by Camille Mapoula, sole trader (auto-entreprise), registered under SIRET 814 697 918 00021, 385 avenue Jean Giono, 83630 Régusse, France. For any question about your data, contact us at contact@ipool.app.

2. What data we collect

• Account data: email address, password (never stored in plain text).
• Your business information: company name, address, phone, email, business ID — that you enter yourself and that appears on your documents (reports, contracts).
• Your own clients' data: the information you enter in the app about your clients (names, addresses, phone numbers, pool specifications, equipment photos, pages of paper contracts photographed or picked from your photos). The app only accesses the photos you pick yourself, never the rest of your photo library; the text of a paper contract is read on the phone, then its pages are saved with the contract. You remain responsible for this data under GDPR; iPool acts solely as a technical processor to store it and make it accessible to you.
• Payment data: fully handled by our payment provider (see the list of processors below). iPool never has access to your card number.
• Your invoicing software credentials: only if you choose to link your INFast account to import your clients. They are used for that import only (see the Security section).

3. Why we use this data

• To provide the service: storing your data, generating your documents, syncing across your devices.
• To manage your subscription and billing.
• To contact you when needed (support, important service information).

4. Who has access to your data (processors)

• Google Firebase / Google Cloud — hosting, authentication and database.
• Stripe — card payment processing.
• Vercel — server functions related to subscription and account management.
• IONOS — mail service for the contact@ipool.app address, which sends service emails (a technician's sign-in details and access on the Team plan).
• RevenueCat — management of subscriptions purchased in the App Store or Play Store. It receives your account's technical identifier, never your client data. Payment itself is processed by Apple or Google.
• Public mapping services (Photon, Nominatim and OSRM, based on OpenStreetMap) — to place a contract on the map, the pool's address is sent; to order a route, the coordinates of the visits and, if you start from your position, that position, once. No name, phone number or email is sent, and nothing is stored by iPool.

These processors may handle data outside the European Union; where that is the case, they rely on Standard Contractual Clauses approved by the European Commission. iPool never sells your data to third parties.

5. Data retention

Your data is kept for as long as your account remains active. You can permanently delete your account and its data at any time from the app settings ("Delete my account"), or request deletion by writing to contact@ipool.app. Before doing so, the "Export everything" button lets you keep a copy.

6. Your rights

Under GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. To exercise these rights, contact contact@ipool.app. You may also lodge a complaint with the French data protection authority, the CNIL.

7. Security

• Encryption: all communication between the app and our servers is encrypted (HTTPS). Data is also encrypted on the servers of our professional hosting infrastructure.
• Account isolation: every account is isolated. Security rules enforced by the server, not just by the app, check every read and every write: no other user can access your data.
• Team plan: the manager can access all of the company's data; a technician can only access the clients, reports and contracts in their area or assigned to them. A technician cannot grant themselves more rights or change the subscription.
• Password: never stored in plain text. Deleting your account requires entering it again.
• Technician accounts: when the manager creates one, the technician receives their sign-in email and a temporary password by email, and is asked to change it the first time they sign in. They are also notified by email when their access changes. iPool does not keep that temporary password anywhere: only the email received contains it.
• Linked invoicing software: if you link your INFast account, its access key is encrypted on our servers and never sent back to your device. The access requested is read-only: iPool cannot create or modify an invoice. Unlinking that account, or deleting your iPool account, erases the key.
• On your device: the app keeps a copy of your data so it can work offline. If another account signs in on the same device, it has no access to the previous account's data. We recommend protecting your phone with a lock code.
• Payment: payments are processed by a PCI-DSS certified provider; iPool never has access to your card number.

8. Cookies

The showcase site uses no tracking or advertising cookies. The app uses your browser's local storage (necessary for it to work offline), not cookies in the strict sense.

9. Changes to this policy

This policy may be updated at any time; the last update date appears at the top of this page.