Privacy policy
Last updated: May 20, 2025
This privacy policy aims to inform you, in full transparency, about how your personal data is collected, used, and protected when you use the NOUSTEP mobile application.
This mobile application is published by NOUSTEP, a simplified joint stock company (SASU) with a share capital of €1,000, whose registered office is located at 9 Allée Charles Grosperrin, 93300 AUBERVILLIERS, France, registered with the Bobigny Trade and Companies Register under number 943 693 002.
1- Data Controller
The processing of your personal data is carried out by NOUSTEP, which is considered the data controller under the General Data Protection Regulation (GDPR).
2- Personal Data Collected
As part of your use of the NOUSTEP mobile application, we collect and process various categories of personal data about you.
When creating your user account, we collect your email address, password, and, where applicable, your Google ID if you choose to log in via this service. This data is essential for your authentication and the secure management of your access to the application.
When you enable geolocation, we process your real-time location data to provide you with contextualized information, such as nearby shops or services, or connections with other passengers in the same terminal. This processing is strictly subject to your prior consent, which you can withdraw at any time in your device settings.
The application may also collect certain information related to your flights, such as the flight number, the relevant airport, and the date and time of departure, in order to personalize the services offered (alerts, display of practical information, suggestions of available services).
When you use the community discussion or passenger support space, we record the content you post or share (messages, comments), associated with your username or account ID, as well as the dates and times of posting.
Furthermore, if you send us feedback via the application interface (the “give your feedback” function or contact form), we collect the information contained in your message, along with the email address linked to your account if applicable.
Finally, we process certain behavioral data related to your use of the application, such as the number of clicks, the time spent on a specific section, and your navigation path. This data is collected with your consent, notably for statistical analysis, service improvement, and, where applicable, the display of advertisements via our partner Google AdMob.
All of these data processing activities are governed by strict security and confidentiality measures, detailed in the following sections.
3- Purposes and Legal Bases of Processing
The personal data collected by the application are processed for the following purposes:
Creation and management of the user account: we process your data to enable you to create and manage your personal account, authenticate yourself, and secure your access. This processing is based on the performance of the user agreement for the application.
Geolocation and personalization of services: if you consent, we use your location data to provide you with information adapted to your geographical situation (flights, shops, services available within the airport). This processing is based on your consent.
Display of advertisements via Google AdMob: the application uses the Google AdMob advertising network. This processing is based on your prior consent.
Participation in the passenger support and discussion space: we enable users to communicate with each other, ask questions, or share information. The exchanged messages are processed as part of the performance of the user agreement.
Analysis of application usage: subject to your consent, we analyze usage behaviors within the application (clicks, navigation, time spent) to improve functionalities and enhance the user experience.
Reception and processing of user feedback: when you send us suggestions or complaints, we use your data for support purposes and continuous improvement. This processing is based on our legitimate interest in developing the application.
Management of rights requests: we may process certain data to respond to your requests for access, rectification, objection, or deletion. This processing is based on a legal obligation.
4- Recipients of Personal Data
Your personal data are accessible only to the following persons or entities, strictly within the scope of their duties:
NOUSTEP internal teams (development, support, moderation, compliance);
Technical service providers responsible for hosting, maintenance, or system security;
Relevant airports and airlines;
Google (AdMob) and its advertising partners, subject to your explicit consent;
Competent authorities, if required by legal or judicial obligation.
We never sell your personal data to third parties.
5- Data Transfers Outside the European Union
In certain cases, notably when you consent to the use of Google AdMob or analytics tools, some data may be transferred to countries outside the European Union, in particular to the United States.
These transfers are governed by the European Commission’s standard contractual clauses or other safeguards recognized as compliant by European authorities, in accordance with Articles 44 to 49 of the GDPR.
6- Data Retention Period
NOUSTEP retains your personal data only for the period strictly necessary to achieve the purposes described, namely:
