privacy policy

Last updated: 13 October 2026

1. Who is responsible for processing?

PhémeApp, operated by Arnaud Mathier, sole proprietorship (independent)
1832 Montreux, Switzerland
Contact: [email protected]

If you reside in the EU/EEA, you can write to us at the same address for any question relating to the RGPD. We have not appointed a representative in the EU; the service is primarily aimed at persons concerned by construction projects in Switzerland.

2. What data do we process, why and on what basis?

To provide the service, the provision of your email address, your name and at least one address to monitor is necessary; without this data, we cannot offer it to you. We do not process not any sensitive data within the meaning of the law, do not carry out any automated individual decision-making producing legal effects concerning you and do not use any advertising cookies.

Your data is collected directly from you. The planning consultations we monitor come from official publications; they may mention names of applicants or owners, which we reproduce in the alerts as published, for information purposes, with a link to the official source.

3. How do we use your data?

• Monitor official publications: CAMAC (Vaud), SITG (Geneva), eBO digital official bulletin (Valais), SITN / SATAC (Neuchâtel), Official Gazette of the Republic and Canton of Jura, Official Gazettes of Bern and Fribourg, as well as publications of the canton of Zurich;
• send you an email alert when a publication is detected within your radius, reminders as the end of the objection period approaches and, depending on your plan, a periodic report;
• allow you to manage your account (login via magic link) and your subscription.

We do not sell your data and do not use them for third-party advertising purposes. A service or billing email remains possible independently of the alerts.

4. To whom do we disclose your data?

We use service providers (processors) bound by confidentiality and data protection commitments:

The website's fonts are hosted on our own servers: no request is sent to Google Fonts. Official cantonal sources (CAMAC, SITG, SITN, eBO, etc.) are consulted to retrieve publications; no data about you is transmitted to them.

Transfers abroad. Some service providers process data outside Switzerland and the EU/EEA, particularly in the United States. In this case, the transfer is based on an adequacy decision (e.g. Data Privacy Framework) or on standard contractual clauses (nLPD art. 16-17; RGPD Chapter V). You can request a copy from the address above.

If you provide us with a third party's email address (e.g. to send them alerts), you warrant that you are authorised to do so and that you have informed them.

5. Retention period

• Account and alerts: as long as your account is active. Accounts inactive for more than 2 years (no login or interaction) may be deleted; technical alert logs are purged after 2 years.
• Account deletion: your data is deleted from our active databases without undue delay, subject to backup copies, which are overwritten according to their normal cycle.
• Billing: accounting records are retained for 10 years (CO art. 958f).
• Waiting list (addresses outside covered cantons): until the opening of the canton concerned or your deletion request.
• Contact messages: no more than 3 years after the exchange is closed.

6. Security

• Encryption of communications (HTTPS / TLS);
• login via a time-limited magic link (HMAC-SHA256 signed token);
• access secrets stored outside the source code; encrypted internal tracking files;
• database access limited to what is strictly necessary;
• operational logs without identifiable personal data where possible.

No measure guarantees absolute security. In the event of a breach likely to result in a high risk to your rights, we will inform you and notify the competent authorities in accordance with the law.

7. Your rights

Under the nLPD and, where applicable, the RGPD, you have the following rights:

To exercise your rights: [email protected]. We may ask you to provide proof of your identity. We respond within 30 days.

8. Cookies and audience measurement

The user area does not use tracking cookies; login is via a magic link. The browser may store technical preferences locally (language, cookie choices, login session). No advertising cookies are used.

GoatCounter produces aggregated statistics without cookies and without recording your full IP address.

Google Analytics 4 is not activated except with your consent, given via the banner displayed on your first visit. If you refuse, no analytics cookie is placed and no data is sent to Google Analytics. If you accept, cookies (_ga, _ga_*, maximum duration of 2 years) are placed and browsing data (pages viewed, source, device, truncated IP address) are processed by Google; advertising functions and Google signals are disabled. You can change your choice at any time via the “Cookies” link at the bottom of the page. We also respect the “Do Not Track” and “Global Privacy Control” signals: in that case, no measurement is carried out.

9. Amendments

We may amend this policy. The update date appears at the top of the page; in the event of a substantial change, we will inform you by email or in the service before it takes effect.

10. Complaints

You can contact the Federal Data Protection and Transparency Officer (PFPDT) : www.edoeb.admin.ch. If you reside in the EU/EEA, you can also contact the data protection authority at your place of residence.