1. Data controller
The controller of personal data is NCOO-DEV, S.L., whose details appear in our legal notice.
For any question about your data or to exercise your rights, you can contact us at: hello@expattribe.app.
2. Data we collect
We only collect the data necessary for the app to work:
- Account data: your email address, or the identifier from your sign-in via Sign in with Apple or Google.
- Family profile: displayed family name, family makeup (adults), languages spoken and country of origin, interests, photo, and a bio.
- Children's data: your children's first name and age. The full birth date is kept private and is never shared with other families. First name and age are visible only to families you've matched with.
- Location: the neighborhood or approximate area where your family lives. Your exact address is never shared with other users.
- Interactions: likes, matches and messages exchanged within the app.
- AI assistant data: if you use the built-in assistant, the questions you ask it are sent to the AI provider's API to generate a response.
- Text submitted for machine translation: when a wiki entry or a message is shown to you in your own language, the text concerned is sent to the Anthropic (Claude) API to be translated. Nothing else travels with it: not your identity, not the identity of the person you are talking to, not your contact details. See section 5.
And that is all. ExpatTribe shows no advertising: we do not collect your device's advertising identifier, and none of your data is used for tracking. The service is funded by the Premium subscription, not by your data.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account | Performance of the contract (art. 6.1.b) |
| Display nearby families and enable matches | Performance of the contract |
| Enable messaging between matched families | Performance of the contract |
| Manage Premium subscriptions | Performance of the contract |
| Ensure security and prevent abuse | Legitimate interest (art. 6.1.f) |
| Respond to your support requests | Legitimate interest |
| Provide the AI assistant | Performance of the contract / consent |
| Translate wiki entries | Performance of the contract |
| Translate your messages | Consent (art. 6.1.a), given by the author of the message |
4. Processors and recipients
We work with trusted providers acting as processors within the meaning of the GDPR:
- Supabase : database hosting, authentication and storage of app data.
- Apple and Google : sign-in (Sign in with Apple / Google) and in-app payment processing.
- RevenueCat : technical management of Premium subscriptions.
- AI provider (smart assistant) : processing of questions asked to the assistant in order to generate a response.
- Anthropic (Claude) : machine translation of wiki entries and messages, carried out when they are read.
Face ID / biometric recognition: when you use Face ID or the Android equivalent, processing takes place locally on your device. No biometric data is transmitted to ExpatTribe or its providers.
Payment: transactions are handled by Apple and Google. ExpatTribe never collects or stores any payment details.
Some of these providers may process data outside the European Union; in that case, such transfers are covered by appropriate safeguards (the European Commission's standard contractual clauses or an equivalent mechanism).
5. Machine translation
The app can show you two kinds of content written by other families in your own language: wiki entries and the private messages you receive. The two follow different rules, because they do not raise the same question.
Let us be blunt: translating a private message means sending its text to a third party. That third party is Anthropic, whose API (Claude) performs the translation. Without that transfer, no translation is possible. You should know this before you use the feature.
Your messages are only translated if you have allowed it. The setting « Allow my messages to be translated » lives in your profile and is off by default, including for accounts created before it existed. Until you turn it on, none of your messages is sent to Anthropic, and no family is offered the option of translating them.
The choice is yours because the text is yours: the person reading you cannot consent on your behalf. If you turn it on, a family who does not read your language will see a « Translate » button in your conversation, and it is up to them to use it: nothing is sent before that. You can withdraw this permission at any time.
Wiki entries are translated automatically. They are written to be read by the whole community, often by families who do not yet master the local language: translating them is part of the service and does not touch the privacy of correspondence.
What is sent. Only the text to be translated, that is, the content of the wiki entry or of the message. No identifying data goes with it: not your name, not your email address, not your profile, not your contact details, not the identity of the family you are talking to.
When. Translation happens when the content is read, not when it is written: content is sent to Anthropic only when it actually needs to be displayed in another language.
The original is never replaced. The source text is kept as it is. The translation is added alongside it, labelled "Translated automatically", and you can go back to the original at any time.
Model training. Anthropic does not train its models on the data sent to it through its API.
Caching. A translation that has already been produced is stored so that the same content is not translated over and over. That cache is closed: it lives on our servers only, no user can see another user's translations, and access to a message's translations is limited to the participants in that conversation. Cached translations are kept for as long as the source content is: they follow the wiki entry or message they belong to and disappear with it, including when your account is deleted (see section 6).
Quality. Machine translation is an aid to understanding, not a professional translation: it can be inaccurate. The original prevails. This point is set out in our terms of use.
6. Retention period
Your data is kept for as long as your account is active. If your account is deleted, your personal data is deleted or anonymized within a reasonable time, unless a legal retention obligation applies (for example, for accounting purposes regarding subscription data).
7. Security
We put in place appropriate technical and organizational measures to protect your data (encryption in transit, access controls, minimization of shared data, and enhanced protection of data relating to minors).
8. Protecting minors
ExpatTribe is an app designed for parents. Accounts are created and managed by adults. Information about children is limited to the strict minimum (first name and age), is never public, and is visible only to families you've explicitly matched with. The birth date stays private.
9. Your rights
In accordance with the GDPR, you have the following rights: access, rectification, erasure, restriction, objection, portability, and the right to withdraw your consent at any time.
To exercise these rights, contact us at hello@expattribe.app. You also have the right to lodge a complaint with a supervisory authority: the CNIL in France (www.cnil.fr), the AEPD in Spain (www.aepd.es), or your local data protection authority.
10. Cookies
This showcase website uses only essential technical cookies and no third-party advertising trackers. Neither this website nor the app shows any advertising. To learn more, see our cookie policy.
11. Changes
This policy may be updated to reflect legal or functional changes. The date of the last update appears at the top of this page.