Your data, your rules.
Last updated: 21 June 2026
FavUp is a lists and recommendations app. We collect only what’s necessary to run the service, and nothing more. This text explains what, why, and how to stay in control.
1. Data controller
The controller of your data is AZCA, a French SASU with share capital of €500, registered under SIRET 990 357 238 00023, with its registered office at 200 rue de la Croix Nivert, 75015 Paris. For any question about your data: contact@favup.app.
2. What we collect
Your account information (email, username), the content you create (lists, ratings, comments, wishlist), and minimal technical data for the security and stability of the app. We never sell your data.
3. Legal basis
We process your data on three bases: performance of the contract (providing the service when you create an account and lists), our legitimate interest (security, abuse prevention, improving the service), and your consent where required.
4. How we use it
To log you in, display and sync your lists, let you follow other people, and improve the service. Public lists are visible to others; private lists are visible only to you.
5. Public and private
You choose the visibility of each list. A public list can be viewed via a share link by anyone who receives it. You can switch a list back to private at any time.
6. Providers & sharing
To run FavUp, processors handle data on our behalf: Supabase (database and authentication), Apple and Google (“Sign in with Apple / Google”), and Vercel (website hosting). We never share your data for advertising and we don’t sell it.
7. Transfers outside the EU
Some providers (notably Apple and Google) may process data outside the European Union, including in the United States. These transfers are covered by appropriate safeguards, such as the European Commission’s standard contractual clauses.
8. Cookies & trackers
The website uses no advertising cookies or third-party trackers. We only store your language preference in your browser (localStorage).
9. Security
We implement reasonable technical and organisational measures to protect your data: encryption in transit, restricted access, and reputable providers.
10. Retention & deletion
Your data is kept as long as your account is active. You can delete a list, or your entire account, at any time from the app. Deletion is permanent.
11. Your rights
Under the GDPR, you have the right to access, rectify, port, restrict, object to and erase your data. For any request, just email us (see below). You may also lodge a complaint with your supervisory authority (in France, the CNIL — cnil.fr).