GDPR and mobile apps: consent, data and obligations

As soon as an app collects an email, a name or an order, the GDPR applies. Don’t panic: for a shop or an association, the obligations come down to a few common-sense rules. Here are the essentials, without jargon. This guide doesn’t replace legal advice for specific cases.

What the GDPR asks, in one sentence

Only collect useful data, say clearly what you do with it, ask for consent when needed, protect it, and let everyone see it or have it erased.

The data an app collects

• Accounts: name, email, password, sometimes phone or address.
• Orders and bookings: what was bought or booked, when, for how much.
• Forms: quote requests, sign-ups, messages.
• Statistics: page views, devices, countries, used to improve the app.
• Notifications: the phone identifier used to send them.

List what your app really collects. If a piece of data serves no purpose, don’t ask for it: a shorter form also means more sign-ups.

The five practical obligations

1. A privacy policy

A page reachable from the app that says what data you collect, why, how long you keep it, who has access and how to exercise one’s rights. Apple and Google also require it to publish the app.

2. Consent when it’s needed

An order doesn’t need consent: you need the address to deliver. On the other hand, sending a newsletter or using non-essential analytics cookies requires explicit consent, with a box unticked by default. For sign-up, email validation (double opt-in) and acceptance of the terms of use are set in the back office.

3. Notifications with permission

On iPhone and Android alike, the phone itself asks for permission before receiving notifications. Respect that choice: useful, infrequent notifications are the best way to keep it. See our advice on push notifications.

4. Security and hosting

Data must be protected: encrypted connections, protected passwords, limited access. Also check where it’s hosted. At Maymoune, databases, accounts and content are hosted in France, in a GDPR-compliant private cloud. Services you activate yourself (payment, notifications, video) go through their own providers.

5. User rights

Anyone can ask to see, correct or erase their data. Give a contact address in the privacy policy and answer within a month.

Store declarations

Apple and Google ask you to declare the data collected by the app in a questionnaire (“App Privacy” at Apple, “Data safety” at Google). The answers appear on the app’s listing and must match your privacy policy. The steps are detailed in publishing on the App Store and Google Play.

Who owns the data?

You do. Your texts, photos and customer list belong to you, and you can export them while your subscription is active. Maymoune doesn’t exploit or resell them.

The checklist

1. List the data collected, and remove what’s useless.
2. Write the privacy policy and make it reachable.
3. Ask for consent for the newsletter and non-essential cookies.
4. Fill in Apple’s and Google’s data questionnaires.
5. Provide a contact address for access or erasure requests.

What it costs

At Maymoune, every feature is included in all three plans, detailed on the pricing page:

• Starter, €19 a month: your web app, installed from a link or a QR code.
• Ultra, €59 a month: the same, plus the iPhone, iPad and Android app on the stores.
• Ultra Lifetime, €2,999: one single payment, with publication on the App Store and Google Play included.

To go further, read our article on the members area, or check the FAQ.

Frequently asked questions

Does the GDPR apply to a mobile app?

Yes, as soon as the app collects personal data: a name, an email, an order, a notification identifier.

Do I need a privacy policy?

Yes. The GDPR requires it, and Apple and Google require it to publish the app.

Where is data hosted at Maymoune?

In France, in a GDPR-compliant private cloud. Services you activate yourself, such as payment, go through their own providers.

Do notifications need consent?

The phone itself asks for permission before showing notifications. An email newsletter needs explicit consent.

How much does an app cost at Maymoune?

€19 a month for the web app, €59 a month with iPhone and Android, or €2,999 once and for all. Details are on the pricing page.