Privacy policy

Account and authentication: your mobile phone number is your account identifier. It is verified with a one-time code (OTP) sent by SMS; the code is never stored in plain text. Name and e-mail address are optional.

Rentals: pick-up and return stations, timestamps, rental status and billed amounts. This history is available in the app.

Payment: payments are processed by our provider Stripe. OHMO never stores your full card number — we only keep a payment reference, the last four digits and the transaction status.

Geolocation: with your permission (phone settings), your position is used in the app to show the nearest stations on the map. It is processed on your device and is not sent to OHMO servers.

Technical data: device model, platform, app version, push notification token (if you enable notifications), and technical logs (IP address, timestamps) needed to keep the service secure. On ohmo.fr, audience statistics are collected with Matomo in the consent-exempt configuration defined by the CNIL: aggregate, anonymous statistics with no cookies and no cross-site tracking, hosted in the European Union. You can object at any time (see “Your rights”).

Account creation, SMS authentication, provision of the rental service and billing: performance of the contract (Article 6(1)(b) GDPR).

Fraud and abuse prevention (SMS rate limiting, service security) and technical logs: legitimate interest (Article 6(1)(f)).

Marketing communications: only with your consent (opt-in checkbox), withdrawable at any time (Article 6(1)(a)).

Retention of billing data: legal accounting and tax obligation (Article 6(1)(c)).

We do not sell your data and only share it with the providers listed above, to the extent necessary for their role, or where the law requires us to.

Your data is hosted in the European Union (Frankfurt). Some providers may nevertheless process data outside the EU/EEA; in that case the transfer is governed by the European Commission’s standard contractual clauses or another mechanism recognised by the GDPR.

You have the right of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to withdraw your consent at any time for processing based on it.

To exercise these rights, write to us at support@ohmo.fr; we may ask you to verify your identity. You can also lodge a complaint with the CNIL, the French supervisory authority (cnil.fr).

Traffic is encrypted (TLS), verification codes and session tokens are stored hashed, and access to data is limited to what is strictly necessary. To report a vulnerability, contact security@ohmo.fr (see also our security.txt file).

Any change to this policy will be published on this page with a new update date. In case of substantial changes, we will notify you via the app or by e-mail.

For any question about your personal data: support@ohmo.fr. For security matters: security@ohmo.fr. By post: OHMO, 181 avenue Victor Hugo, 75016 Paris, France.