Document

Privacy policy

Last updated : 11 August 2026

Data controller

The Dalim app and the dalim.app site are published by the founder of the Dalim project (see Legal notice; the publishing company is being incorporated, and its full details will be published upon registration), who is the controller of the data described below. Contact: contact@dalim.app. This processing complies with the General Data Protection Regulation (GDPR).

Data we process

Depending on whether you use the iOS app or the site:

  • Email address: to authenticate access (you sign in to the app with the email of the account created on dalim.app). Linked to your account. Legal basis: performance of the contract.
  • Property scans: photos, depth data (LiDAR) and 3D reconstructions of the rooms you capture, together with the property address you enter. Sent to our servers to produce the 3D reconstruction and host the tour. Legal basis: performance of the contract.
  • Professional accounts: email, name, agency, password (hashed).
  • Pre-launch waiting list: email, name, agency, phone number and volume, all provided voluntarily. Legal basis: consent. Kept until conversion or deletion on request.
  • Visitors to the 3D tours: contact details left voluntarily in an access form (passed on to the agency that owns the tour) and aggregated session statistics (duration, rooms viewed), without personal identification.
  • Billing data (at commercial launch only: no payment is collected during the pre-launch): company name, address, email, VAT number, subscription and payment history. Card payments will be handled by our provider Stripe; we will store no card number. Legal basis: performance of the contract and accounting and tax obligations.
  • Service usage data: volume of captures uploaded and of active tours, technical logs. Used to provide and bill the service and to prevent abuse (fair-use policy). Legal basis: performance of the contract and legitimate interest (security, fraud prevention).

We collect no location, no contacts and no advertising identifiers. On the public pages of the site and the 3D tours only, browsing data may be processed by Microsoft Clarity after explicit consent. The iOS app and the professional area include no third-party analytics SDK.

Purposes

Data is processed solely to provide the service: authentication, generation of the 3D reconstructions, hosting and sharing of the tours. No data is sold or used for advertising.

Storage and security

  • Exchanges with our servers use HTTPS (encrypted).
  • The authentication token is stored securely in the phone's iOS Keychain, never in plain text.
  • Scans are stored on the phone until upload, then on our servers.

Retention periods

Account data and scans are kept for as long as your account is active. On a deletion request (see “Your rights”), they are deleted within 30 days. Visitor leads are kept on behalf of the agency concerned until deletion. Tour statistics are aggregated and kept without identification.

Processors / hosting

We use the following processors, strictly to provide the service:

  • OVH (France): hosting of the application servers.
  • Cloudflare R2 (EU): storage and delivery of the tour files.
  • GPU cloud providers: computation of the 3D reconstructions; capture data is deleted from the compute machines after processing.
  • Stripe: card payment and billing processing.
  • Resend: sending of transactional emails (access codes, account notifications).
  • Microsoft Clarity: audience measurement, heatmaps and pseudonymised session recordings on the public pages only, and only after consent. Recording playback data is kept for 30 days by Microsoft; aggregated data may be kept for up to 9 months.

No data is used for advertising. Any transfers outside the European Union (for example to send emails) are covered by appropriate safeguards, in particular the European Commission's standard contractual clauses.

Your rights (GDPR)

You have rights of access, rectification, erasure, restriction and portability over your data. To exercise them, or to request deletion of your account and your data: contact@dalim.app. We respond within 30 days. You may lodge a complaint with the French data protection authority (CNIL, cnil.fr).

Cookies

Technical cookies needed for the authenticated session and to remember an access form stay active without consent. Microsoft Clarity is loaded only after your consent, and may then measure clicks, scrolling and navigation and produce pseudonymised session recordings. Content typed into forms is not meant to be recorded. Declining has no effect on access to the site or to the tours. You can withdraw or change your choice at any time.

Minors

The app is not intended for minors under 16 and does not knowingly collect their data.