Privacy Policy

Data controller

[Publisher name], [address]. For any question about your data: [contact email].

Data we collect

Account: your email address, used for sign-in via a secure link (no password).

Progress: your goals, completed actions, XP, streaks and levels.

Before you create an account, your onboarding progress (the chosen area and, where relevant, your level) is kept temporarily: in your browser, and — when you request your sign-in link — on our servers under a random identifier, only long enough to attach it to your account. It contains no email or identifying data, and is deleted as soon as it is migrated (at the latest after 7 days).

Purposes and legal bases

Providing the service and saving your progress: performance of the contract.

Temporarily keeping your pre-signup onboarding progress to attach it to your account: a pre-contractual step taken at your request.

Measuring aggregate usage: your consent.

Improving and securing the product: our legitimate interest.

Processors

Supabase — database hosting and authentication, European Union region (Paris).

Vercel — application hosting.

PostHog — product analytics, EU Cloud.

Gandi — domain name.

Each processes data on our behalf and under our instructions.

Analytics and consent

No analytics tool is loaded before your consent. You can decline without losing access to the service, and change your mind at any time.

Retention

Your data is kept while your account is active. When you delete your account, your goals, actions and waitlist entries are erased.

Pre-signup onboarding progress is deleted as soon as it is attached to your account, and at the latest 7 days after it was created.

Your rights

You have the rights of access, rectification, erasure, objection, restriction and portability. To exercise them: [contact email].

You may also lodge a complaint with your data protection authority (in France, the CNIL — www.cnil.fr).