Privacy policy
Updated: 30/09/2026
Translation provided for information only, not reviewed by a lawyer or a native speaker: only the French version is authoritative. Any other translation, automatic or not, is used at your own risk.
Version of 30 September 2026. Data controller: [À COMPLÉTER : LEGAL_PUBLISHER_NAME], [À COMPLÉTER : LEGAL_ADDRESS], [À COMPLÉTER : LEGAL_EMAIL] (“the Publisher”).
In two sentences
Your document is read and anonymised on your device; only a masked text, without names or identifiers, is sent to an AI hosted in Europe, which does not keep it. No document, no name and no number is stored on our servers.
1. What stays on your device
- The photos and PDFs of your documents, the text read by character recognition, the explanations received, your actions and your statuses.
- The keychain of numbers (tax number, beneficiary number, contracts…), encrypted on the phone.
- Your settings (language, visual comfort, milestone).
This data never leaves the device, unless you choose to share it (calendar, sharing an explanation). You can erase everything from the settings.
2. What is sent, and to whom
| Data | Recipient | Purpose | Retention |
|---|---|---|---|
| Masked text of the document (names, addresses, phone numbers, e-mails, identifiers replaced by labels) | Our server (Cloudflare, European Union) then the AI provider (OVHcloud AI Endpoints, hosted in France, no retention) | Produce the explanation | Not kept: processed in memory, never written to the database, unless you agreed to help improve the AI (next line) |
| That same masked text, only if you ticked (at the welcome screen or in the settings, unticked by default) “Help improve the AI”. Never the document, never your names or numbers; e-mail addresses and long strings of digits removed; health documents are not kept | Our server (Cloudflare, European Union), attached to the anonymous technical identifier of the device | Evaluate and improve the AI (test and correct our instructions and checks). Never sold, never passed to third parties for their own purposes | 12 months, then erased. Erased immediately if you withdraw your consent in the settings |
| Anonymous technical identifier of the device, platform, language, number of pages, document category | Our server | Count quotas, limit abuse, measure the AI cost | 13 months maximum |
| Account (optional to add and protect a paper, needed for the AI analysis): e-mail address, first name, last name if you give it, date of creation and last sign-in; one-time sign-in code (only its fingerprint is kept) and session token (same) | Our server (Cloudflare, European Union); the code is sent through Resend (e-mail sending) | Recognise you, attach the free paper of the month and your subscription to you on all your devices | As long as the account exists; erased when the account is deleted (Settings, Account). The code expires in 10 minutes, the session in 90 days |
| Non-reversible fingerprint of your e-mail address attached to the counter of papers used | Our server | Prevent getting a free paper again by deleting and re-creating an account | 3 months (length of the monthly counter) |
| Plan granted without payment (testers, guests): address, plan, end date | Our server | Let people test the app | Until the end date, then erased |
| “Useful / report an error” feedback and sheet requests (short text, no personal data), attached to the anonymous technical identifier of the device, the platform and a non-reversible fingerprint of the IP address, so that feedback can be found and answered | Our server | Improve the explanations and the sheets, handle a report | 13 months |
| Message written in the site's contact form (e-mail address, first name, last name, optional company, subject, text) | Our server (Cloudflare, European Union) passes it by e-mail (Resend) to the Publisher; nothing is written to the database | Reply to you | Not kept on our servers; the message stays in the Publisher's mailbox for as long as needed to handle your request |
| Site visit counters (a sheet viewed, a click on “Try the app”), added up per day, with no identifier, fingerprint or cookie | Our server | Know which sheets lead to the app | 13 months |
| Free message that you write in “Report an error” (optional; e-mail addresses and long strings of digits are removed automatically) | Our server | Understand and correct the reported error | 13 months |
| Masked text of the paper, only if you tick the box provided for this (unticked by default) | Our server | Reproduce and correct the reported error | 30 days, then erased |
| Answers to the short survey shown at first opening (one multiple-choice question, with an optional free text of at most 100 characters; it also serves as an anti-robot check), with the anonymous technical identifier of the device, the platform, the country (deduced by Cloudflare), a rough browser/system label and a non-reversible fingerprint of the IP address (the IP address itself is not kept) | Our server | Understand users' needs, spot robots and duplicates | 13 months |
| Usage events (screen opened, explanation shown, category), if you agreed to anonymous statistics | PostHog (European Union hosting) | Measure usage and improve the app | 12 months |
| Purchases and subscriptions | Apple, Google, Stripe and RevenueCat | Manage your plan | Legal retention period for transactions |
No document content, no name, no number is ever sent to the audience measurement tools.
3. Legal basis
- Performance of the contract (providing the explanation, managing plans): article 6-1-b of the GDPR.
- Legitimate interest (security, limiting abuse, spending cap, anti-robot check and understanding needs through the first-opening survey): article 6-1-f. You can object to it by writing to the address below.
- Consent (anonymous statistics, notifications, masked text attached to a report, contribution to improving the AI): article 6-1-a, which can be withdrawn at any time in the settings.
4. Sensitive data
Documents may contain social or administrative health data. That is why masking is done on the device, with review by the user, and why nothing is kept on the server without your explicit agreement. Medical documents are excluded from the Service. A simplified data protection impact assessment (DPIA) has been carried out; its summary is available in the application.
5. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. As we keep no identifying data on the server, most of these rights are exercised directly on your device (“Erase all my data”). If you agreed to help improve the AI, switching the option off in the settings erases what your device shared. For any request: [À COMPLÉTER : LEGAL_EMAIL]. You can complain to the CNIL (cnil.fr) if you believe your rights are not respected.
6. Security
Encrypted transport (HTTPS), encrypted local storage on mobile, proof of origin of calls (App Attest, Play Integrity, Turnstile), rate limits per device and per IP address, no document in the database.
7. Minors
The Service is not aimed at children under 15.
8. Changes
Any important change is announced in the application. The version date is at the top of this document.