Privacy policy

This page explains what data the Selfia app uses, why, and what you can do about it. It is written to be read on a phone.

The French version is the reference version. This English version is provided for convenience.

The essentials

• Selfia works without an account. Your profile, your journal and your preferences stay on your phone.
• Your answer about spirituality never leaves your phone.
• Usage statistics and AI summaries are optional. Nothing is sent without your consent.
• We never sell or rent any data.
• You can erase everything from the app, at any time.

Who is responsible for your data

The data controller is the publisher of Selfia:

For any question about your data, write to this address.

What stays on your phone

This data is saved in the app's storage, on your phone. It is not sent to us or to anyone else.

• Your profile: first name, date of birth, star sign, grammatical form of the phrases, profile photo if you choose one.
• Your preferences: themes, life situations you choose to personalise the phrases, reminders, sounds, appearance.
• Your journal: your texts, your moods, your answers to questions, your capsules.
• Your progress: favourites, dismissed phrases, badges, garden.
• Your answer about spirituality (see the next section).

Reminders are scheduled on your phone. No server sends them.

Selfia does not sync this data. We have no access to it and cannot recover it for you. Your phone's backup (iCloud, Google) may contain it, depending on your settings: that backup is handled by Apple or Google.

Why: to run the app and choose the phrases that suit you. Legal basis: performance of the contract, that is, the terms of use.

Your journal may contain information about your health or your private life. It stays on your phone, unless you turn on AI summaries (see below).

Your answer about spirituality

During setup, and later in Settings › Spirituality, the app asks whether a spiritual dimension is part of your life: Christianity, Islam or Judaism. This question is optional. Nothing is ticked by default and you can skip the step.

Your answer reveals a religious belief. It is sensitive data under Article 9 of the GDPR. We only use it with your explicit consent, given by ticking a box.

• It stays on your phone.
• It is never sent: not to the AI service, not to a server, not in statistics, not in share links, not in the journal export.
• By default, no spiritual quote appears on the lock screen, in notifications or on the widget.
• You can change or erase it at any time: Settings › Spirituality › "Erase my answer". Unticking a box takes effect immediately.

Usage statistics (optional)

During setup, the app asks whether you accept usage statistics. Accept and Decline carry the same weight. Nothing is sent before you agree.

If you accept, we use PostHog, hosted in the European Union. What is sent: usage events (for example, opening the app), a random identifier created by the app, the platform (iOS or Android) and the time. This data does not contain your name: it is pseudonymous.

Never sent: the content of your journal, your answer about spirituality, the verses you read, your first name, your date of birth.

Why: to understand how the app is used and improve it. Legal basis: your consent. You can withdraw it at any time in Settings › Data and privacy › "Anonymous statistics". Nothing more is sent after that.

AI summaries and questions (optional)

Selfia can prepare summaries of your journal, every week or every month, and questions to help you go further. These AI features are off by default. Without your consent, everything is prepared on your phone, without AI.

What is sent

Only when you ask for a summary or questions, and only after your explicit consent:

• for a summary: the text of the entries for the period, their date and the mood you noted, along with the themes detected on your phone;
• for questions: the text of the current entry, your mood and your answers in this session;
• the grammatical form (masculine, feminine or neutral) you chose, so that sentences agree correctly (only for texts in French);
• technical data: a random device identifier, your subscriber identifier, the platform, the app version and the language.

Before you accept, you can display exactly what will be sent.

Never sent: your first name, your date of birth, your photo, your answer about spirituality, or spiritual themes.

If your text suggests distress and the app detects it on your phone, nothing is sent: the app shows helpline numbers instead.

Who processes this data

• The Selfia server, hosted by Cloudflare (Cloudflare Workers, with the KV and D1 storage services). It checks your access, applies usage limits and forwards the request.
• Anthropic, which provides the Claude AI model (Haiku family). It writes the summary or the questions, which come back to your phone.

What is kept

• The Selfia server does not store your texts and does not write them to any technical log. They only pass through. Summaries exist only on your phone.
• Anthropic processes the texts under its commercial terms. They state that this data is not used to train its models and is deleted within 30 days at most.
• The server keeps a record of your device and usage counters, for quotas. They are deleted after 13 months without use. Daily per-device counters are deleted after 7 days.
• Your IP address is only used to limit abuse. It is never stored in clear: the server only uses a fingerprint computed with a secret key.
• The server's technical logs contain no text, no IP address and no access token.

Legal basis, withdrawal and deletion

Your journal may reveal information about your health. So we only send it with your explicit consent (Article 9(2)(a) of the GDPR). You can withdraw your consent at any time by turning off "AI summaries and questions" in the settings. Nothing more is sent, and summaries go back to being prepared on your phone.

In Settings › Artificial intelligence:

• "Export my AI data" shows you what the server keeps for your device;
• "Delete my AI data" erases all of it immediately and withdraws your consent.

Usage limits and server security rely on our legitimate interest: protecting the service against abuse.

Texts written by the AI carry the label "Written with the help of an AI". They can be wrong. They are not diagnoses or medical advice.

Selfia Pro subscription

Payment goes through Apple (App Store) or Google (Google Play). We never see your card, your name or your billing address.

To know whether your subscription is active, we use RevenueCat, a subscription management service. RevenueCat receives:

• a random subscriber identifier, created by the app;
• the status of your subscription and the purchase history sent by the store: product, dates, trial, renewal;
• necessary technical data, for example the app version, the store country and the IP address.

The Selfia server also asks RevenueCat which plan you have, and keeps that answer in a short-lived cache.

Why: to give you access to Selfia Pro, restore your purchases, and handle trials and renewals. Legal basis: performance of the contract, and our legal obligations for proof of purchase.

Rewarded ads (free version)

In the free version, the app may offer you a video ad to unlock content for a limited time. You choose whether to watch it. With Selfia Pro, there are no ads.

These videos are provided by Google AdMob. To show an ad, Google may process:

• your phone's advertising identifier;
• your IP address and an approximate location derived from it;
• technical information about your device and your interaction with the ad.

Before any ad, the app asks for your choice through Google's consent tool (a consent management platform, or CMP). If you accept, ads may be personalised. If you decline, Google shows non-personalised ads and only uses limited data, for example to count views and fight fraud.

On iPhone, if the app asks for Apple's tracking permission and you decline, the advertising identifier is not shared. On any phone, you can reset or delete the advertising identifier in the system settings.

Legal basis: your consent for personalised ads; our legitimate interest in funding the free version for non-personalised ads. Google also uses this data for its own purposes, under its own responsibility: see how Google uses information from partner apps.

Updates and technical data

When the app checks for a content update, it contacts the servers of Expo, our publishing tool. Expo then receives your IP address and technical information: platform, app version. Legal basis: our legitimate interest in fixing the app and keeping it safe.

Horoscopes and the app's texts are built into the app. Reading them sends nothing.

When you write to us

If you write to us, we receive your email address and your message. We only use them to reply. We keep them for 3 years after our last exchange, then delete them. Legal basis: our legitimate interest in answering you and following up on your request.

Do not send the content of your journal: we never need it.

Who receives data

Only these providers receive data, and only for the purposes described above:

• Apple and Google: download, subscription payment, advertising (Google AdMob). They act under their own responsibility for their stores and services.
• RevenueCat: subscription management.
• Cloudflare: hosting of the AI server and of this website.
• Anthropic: AI model, only if you turn on AI summaries.
• PostHog: statistics, only if you accept them.
• Expo: app updates.

We never sell or rent any data. We share nothing for advertising purposes, except personalised ads if you accept them.

Their privacy policies: Apple, Google, RevenueCat, Cloudflare, Anthropic, PostHog, Expo.

Transfers outside the European Union

Some providers are based in the United States or process data there: Cloudflare, Anthropic, RevenueCat, Google, Apple and Expo. PostHog hosts our statistics in the European Union, but it is an American company.

These transfers are covered by the safeguards provided by the GDPR. Depending on the provider, this is the European Commission's adequacy decision for companies certified under the EU-US Data Privacy Framework, or standard contractual clauses adopted by the Commission. You can ask us for a copy of the safeguards that apply.

How long data is kept

• Data on your phone, including your answer about spirituality: until you erase it or uninstall the app.
• Texts sent for an AI summary: not kept by Selfia; 30 days at most at Anthropic.
• AI server data: 13 months after your last use; daily counters: 7 days.
• Statistics: 13 months at most.
• Subscription: as long as it exists, then for as long as our legal obligations require (accounting, disputes).
• Emails: 3 years after our last exchange.
• Advertising: according to Google's rules.

Your rights

You have the right:

• to access your data;
• to have it corrected;
• to have it erased;
• to receive it in a readable format to reuse it (portability);
• to object to processing based on our legitimate interest;
• to ask for processing to be restricted;
• to withdraw your consent at any time, without affecting what was done before;
• to say what happens to your data after your death.

The easiest way is the app. Your local data can be changed and erased in the settings. Your journal can be exported from the journal ("Export the journal"). AI server data can be exported and erased in Settings › Artificial intelligence. See also Delete your data.

You can also write to belouar.mathis91@gmail.com. We reply within one month. For a complex request, this can be extended by two months: we will tell you within the first month.

Because Selfia works without an account, we may ask you for something that helps us find your data, for example your store order number. We will never ask for the content of your journal.

If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL: cnil.fr/fr/plaintes, or by post to CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. You can also contact the authority of the EU country where you live.

Minors

The stores rate Selfia's content as suitable for everyone. But the app is not intended for children under 13.

In France, under 15, accepting statistics, personalised ads or AI summaries also requires a parent's consent. If you are under 15, talk to a parent before accepting.

If you are a parent and think your child under 13 uses Selfia, write to us: we will help you erase their data.

Security

• Exchanges with our servers are encrypted (HTTPS).
• No secret key is stored in the app.
• The server keeps no text from your journal.
• Your journal is protected by your phone's lock. Use a passcode or fingerprint.

Changes

We update this page when the app changes. The date at the bottom shows the latest version. If an important change affects your data, we will let you know in the app or on the store listing, and ask for your consent again if needed.