Last updated: May 15, 2026
The data controller is the publisher of the Caresse application, reachable at admin@caresse.app.
Caresse collects only the data strictly necessary for the service to function:
| Data | Purpose | Legal basis |
|---|---|---|
| Anonymous identifier (Firebase UID) | Authentication and account persistence | Contract performance |
| First name or alias | Audio personalization of experiences (spoken by the AI voice) | Explicit consent |
| Anatomical characteristics (declared biological sex) | Adapting physical suggestions in experiences to participants' anatomy | Explicit consent |
| Session parameters (practices, accessories, duration, location) | Generating the personalized experience | Contract performance |
| History of generated experiences | Access to past experiences within the app | Contract performance |
| Purchase data (via RevenueCat) | Credit and lifetime unlock management | Contract performance |
| Aggregated, anonymized usage statistics (via Google Analytics) | Analysis of in-app user behavior (e.g. drop-off points in the experience creation funnel) to improve the service. No individual tracking. | Legitimate interest |
We do not collect: email address (unless you contact us), phone number, GPS location, contacts, biometric data, or any data that could identify you outside the app.
To generate experiences, certain parameters are transmitted to third-party AI and text-to-speech (TTS) services. This transmission is pseudonymized: the first name or alias you provided may be included, but no data that directly identifies you (email, account identifier, full legal name) is shared.
Third-party services used include:
Each of these providers has its own privacy policy and is subject to applicable regulations (GDPR for services hosted in Europe).
No personal data is sold to third parties for advertising or commercial purposes.
Data and audio files are hosted on Microsoft Azure servers located in Europe. All communications between the app and our servers are encrypted via HTTPS/TLS.
Access to data is restricted to what is strictly necessary. No employee or contractor accesses the content of your experiences for personal purposes.
Data is retained for as long as your account is active. Upon account deletion:
You have the following rights regarding your personal data:
To exercise these rights, contact the publisher at admin@caresse.app. All requests will be handled within one month.
If you are located in the EU/EEA, you may also lodge a complaint with your local data protection authority. EU users may contact the CNIL (France): www.cnil.fr.
You may request complete deletion of your account and all associated data at any time by contacting the publisher at admin@caresse.app.
Deletion results in the permanent and irreversible erasure of all your experiences, audio files, and profile data. This action cannot be undone.
The Caresse mobile app does not use advertising cookies or third-party trackers for targeting purposes. The technical identifiers used are those required for the service to function (Firebase session, RevenueCat identifier) as well as Firebase Analytics (Google Analytics), used solely to analyze anonymized user behavior within the experience creation funnel — to identify where users drop off and improve the service. No personally identifiable data is transmitted for this purpose.
This policy may be updated at any time. In the event of a material change affecting your rights, you will be notified within the app. The current version is always accessible from within the app and this document.
For any questions about the protection of your data, please contact the publisher at admin@caresse.app.