Français

Privacy

What the app stores

The routines you do, the days you log against them, your notes, your settings and your version history are saved in your browser's local storage — or, in the installed app, in its own private storage. Unless you turn sync on, this stays on the device and is not uploaded anywhere.

Without sync, deleting the app or clearing site data for this site deletes all of it, so use Save backup before you do either.

Sync (optional)

If you sign in under Settings → Data → Sync, the app keeps a copy of your routines, their version history, your settings, every logged day and your notes in a database run on Supabase, so that your other devices can read it. Signing in needs only your email address, to which a one-time code is sent; there is no password.

• Your rows can be read and changed only with your own sign-in. Other people using the app cannot see them.
• The data is not end-to-end encrypted: whoever administers the database could read it.
• Sign out stops syncing on that device and keeps everything on it.
• Delete account, in the same place, deletes your account and the synced copy of your data for good. What is on your devices stays there.

What leaves the device

Only when you ask for it:

• Sync, once you sign in, as described above.
• Save backup writes a file where you tell it to.
• Feedback you send, with the app's version, language, platform and screen size.
• Create with AI and Change with AI, as described below.

The shared catalog and leaderboards

Signed in, you can see routines other people share, rate them and join their leaderboards. Nobody can list the people using the app, and your display name (the name you give the app, never your email address) appears only where you choose:

• Your ratings are never shown: they only count towards a routine's average.
• Submitting a routine publishes what you submit, under your display name, once a moderator approves it.
• When you are signed in, starting a routine from the catalog (or adding it to one of yours) puts you on its leaderboard, with your name shown to your friends only and "Anonymous" to everyone else. You can change that, or leave, at any time.
• Being on a leaderboard shares your score for that routine — a percentage per day — with the app's server. Other people see only totals: your average, number of days, how often you scored on the day itself, and badges. Never a single day, and never what you logged against individual goals.
• To anyone who is not your friend you are anonymous by default, shown as "Anonymous" and a code that differs from board to board. You can choose to be anonymous to friends too, or to show your display name to everyone.
• Scores can be added only for today and yesterday; older days are frozen.
• Leaving a leaderboard removes your scores from it.
• Anyone with the link to a routine in the catalog can see it — its goals, rating and author's display name — even without an account.

Signed out, or on no board, nothing about your days is shown to anyone else.

Friends

• You can pick a username. People can add you only by typing it exactly: nobody can browse or search the people who use the app. You can turn this off.
• Friends are mutual: both sides agree. Friends see your display name and username, and can send you a Spark — a wordless nudge, with no text, at most once a day.
• On each leaderboard you choose how friends see you. Where you show them your name, they also see your streaks and badges there — "7 days in a row", "Perfect day" — and on which day they happened. Never your scores, and never what you logged. Where you are anonymous, friends see nothing of it.
• You can remove or block anyone. Blocking stops them finding you, asking again or sending Sparks. You can also report someone to the moderator — a friend, or a name on a leaderboard — who sees who sent the report; the reported person does not.
• Deleting your account removes your username, friendships and Sparks.

Signed in: when you use the app

While you are signed in and the app is open, it tells the server now and then that it is open, and on which platform (iOS, Android or web). The server keeps the time you were last seen and which days you opened the app. Only the app's administrator can see this: who is online now or was recently, and counts such as how many people used the app each day. Nothing about what you log is part of it. Signed out, nothing is recorded; deleting your account deletes it.

When you create an account, the app also sends how it was first opened on your device: through a link someone shared, a friend's invite, this website's pages, a search engine or another website (its name only, such as google.com, never what you searched for), or directly. It is kept with your account so the administrator can count where new people come from, and is shown only as those counts. Deleting your account deletes it.

Creating a routine with AI

When you use Create with AI, the description you type and the app's language are sent to the app's server, which asks Anthropic's Claude to write the routine and sends the draft back. Nothing else about you goes with it: not your name, your email address or what you have logged. Anthropic processes the description to write the reply, under its commercial terms, which do not use it to train its models. The server keeps only the time of each draft -- by account when you are signed in, otherwise by a scrambled form of your connection's address, made with a key only the server holds, so it cannot be turned back into the address -- to hold everyone to a daily limit (5 drafts signed in, 1 otherwise), and clears it after a week. Your phone's time zone goes to the server too, so the limit starts again at your midnight; it is not kept, and does not go to Anthropic.

Change with AI works the same way and counts toward the same limit. It sends what you type and the routine you are changing: its name, groups and goals, with their targets and how often they are done. Not what you logged, your notes, or the times and alarms you set.

Hearing when the app reaches the stores

If you leave your email address on the home page to hear when the app is in the App Store or Google Play, the server keeps that address, which store you picked and your language. It is used once, to tell you the app is out, and for nothing else, then deleted. Only the administrator can see it. To have it removed sooner, write to the contact address below.

Reminders

The installed app can schedule a local daily reminder. It is scheduled and delivered by your device. No reminder passes through a server.

Deleting your account

Delete account removes your account, your synced data, your profile and username, your leaderboard places, ratings, friendships and Sparks, and how you first arrived. A few things outlast it, without your name:

• Feedback you sent stays with the administrator, no longer linked to you; anything you wrote in it, such as a reply address, stays as written. Ask and it is deleted.
• Routines you published in the catalog stay there, with no author shown.
• The count of your AI drafts is cleared within a week.
• An address on the store waitlist is not linked to an account: ask to have it removed.

Who runs it, and who helps

Allez is run by its developer, who decides what is collected and why (the "controller" under data protection law). Reach them at the contact address below. These services handle data on its behalf, each for one purpose:

• Supabase: the database and sign-in, including sending the sign-in code by email.
• Netlify: hosting the website and app. Like any web host it keeps short-lived access logs, including your connection's address.
• Anthropic: writing drafts, only when you use Create with AI or Change with AI.
• Cloudflare: if sign-in asks you to confirm you are not a robot, that check is Cloudflare Turnstile, which sees your connection's address.

Some of these services are based in the United States; they are used under their standard data protection terms.

Why, and for how long

• Your account, sync, friends and leaderboards: to provide what you signed up for (contract). Kept until you delete your account.
• When you were last seen, the days you opened the app and how you first arrived: to see whether the app is used and working (legitimate interest). Kept until you delete your account.
• AI draft counts: to keep the service within its limits (legitimate interest). A week.
• Feedback and reports: to answer them and keep the app safe (legitimate interest). Until dealt with, or until you ask.
• The store waitlist: because you asked (consent). Until the email announcing the release has gone, or until you ask.

Your rights

You can ask for a copy of what is held about you, have it corrected or deleted, object to its use, or take it elsewhere. Most of it you can do yourself: Save backup gives you everything you logged, and Delete account deletes it. For anything else, write to the contact address below. You can also complain to the data protection authority where you live (the ICO in the UK, the CNIL in France).

Children

The app is not meant for children under 13 (16 in the EU). An account needs an email address, which can identify you.

Changes

If this policy changes, the date above changes with it.

Contact

Questions about this policy: protocolos.app@gmail.com