Privacy policy

Kipetchi is designed to collect as little data as possible. This policy explains what data is processed when you use the Kipetchi mobile app (iOS and Android) and this website, why, for how long, and how to exercise your rights under the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Who is responsible for your data?

The data controller is 2 FRESH STUDIO, a SASU with a share capital of €5,000, SIREN 833 484 520 (R.C.S. Bobigny), publisher of the Kipetchi app and website, with its registered office at 20 rue Paul Valéry, 93420 Villepinte, France.
Privacy contact: team@kipetchi.com.

2. The data we process

In the app

• Account identifier: an anonymous technical identifier created on first launch. No email is required to start.
• Linked account (optional): if you choose to link Apple, Google or an email address to back up your Kipetchi, we receive the email address (or the relay address provided by Apple) and the provider’s identifier.
• Game data: your Kipetchi’s name, an optional first name, onboarding preferences (general needs, duration, preferred time), activities done and their timestamps, Chi, Diamonds, trips, discoveries, items, missions and day streak.
• Purchases: Kipetchi+ subscription status (monthly, yearly, free trial or lifetime), diamond pack purchases and purchase history, sent by the App Store or Google Play through our provider RevenueCat. We never have access to your payment details.
• Profile photo (optional): if you add your photo (from your photo library or the camera, only when you ask), it is resized to 256 px on your phone and then stored in a private space in our database. Only you and your friends can see it (and the Kipetchi team when handling a report or a support request). You can change or remove it at any time; it is deleted with your account.
• Messages between friends: if you write to a friend, we store the text of your messages (300 characters max), the stickers and quick words you send, their date and read status, to deliver them and show your conversations. Only you and that friend can read them. You can only write to an accepted friend. If you report a message, a copy of its text is sent to the Kipetchi team for review; if you block someone, we store that block to enforce it. We do not look at your conversations, except for a reported message or when the law requires it.
• Notifications: if you allow them, a push notification token and your reminder preferences. Notifications are delivered through Expo, then Apple or Google (see section 4).
• Mood of the day (optional): if you log your mood, we store the face you picked and, if you pick one, a word from a list (no free text), to show you your history. Only you can see this data: neither your friends nor product analytics have access to it.
• Product analytics: pseudonymised technical events (e.g. “activity completed”, “screen shown”, app version, device type) to understand what works and fix bugs. They are sent to PostHog (EU) with a random installation identifier, and a limited list of them is also stored in our Supabase database (event log), linked to your account’s technical identifier (never to your email or name), to measure retention and improve the app. These events contain no personal content (no free text, no name, no email, not your mood, not the text of your messages). We also receive diagnostic data (technical errors, sync failures) to fix bugs. We also store the country set in your phone’s settings (not your location), the language, the operating system, the app version and the date of your last visit.
• Session recordings: to understand where the app is confusing or gets stuck, we record, for only part of the sessions (about one in five), replays of the app’s screens (screenshots of the interface and taps), linked to the same random installation identifier. Text inputs are masked (what you type is never recorded), and neither technical logs nor network requests are captured. Since version 1.0.1, messages between friends and profile photos are masked too; in version 1.0.0, a message or photo shown on screen could appear in them. Nothing outside the app is recorded. These replays are used only to improve the app, are hosted by PostHog in the European Union and are kept for 13 months at most.
• Anti-abuse: to prevent referral abuse, an encrypted fingerprint (SHA-256) of an installation identifier is stored; it cannot identify you and is kept after your account is deleted.
• Support: the content of messages you choose to send us.
• Step count (optional): if you turn on walking, the app reads your daily step count on your phone (Motion & Fitness on iPhone, Health Connect on Android) so your Kipetchi can find treasures. Access is read-only: only the step count is read, no other health data is accessed and nothing is written to Health Connect. The step count stays on your phone; only the tier reached that day (3,000, 6,000 or 10,000 steps) is sent to our server to give you the reward once a day. You can withdraw permission at any time in your phone settings. This data is never shared, sold or used for advertising.
• Friends: if you add friends with a friend code or an invite link, they see your Kipetchi’s name, your first name (the first word only, if you entered it), its stage, the costume it wears, your decorated home and a short non-sensitive summary (day streak, number of care actions, latest find, ongoing trips and visits), as well as your profile photo if you added one. You can send each other gifts and cheers, write to each other (see “Messages between friends”), visit each other and go on trips together. They don’t see your email, your moods or the details of your activities. You can remove or block a friend at any time.
• Image sharing: postcards and photos of your Kipetchi are created on your phone. They are only shared if you tap “Share”, to the app you choose.

What we don’t collect: no medical data (only the step count is read, and only if you turn on walking), no questions about your health, no geolocation, no access to your contacts or microphone, no access to your photo library or camera except when you choose your profile photo yourself (the app can also save an image to your library when you ask), no advertising identifier, no ads and no data resale.

No tracking: we do not link your data with data from other companies for advertising purposes, and we do not share it with data brokers.

On this website

• Waitlist: your email address, if you sign up, only to tell you about the launch.
• Audience measurement: we use PostHog, hosted in the European Union (Frankfurt), configuredwithout cookies or local storage (no data is stored on your device) and without session recording. We measure page views and a few events (waitlist sign-up, store badge click, article read) to get aggregated statistics. Your IP address is not kept (PostHog’s “Discard client IP data” option). You can object by blocking eu.i.posthog.com or by writing to us.

3. Why, and on what legal basis

4. Our providers (processors)

• Supabase: database, authentication and storage (including messages between friends and profile photos). Hosted in the European Union (eu-west-3 region, Paris, France).
• RevenueCat: subscription and in-app purchase management (United States, covered by the European Commission’s standard contractual clauses and/or the Data Privacy Framework).
• Apple (App Store) and Google (Google Play): app distribution, payments, sign-in with Apple / Google if you choose it, and delivery of push notifications.
• Expo (650 Industries, United States): routing of push notifications to Apple and Google (device token, notification title and text, which may contain a friend’s first name or their Kipetchi’s name), covered by the standard contractual clauses.
• Google (Health Connect): Android only, on your phone, if you turn on walking (step count read only).
• PostHog: website audience measurement and product analytics, anonymised in-app session recordings (inputs masked), hosted in the European Union (eu.posthog.com), no cookies, aggregated statistics.
• Hostinger: hosting of the kipetchi.com website on a server located in France (Paris).

When data is transferred outside the European Union, these transfers are covered by appropriate safeguards (adequacy decision, standard contractual clauses).

5. For how long

• Account and game data: as long as your account exists. An anonymous account inactive for 24 months may be deleted.
• After you delete your account: erased within 30 days at most, technical backups included.
• Purchase data: for the period required by accounting obligations (up to 10 years), in minimal form.
• Waitlist: until launch, then 12 months at most, or until you unsubscribe.
• Support messages: 3 years after the last exchange.
• Moods: as long as your account exists (deleted with it).
• Messages between friends: as long as your account exists; they are deleted with the sender’s or recipient’s account. A reported message is kept as long as needed to handle the report and keep the service safe.
• Profile photo: until you remove it, or until your account is deleted.
• Usage events (event log and PostHog) and session recordings: 13 months at most, then deleted or aggregated anonymously.
• Notification tokens: deleted when you sign out, delete your account, or when they are no longer valid.

6. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions for what happens to your data after your death.

• Export: in the app, Menu → Settings → My data → Export (readable file).
• Deletion: in the app, Menu → Settings → My data → Delete my account. See also theDelete my account page.
• By email: team@kipetchi.com. We reply within one month at most.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the authority of your country.

7. Children

Kipetchi is intended for people aged 16 and over. If someone under 15 uses it anyway, the consent of a person with parental authority is required, in accordance with Article 45 of the French Data Protection Act.

8. Security

Exchanges are encrypted (HTTPS/TLS). Each user can only access their own data (row-level access rules in the database). Internal access is limited to what is strictly necessary.

9. Contact us

For any question about your data: team@kipetchi.com, or by post to 2 FRESH STUDIO, 20 rue Paul Valéry, 93420 Villepinte, France.

10. Changes

We may update this policy. In case of a significant change, we will let you know in the app before it takes effect.