Privacy policy

E-snad is published by AMACARE LIFE LLC. This page describes the data processed when you use the app, why, and your rights. It is written to be read.

What we collect, and why

• Without an account: nothing that identifies you. Your progress, saved cards and answers to the starting questionnaire stay in your browser (local storage). The language choice and the free chapter of the day are technical cookies.
• With an account: your email address, the account creation date and your synced progress (chapters read, saved cards, points, day streak). Basis: performance of the contract.
• If you pay: Stripe processes the payment. We receive the Stripe customer id, the type of offer, the subscription status and its renewal date, and the billing email. We never see or store your card number. Basis: performance of the contract and our accounting obligations.
• If you give a gift: the first names and the message you type are inside the link you pass on yourself; we keep them with the payment.
• Audience measurement: anonymous events (page viewed, chapter started, chapter finished, offer viewed, checkout started, purchase) with a random identifier set in a cookie, the language, the page address and the time. No IP address, name or email is recorded with these events. Basis: our legitimate interest in understanding how the app is used.
• If you write to us: your email and the content of your message, for as long as it takes to answer you.

Where the data goes

• Vercel Inc. (United States) hosts the app and provides cookieless performance measurement.
• Supabase Inc. (United States) hosts the database and accounts. Database region: [to be completed].
• Stripe processes payments and invoices; its own privacy policy applies on the payment page.
• Meta Platforms, only if advertising measurement (Meta pixel and Conversions API) is enabled: see the Cookies page.

We do not sell your data and we do not use it for purposes other than those described here.

Transfers outside the European Union

Our providers are established in the United States or process data there. These transfers rely on recognised mechanisms: the adequacy decision for the EU-US Data Privacy Framework for providers certified under it, or the European Commission's standard contractual clauses.

Retention periods

• Account and progress: as long as your account exists, then deletion within 30 days of your request.
• Payments and invoices: the period required by applicable accounting and tax obligations.
• Anonymous measurement events: [to be completed: retention period, 13 months suggested].
• Cookies: see the Cookies page.

Your rights

Access, rectification, erasure, portability, restriction, objection, withdrawal of consent: write to contact@esnadbook.com from your account's email address. We answer within one month. You can also contact the data protection authority of your country (in France, the CNIL).

Children

The app is not intended for children below the digital age of consent in their country (15 in France) without a parent's agreement. If a child has created an account, write to us: we delete it.

Security

Connections are encrypted (HTTPS). Paid access is recorded on the server and cannot be changed from your device. The database keys never leave the server. No measure is perfect: tell us if you notice a problem.

Data controller

AMACARE LIFE LLC. Email: contact@esnadbook.com. Postal address: see the legal notice.

Representative in the European Union (article 27 GDPR): [to be completed].

Changes

This policy may change; the date at the top of the page shows its latest version. A significant change is announced in the app or by email.