This policy explains what data the Quoi Manger Enceinte app and its website process, why, on what basis and for how long, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (law no. 78-17 of 6 January 1978).
In short. No account, no ads. Your profile (first name, age, month of pregnancy, eating habits), your favourites and your chats with Myrtille stay on your phone. A question is only sent to the artificial intelligence if you have agreed, and it is not kept on our servers. We measure how the app is used without ever knowing what you eat or how far along you are. Payments go through Apple or Google.
1. Data controller
BAUGEY MATHEO, trading as DEVOLIM
248 rue de Bègles, 33800 Bordeaux, France
Company number (SIREN): 948 000 757
Email: contact.alimentationgrossesse@devolim.fr
Given the nature and scale of the processing carried out, appointing a data protection officer is not required under Article 37 GDPR. Any request relating to personal data may be sent to the address above.
2. Principles
- No account to create; no email address or phone number requested.
- Information about your pregnancy stays on your phone.
- No advertising, no ad tracking, no advertising identifier collected.
- No data sold, rented or transferred.
- Artificial intelligence is only used with your consent, and your questions are not kept on our servers.
3. Data processed
3.1 Data kept on your device
Your first name, age range, month of pregnancy, eating habits, country, favourites, the guides you have opened, your settings, the date you accepted the health disclaimer and your chats with Myrtille are stored only on your phone. We have no access to them. Chats delete themselves 7 days after their last message; everything else is removed when you tap "Delete my data" or uninstall the app.
3.2 Data transmitted
Anonymous identifier. On first launch, the app creates a random technical identifier (Firebase Authentication anonymous sign-in). It contains neither your name, nor your email address, nor your phone number. It is used to link your purchases and to apply the usage limits that protect the service.
Questions to Myrtille, only with your consent. A question is sent, encrypted, to our server function (Google Cloud, in Belgium) together with the latest exchanges of the current chat, the identifiers of the related guides, and the app's country and language. The function checks your Premium access, then passes the question and the matching official guides to OpenAI, which writes the answer. We keep neither the questions nor the answers. OpenAI does not use them to train its models and may keep them for up to 30 days to detect abuse before deleting them. Do not write your name or anything that could identify you in your questions. Without your consent, Myrtille answers with the guides on your phone, without sending anything; you can withdraw your consent at any time in the settings ("AI-written answers").
Technical counters. On our servers (Google Cloud Firestore, in Europe), only counters are linked to your anonymous identifier: the number of recent questions, for usage limits, and the status of your Premium access, cached for a few minutes.
Usage measurement and stability. Google Analytics for Firebase receives the screens shown and the features used; Firebase Crashlytics receives crash reports (device model, system version, app state at the time of the error). These tools never receive your month of pregnancy, your age, your eating habits, the foods you look up, your searches or your questions.
Service protection. Every request to our servers carries a Firebase App Check attestation (Apple App Attest and DeviceCheck, Google Play Integrity) proving that it comes from the genuine app. We do not keep these attestations.
Messages sent from the app. If you write to us from the app ("Write to us"), your message is sent to our servers (Google Cloud Firestore, in Europe) together with the rating you may have given the app, the app version, your phone's system, the app language and your anonymous identifier. It contains neither your name nor your email address: we therefore cannot reply to it, and we ask you not to include any health information. It is deleted automatically 12 months after it is sent.
Purchases. See "Subscriptions and purchases".
Contact. If you write to us, we use your email address and your message to reply.
4. Legal bases
| Purpose | Legal basis |
|---|---|
| Questions to Myrtille processed by artificial intelligence | Explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), which can be withdrawn at any time |
| Providing the app and the Premium offer (anonymous identifier, purchases) | Performance of the contract (terms of use and sale) |
| Usage limits, App Check, abuse prevention | Legitimate interest: ensuring the service and its security |
| Usage measurement and crash reports | Legitimate interest: improving the app and fixing errors |
| Replying to your messages | Legitimate interest: answering your requests |
| Messages sent from the app and rating given to the app | Legitimate interest: improving the app and fixing errors |
| Keeping purchase records | Legal obligation |
5. Recipients and processors
| Provider | Role | Data concerned |
|---|---|---|
| Google Ireland Limited (Firebase, Google Cloud), Gordon House, Barrow Street, Dublin 4, Ireland | Anonymous sign-in, server function, database, App Check, Analytics, Crashlytics | Anonymous identifier, questions passed on (not stored), counters, messages sent from the app, usage and crash data |
| OpenAI Ireland Ltd (Dublin, Ireland) and OpenAI, L.L.C. (San Francisco, United States) | Writing Myrtille's answers, only with your consent | Question, latest exchanges of the chat, matching official guides and tips |
| RevenueCat, Inc. (United States) | Purchase and Premium access management | Anonymous identifier, transaction information sent by the store |
| Apple and Google | Sale and payment on their stores, as controllers of their own processing | Your Apple or Google account data |
| OVH SAS, 2 rue Kellermann, 59100 Roubaix, France | Website hosting | Website technical logs |
No data is sold, rented or otherwise transferred to third parties for commercial purposes.
6. Transfers outside the European Union
Some data may be processed in the United States (OpenAI, RevenueCat, and Google for some services). These transfers are covered by the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise by the standard contractual clauses adopted by the European Commission.
7. Retention periods
| Data | Period |
|---|---|
| Profile, favourites and settings (on the phone) | Until deleted in the app or the app is uninstalled |
| Chats with Myrtille (on the phone) | 7 days after the last message |
| Questions and answers (server) | Not kept by us; up to 30 days at OpenAI |
| Technical counters (server) | 30 days after their last update |
| Usage data linked to a device (Analytics) | 2 months |
| Crash reports (Crashlytics) | 90 days |
| Transaction information (RevenueCat) | Duration of the relationship, then legal time limits |
| Messages sent from the app (server) | 12 months after they are sent |
| Messages sent to support | 3 years after the last exchange |
8. Advertising and tracking
Quoi Manger Enceinte shows no advertising and does no ad tracking. Your phone's advertising identifier is not collected, and the app does not ask for Apple's tracking permission (App Tracking Transparency), which it does not need.
9. Subscriptions and purchases
Payments are collected by Apple (App Store) or Google (Google Play): the publisher sees neither your identity nor your bank details. RevenueCat, our purchase management provider, receives your anonymous identifier and the transaction information sent by the store (product, dates, country, currency, receipt) in order to unlock your Premium access on your devices.
10. Security
Exchanges are encrypted (HTTPS). The server only accepts requests from the genuine app (App Check), secret keys stay on the server, usage limits protect the service, access to admin tools is restricted to the publisher, and your most personal data never leaves your phone.
11. Website
This website sets no cookies and uses no audience measurement tool. Fonts are hosted on our own servers: no request is made to a third party during your visit. The host (OVH) keeps technical logs (IP address, pages requested) for security, for a limited time.
12. Your rights
Under Articles 15 to 22 GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions concerning your data after your death (Article 85 of the French Data Protection Act). These rights can be exercised by email at contact.alimentationgrossesse@devolim.fr. We reply within one month, extendable by two further months for complex requests.
You can withdraw your consent to the processing of your questions by the artificial intelligence at any time, in the app settings. As we do not know your identity, data stored on your phone is deleted directly from the app (Settings, My data); the technical counters linked to your anonymous identifier delete themselves no later than 30 days after your last question.
13. Complaint to the CNIL
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.
14. Minors
The app is intended for adults. If you are under 15, the agreement of a person with parental authority is required before you accept that your questions be processed by the artificial intelligence.
15. Changes
This policy may be amended to reflect legal or technical developments. The last update date appears at the top of this page; substantial changes are notified within the app.
This is a translation provided for convenience. In the event of any discrepancy, the French version prevails.