Privacy Policy

English translation of our Politique de confidentialité. In case of discrepancy, the French version prevails.

Data controller

The controller of your personal data is Nicolas LAURENT, publisher of Adsum (see the legal notice, in French).

Data Protection Officer (DPO): Alexandre MARRAUD DES GROTTES, reachable at dpo@adsum-app.fr.

Data collected through the website

When you fill in a form on this website (contact, spiritual assistant application, organisation enquiry, launch waiting list), we collect:

  • your name and email address;
  • your phone number, if you choose to provide it (optional);
  • the name of your organisation, if you choose to provide it (optional);
  • the content of your message;
  • the page the form was sent from.

This information is used solely to handle your request. It is stored in our Supabase database and is never used for advertising purposes nor shared with third parties for such purposes.

Data collected through the app

  • Account data: name, email, role (layperson / spiritual assistant), affiliated organisation.
  • Profile data: address, availability, depending on the fields filled in by the user.
  • Appointment data: booked time slots, status, history.
  • Push notification token (for appointment reminders), recorded at each session.
  • Technical connection data required for the service to work.

Purposes

This data is used to answer requests sent through the website, to enable matching between users and spiritual assistants, to book appointments, to send notifications related to account activity, and to allow the relevant Organisations to administer the platform.

Audience measurement (Umami)

To measure website traffic and improve user experience, we use the open-source analytics platform Umami, self-hosted on our own servers in France.

This tool is 100% cookie-free (cookieless) and does not track users across different websites. In accordance with CNIL and GDPR privacy guidelines, it is exempt from prior consent:

  • no persistent cookies or trackers are placed on your device;
  • your IP address is immediately anonymised and never stored in plain text;
  • the collected data is strictly aggregated (visited pages, device type, country, referrer) and is never sold or used for profiling or advertising purposes.

The legal basis for this processing is our legitimate interest in understanding how the website is used to improve its service.

Hosting and data location

The website front-end is delivered by Cloudflare (Cloudflare Pages). Because the pages are static, form data does not transit through Cloudflare's servers: it is sent directly to our servers (API and database) hosted on Oracle Cloud Infrastructure, located in the European Union (France — Marseille region), where the app data is stored as well.

Processors

  • Cloudflare (website front-end hosting and delivery).
  • Oracle Cloud Infrastructure (server infrastructure, API and database hosting in France — Marseille region).
  • LiveKit (video call infrastructure of the app).
  • Expo (delivery of the app's push notifications).

Retention

Messages sent through the website forms are kept for as long as needed to handle your request, then for a maximum of three years from our last contact, after which they are deleted or anonymised.

App account data is kept for as long as the account is actively used. It is deleted when the account is deleted; technical backups still containing it are purged within a maximum of 30 days. Longer retention only occurs where required by law.

Account deletion

You may request the deletion of your account and of the associated personal data from within the app, or through our dedicated page if you no longer have access to it.

Moderation and account security

When an account is suspended for breaching our terms of use, we keep a limited number of technical identifiers (email address in a normalised form, and device identifier) in order to prevent the suspension from being circumvented by immediately creating a new account. The legal basis for this processing is our legitimate interest in keeping the service safe and protecting its users. This data is used for that purpose only, is never used for advertising, and is deleted once the suspension is lifted or is no longer justified. You can ask for a suspension to be reviewed by writing to our support team.

Your rights

Under the GDPR, you have the right to access, rectify, erase, object to the processing of, and port your data. To exercise these rights, write to our DPO at dpo@adsum-app.fr or use our support page. You may also lodge a complaint with the French data protection authority (CNIL).