What we do with your data.

When you first open the app (or the online game), an anonymous account is created. You can then sign in with Apple, Google or an email address and password: we then receive your email address and the identifier provided by these services, so you can find your progress on all your devices. Your username, avatar, your device's country and your progress (games, scores, streaks, trophies, trail steps) are stored on our servers, located in Germany (European Union).

When you play a duel game, your answers (right or wrong, response time) are recorded so they can be replayed against other players for up to 90 days. Your opponent then sees your username, avatar, your country's flag and your number of trophies. They never see your name or email address.

At first launch, the app asks a few optional questions: your first name, age range, gender, what motivates you, how many quizzes you aim for each week and your reminder time. Every question can be skipped. Your first name stays on your device and is never sent. The other answers are linked to a pseudonymous identifier in our analytics tool, to understand who uses Sapiro and improve the app.

We use PostHog, hosted in the European Union, to measure how the app, the online game and the website are used: screens and pages viewed, games played, subscription screens, purchases, technical errors, device model, language, version, landing page and source (link, campaign). This data is linked to a pseudonymous identifier, never to your name or email address. We do not record your sessions. On the website, we also use Umami, a visit statistics tool we host ourselves. Neither sets cookies.

To know which ad campaigns bring installs and subscriptions, the app uses Singular. Singular receives technical information about the device (model, system, IP address, app-specific identifier) and a few key steps (install, sign-up, first game, trial start, subscription); it passes conversion results to ad networks (Meta, TikTok, Apple), without your name or email. On iOS, measurement goes through Apple's SKAdNetwork: we do not ask for tracking permission and do not use the advertising identifier. On Android, the app does not access the advertising identifier. On iPhone, RevenueCat also receives the Apple Search Ads attribution token.

In the app, purchases are made through the App Store or Google Play. In the online game, payment is processed by RevenueCat and Stripe: we pass your account email address for the receipt. We never see your bank details. RevenueCat keeps your purchase history and subscription status to activate Sapiro+ on all your devices.

When you write to us from “Contact us”, we receive your message, its type (bug, idea, mistake), the app version, platform and language. We use them only to fix and improve Sapiro.

If you allow them, reminders (daily challenge, streak, end of trial) are scheduled locally on your device. No data is sent to deliver them. You can turn them off at any time in your phone settings.

The app and the online game store your session, settings, questionnaire answers and offline progress locally. On the website and the online game, this information is kept in the browser's local storage, not in cookies.

Only our service providers, for the uses described above: Supabase (database, our servers in Germany), PostHog (analytics, EU), Singular (campaign measurement), RevenueCat and Stripe (subscriptions), Apple and Google (sign-in, purchases), Cloudflare (website hosting). Some of these providers may process data outside the European Union; they do so under the safeguards provided by the GDPR (standard contractual clauses or the Data Privacy Framework).

Your account, progress and duel games are kept as long as the account exists; a game is no longer offered as a duel after 90 days. Analytics data is kept for at most two years. Purchase data is kept for as long as our accounting obligations require.

In the app: Profile tab, “Delete my account”. On the web: open sapiro.app/en/play/?delete-account, sign in, then confirm the deletion (or, in the online game, open the Account window and choose “Delete my account”). This immediately erases your account, username, progress, duel games and trophies. Messages sent through “Contact us” are kept without being linked to you. Deleting your account does not cancel an active subscription: cancel it first where you bought it. To also erase analytics, campaign and purchase data, write to [email protected]: we handle requests within 30 days.

Sapiro is made for the whole family, children included. For younger players, we made simple choices: no ads, no advertising identifier, no messaging between players, an optional account, and the first name entered at welcome never leaves the device. In duels, a player appears to others only through their username, avatar, country flag and trophies. Purchases go through the App Store or Google Play, with their parental controls. A parent can at any time request access to or deletion of their child's data by writing to [email protected].

Under the GDPR, you can access, correct or delete your data, object to its processing or request its portability. Write to [email protected]. If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

This policy may be updated. The date at the top of the page shows the latest version.

Agence Debord EURL, 9 rue des Colonnes, 75002 Paris, France — [email protected].