Privacy Policy
Last updated: February 15, 2025Our commitment: Your personal data belongs to you. We do not sell it, we do not share it for advertising purposes, and we store it exclusively in Europe.
Data Controller
The data controller is:
Offinity
Email: duc.haduong@officience.com
Data Collected
Account Data (via Google OAuth)
When you sign in via Google, we access:
- Email address
- Name or username
- Profile picture
Content Data
- Journal entries
- Goals and progress
- Comments and interactions
- Badges and relationships with your circle
Technical Data
- IP address (anonymized)
- Device type, operating system, and browser
- Connection data (timestamps)
- Anonymized usage statistics
Processing Purposes
| Purpose | Legal Basis |
|---|---|
| Service provision | Contract performance |
| Account management | Contract performance |
| Notifications (optional) | Consent |
| Service improvement | Legitimate interest |
| Security and abuse prevention | Legitimate interest |
Data Hosting
All your data is hosted in France, at Scaleway (Paris and Amsterdam datacenters), a European host compliant with GDPR.
No data is transferred outside the European Union.
Data Sharing
Your data is never sold. It may only be shared:
- With members of your circle of trust (according to your settings)
- With our technical providers (hosting, email) under GDPR contract
- If required by law (court order)
Data Retention
- Active account: data retained as long as the account exists
- After deletion: data deleted within 30 days
- Backups: deleted within 90 days
Your Rights
Under GDPR, you have the following rights:
- Access: obtain a copy of your data
- Rectification: correct your data
- Erasure: delete your account and data
- Portability: export your data in a standard format
- Objection: object to certain processing
- Restriction: limit the processing of your data
To exercise these rights: duc.haduong@officience.com
Security
We implement appropriate security measures:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Secure authentication
- Regular encrypted backups
- Limited data access by our team
Cookies
We only use cookies essential to the operation of the service:
- Session cookie (authentication)
- Language preferences
No advertising or third-party tracking cookies are used.
Minors
The Service is not intended for persons under 16 years of age. We do not knowingly collect data from minors.
Changes
We may update this policy. In case of significant changes, you will be notified by email or notification in the application.
Contact and Complaints
For any questions or complaints:
- Email: duc.haduong@officience.com
- You may also file a complaint with CNIL (French data protection authority)