Privacy policy

1.Data controller

The controller of the data described in this policy is:

DAM APP, a French simplified joint-stock company with a sole shareholder (SASU) with share capital of €1,000, registered office at 173 rue de Courcelles, 75017 Paris, France (SIREN 109 588 988), publisher of the Favored app and of the damapp.app website.

For any question about your data: contact@damapp.app.

2.Scope

This policy applies to the Favored mobile app (iOS and Android), an affirmation playlist app for manifesting. It explains what data is processed, why, on what legal basis, by which providers, where and for how long, and the rights you have under the EU General Data Protection Regulation (GDPR), the French Data Protection Act and, where applicable, US state privacy laws.

The Miny app, also published by DAM APP, has its own privacy policy.

3.What stays on your phone

Favored works without an account: no sign-up, no email address, no password. The following data is stored only on your device, and DAM APP has no access to it:

• your first name, your answers to the welcome quiz, your wishes and the themes you pick (for example sleep or inner peace), which are used to build your playlist;
• your playlists, your liked affirmations, your scenes and their audio, your subliminals;
• your recordings (your own voice) and any photo you choose for a scene;
• your reminders, your favorites, your preferences and the content of your widgets (storage shared with the widget on the device);
• your consent choices and their date;
• the subscription status shown in settings (plan, price, next renewal date) and the dates of your trial-end and renewal reminders.

Reminders are notifications scheduled locally by your phone’s system; Favored does not use push notifications. This data may be part of your phone’s backup (iCloud or Google) if you turned it on, under Apple’s or Google’s settings. There is no sync between devices.

4.Your choices

On first launch, Favored offers you separate choices on one screen, none pre-checked. None is required to use the app, and you can change your mind at any time in the app’s settings:

• “Create from your own words” (AI), never pre-checked: allows your words and recordings to be sent to our server, then to OpenAI or Anthropic for writing and to ElevenLabs for the voice, to write and read your creations. This choice includes confirming that you are at least 16. Without it, no creation request is sent: you keep the catalog playlists, the lines built into the app and night mode.
• “Help the app grow” (stats), never pre-checked: allows usage statistics (PostHog) and crash reports (Sentry) to be sent. Without it, nothing is sent to these services, and pending events are discarded.

Ad measurement (AppsFlyer, see below) depends on your country:

• in the EU, the EEA (including Norway, Iceland and Liechtenstein), the UK and Switzerland (“Europe” below), a third separate box, “Measure our ads”, unchecked, is on that same first screen; AppsFlyer starts only after you agree, and you can change your mind in Settings;
• elsewhere, there is no box: AppsFlyer starts after the first screen (on iPhone, after you answer Apple’s tracking request), and you can turn it off at any time with “Do not sell or share my info” in Settings.

Your country is determined by the country of your App Store or Google Play account, otherwise by your phone’s region; when in doubt, the European rule applies.

Withdrawal applies going forward and does not affect processing already carried out. The date of each of your choices is kept on your phone.

5.Creating from your words: AI and voice

When you create or edit a playlist, a scene or a subliminal, and only if you accepted “Create from your own words”, the app sends to our server over HTTPS what the creation needs: what you are manifesting, your answers to the questions, your first name, any names you give (for example a loved one’s or a friend’s), the text to edit, and the chosen language and voice.

1. Our server is hosted on Google Cloud Run, in the European Union region (Belgium, europe-west1).
2. It sends the text to OpenAI to write the affirmations, questions and scenes and to prepare the text to be read, and to Anthropic as a backup if OpenAI does not respond.
3. It sends the text to be read to ElevenLabs, which turns it into a voice (text-to-speech).
4. The result comes back to your phone, where it is saved. Our server keeps neither your words nor the audio produced.

OpenAI, Anthropic and ElevenLabs are located in the United States. OpenAI may keep requests for up to 30 days to detect abuse; Anthropic and ElevenLabs keep them under their own terms. Under the terms of their API services, OpenAI and Anthropic do not use this data to train their models; ElevenLabs processes it under its API terms. These providers receive no device identifier, no advertising identifier and no account.

Your own voice. If you record your affirmations in your own voice, the recording goes once through our server and ElevenLabs’ voice isolation tool to remove background noise, then comes back to your phone. Our server does not keep it.

Dismissing an affirmation. When you dismiss a line (thumbs down), it is sent to our server, which records only its category, language and an identifier or fingerprint, never the text, to improve the lines we suggest.

You should check generated texts before relying on them: an automated system can make mistakes (see the terms of use).

6.Sensitive data and other people’s data

Favored collects no health data: the app asks you no questions about your health and does not connect to Apple Health or Health Connect. Your wishes and the themes you pick, including sleep or inner peace, stay on your phone to build your playlist; they are never sent to statistics, AppsFlyer or any ad platform.

What you write freely to create may still reveal personal information, for example about your love life or your beliefs. That is why sending your words relies on your explicit consent (Article 9(2)(a) GDPR), asked before the first request and revocable at any time. Please don’t write information about your health there.

Other people’s first names that you give are used only to write your creations: our server does not keep them and otherwise they stay on your phone. Please give only a first name, never a full name or details that would precisely identify someone else.

7.Catalog voices

The voices of some catalog playlists are stored in a private Google Cloud Storage space (United States) and streamed through our server, then kept on your phone so you can listen offline. This download contains none of your data; as with any connection, our server receives your IP address and technical information (see the next section). It happens even without the “Create from your own words” consent, because it is needed to listen to the catalog.

8.Server, security and logs

• Request logs: as with any online service, Google Cloud automatically logs the IP address, device type (user agent) and address requested for each request, for 30 days. Our own logs record the route, duration and errors, never the content of your creations.
• Abuse prevention: with creation requests, the app sends a random identifier unique to your phone, used only to count requests. Our server keeps only a fingerprint (hash) of this identifier and of your IP address, in Google Cloud Firestore counters (European Union, Belgium) over one-hour and one-day windows, which are deleted automatically when they expire. This identifier is not tied to any account, and a new one is drawn after “Erase my data”.
• App integrity: the app proves to our server that it is the genuine Favored app using Firebase App Check (Google), which relies on Apple App Attest or Google Play Integrity. This sends a technical token, not your words. It is strictly necessary for the security of the service, so it does not require consent under ePrivacy rules.

Legal basis: DAM APP’s legitimate interest in securing the service and preventing abuse (Article 6(1)(f) GDPR).

9.Usage statistics (PostHog)

Only if you accepted “Help the app grow”, the app sends usage statistics to PostHog, on its European Union infrastructure (eu.i.posthog.com). They are tied to a random ID generated by PostHog on your phone: they are therefore pseudonymous, not anonymous.

• They are limited to event names (for example “listening ended”), identifiers of steps or catalog playlists, numbers (durations, loops) and yes/no flags;
• and a few general properties: language, country of the phone’s regional settings, welcome quiz version, app version, and the source of the link that opened the app (“utm” campaign parameters).

Your wishes and the themes you pick are not included. Statistics never contain your affirmations, your first name or anything you write (the app drops any string longer than 60 characters). There are no person profiles, no session replay and no automatic capture of interactions; the app removes the device name and the IP address from the properties it sends.

Legal basis: your consent (Article 6(1)(a) GDPR), revocable at any time in settings.

10.Crash reports (Sentry)

With the same “Help the app grow” consent, Favored sends crash reports to Sentry (Functional Software, Inc.), with ingestion in the European Union (Germany). They contain technical information: error trace, device model, system and app versions, navigation steps. Default sending of personal data is disabled; there are no screenshots, no copy of the view hierarchy, no console or touch logs, and no user information is attached. Reports are kept for 90 days at most.

Legal basis: your consent (Article 6(1)(a) GDPR).

11.Ad measurement (AppsFlyer)

We promote Favored with ads, especially on TikTok. To know which campaigns bring installs and subscriptions, Favored uses AppsFlyer, an attribution measurement tool.

• In Europe (EU, EEA including Norway, Iceland and Liechtenstein, UK, Switzerland), the unchecked “Measure our ads” box is on the first consent screen, next to the AI and stats choices. AppsFlyer is not started until you check it. Without your consent, it reads no identifier, including Apple’s identifier for vendors (IDFV), and RevenueCat sends it nothing. You can change your mind in Settings. Your choice is passed on to AppsFlyer for the platforms that require it.
• Your country is determined by the country of your App Store or Google Play account, otherwise by your phone’s region; when in doubt, the European rule applies.
• Elsewhere, there is no box: AppsFlyer starts after the first screen (on iPhone, after you answer Apple’s tracking request). You can turn it off at any time with “Do not sell or share my info” in Settings, which stops sharing with ad platforms and confirms that your request was honored.
• AppsFlyer receives install and device data: device model, operating system and version, IP address, an AppsFlyer ID created at install, and the dates the app was installed and opened.
• On iPhone, Favored also asks for Apple’s tracking permission (App Tracking Transparency), after the first consent screen (and, in Europe, only if you checked “Measure our ads”). Apple’s advertising identifier (IDFA) is shared only if you allow it. Declining blocks no feature.
• On Android, AppsFlyer receives the Google advertising ID (GAID) when measurement is on; you can reset or delete it in your phone’s settings (Google › Ads).
• The only events sent are: install, app open, trial start, subscription start, renewal and cancellation, with their amount and currency. Subscription events are sent by RevenueCat, only when measurement is on, without your name or payment details.
• AppsFlyer may tell the ad platform concerned (for example TikTok) that an install or a subscription came from one of its campaigns. Ad platforms such as TikTok act as independent controllers for what they do with this information; see their policies.

AppsFlyer never receives your affirmations, your creations, your first name, your recordings, or any wish, theme or playlist.

AppsFlyer Ltd. is based in Israel, which benefits from a European Commission adequacy decision; its servers may be located in the European Union and the United States.

Legal basis: in Europe, your consent (Article 82 of the French Data Protection Act and Article 6(1)(a) GDPR), given with the “Measure our ads” box before AppsFlyer starts; on iPhone, also Apple’s tracking permission for the IDFA. Elsewhere, our legitimate interest in measuring our ads (Article 6(1)(f) GDPR), which you can object to at any time in Settings.

12.Subscriptions and purchases

The Favored Plus subscription is bought through Apple’s App Store or Google Play, which process the payment. DAM APP never sees your payment details.

To check your access rights, Favored uses RevenueCat (United States), which links a random RevenueCat ID generated by the app to the purchase information sent by Apple or Google (product, price, dates, subscription status, store country), without your name or card. RevenueCat sends your subscription events to AppsFlyer only if ad measurement is on (see the previous section).

We keep the record of your purchase and consent to the renewal terms for at least three years, as required by some US state laws.

If notifications are allowed, Favored reminds you 3 days before your trial ends, 30 days before a yearly renewal and once a year for a monthly plan. These reminders are scheduled locally from the dates stored on your phone.

Legal basis: performance of the subscription contract (Article 6(1)(b) GDPR) and compliance with our legal obligations, including accounting and consumer law (Article 6(1)(c)).

13.Device permissions

• Microphone: only when you choose to record your voice. You can decline; the rest of the app remains available.
• Photos: only to pick a photo for a scene, in the system picker. The photo stays on your phone. Favored does not use the camera.
• Notifications: for your daily reminder and the trial-end and renewal reminders, scheduled locally.
• Tracking (iPhone): Apple’s tracking permission request, described in the “Ad measurement” section.
• Age range (if your store provides it): used only to check you are 16 or older, not kept.

Favored does not ask for access to your location, contacts, calendar or your phone’s health data (Apple Health, Health Connect). It may offer you to rate it through Apple’s or Google’s native interface, which handle your rating directly.

14.Support and emails

When you write to us, we use your email address and the content of your message to answer your request and follow up on it. The app’s “Report a problem” button opens your email app with a pre-filled email stating the app version and the system (iOS or Android); nothing is sent until you send the email.

Legal basis: DAM APP’s legitimate interest in answering requests sent to it (Article 6(1)(f) GDPR).

15.What we don’t do

• No account, no email collection in the app, no location, no contacts.
• No ads in Favored.
• No sale of your data for money, no ad profile built by DAM APP.
• No health data collected; your wishes and themes never go to statistics, attribution or ads.
• Never your affirmations, your creations or your first name in statistics, crash reports, attribution or logs.

16.Purposes and legal bases

17.Retention periods

18.Recipients and processors

Your data is accessible only to DAM APP and to the following providers, to the extent necessary for their task:

For purchases and app distribution, Apple and Google act as controllers of their own processing.

19.Transfers outside the European Union

Our server, our counters, statistics (PostHog) and crash reports (Sentry) are processed in the European Union. Some data may however be processed outside the European Union:

• texts and recordings sent to OpenAI, Anthropic and ElevenLabs (United States);
• subscription data processed by RevenueCat (United States);
• attribution data processed by AppsFlyer (Israel, which benefits from an adequacy decision, and where applicable the United States), and events sent to ad platforms such as TikTok, under their own safeguards;
• website connection data processed by Netlify (United States).

These transfers rely on an adequacy decision of the European Commission, in particular the EU–US Data Privacy Framework where the recipient is certified, or otherwise on the standard contractual clauses adopted by the European Commission, supplemented where needed by additional measures. You can get information about these safeguards by writing to us.

20.Security

Exchanges between the app and our server are encrypted (HTTPS) and protected by an app key, Firebase App Check and request limits. DAM APP applies data minimisation: no storage of your words or audio on the server, no content in statistics, crash reports and logs, fingerprints rather than identifiers for the counters.

No system is infallible, so DAM APP cannot guarantee absolute security, but undertakes to notify any data breach to the CNIL (the French data protection authority) and to inform the people concerned where the law requires it.

21.Your rights

You have the right of access, rectification, erasure, restriction of processing, objection (in particular to processing based on legitimate interest), data portability where it applies, and the right to withdraw your consent at any time. You can also set instructions about what happens to your data after your death.

Directly in the app

• Withdraw your AI or stats consent: in the app’s settings.
• Stop ad measurement: in Europe (EU, EEA, UK, Switzerland), uncheck “Measure our ads” in settings; elsewhere, turn on “Do not sell or share my info”.
• “Erase my data”: erases all of Favored’s data on your phone (creations, scenes, photos, recordings, audio files), cancels scheduled notifications, clears widgets, forgets the device identifier and the trial end date, and resets the statistics identifier, turning measurement off until you agree again. Your subscription stays with Apple or Google: “Restore purchases” brings it back.
• Ad tracking: on iPhone, Settings › Privacy & Security › Tracking; on Android, reset or delete your advertising ID in Google settings.
• Uninstalling Favored also deletes its local data, subject to your backups.

By email

“Erase my data” does not erase data already received by our providers (server logs, requests kept by OpenAI, statistics, crash reports, attribution data). For that data, write to contact@damapp.app. Because Favored works without an account and uses random identifiers, we may ask you for an identifier shown in the app or other information that helps us find the data about you, never more than necessary; we may sometimes be unable to link it to you. We answer within one month, which may be extended as provided by the GDPR.

Complaints

If you believe your rights are not respected, you can lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr) or with the data protection authority of your country of residence.

Australia. We handle personal information in line with the Australian Privacy Principles of the Privacy Act 1988. Your information may be processed outside Australia by the providers listed in section 18. If you are not satisfied with our answer to a privacy complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand. We follow the Information Privacy Principles of the Privacy Act 2020, including for information sent to providers outside New Zealand. You can ask to access or correct your information at contact@damapp.app, and complain to the Office of the Privacy Commissioner (privacy.org.nz).

United Kingdom and Ireland. The rights above apply under the UK GDPR and the GDPR. You can also complain to the Information Commissioner’s Office (ico.org.uk) in the UK or the Data Protection Commission (dataprotection.ie) in Ireland.

22.US residents

If you live in a US state with a consumer privacy law (such as California, Colorado, Connecticut, Virginia, Texas or Oregon), you have the right to know what personal data we process, to access, correct and delete it, to get a copy, and to opt out of the sale of your data, of its sharing for cross-context behavioral advertising, and of targeted advertising.

Categories we process: identifiers (random app, PostHog, RevenueCat and AppsFlyer IDs; advertising ID if you allow it; IP address); commercial information (subscription status and history); internet or app activity (usage events); audio (your recordings, only to clean them); and what you choose to write to create (used only to create for you, with your consent, and never for ads). We don’t collect health data.

We don’t sell your data for money; sending install and subscription events to ad platforms through AppsFlyer may count as “sharing” or “sale” under some laws: you can opt out with “Do not sell or share my info” in Settings, by declining tracking on iPhone, or by writing to us.

To make a request, write to contact@damapp.app; we may ask for an identifier shown in the app to find your data, since there is no account. If we deny your request, you can appeal by replying to our answer; we will respond within 45 days (60 days for an appeal). You can use an authorized agent. We will not treat you differently for exercising these rights.

23.Minimum age

Favored is for people aged 16 and over. Where the App Store or Google Play shares an age range with us (for example in Texas), we use it only to keep Favored for people aged 16 and over. If you believe someone under 16 has sent us data, contact us at contact@damapp.app.

24.The damapp.app website

The damapp.app website is a static site. It uses no cookies, no audience measurement and no ad trackers, and loads no external resources. Its host, Netlify, processes the technical connection data (IP address, user agent, pages requested) needed to deliver the site and keep it secure.

25.Changes

We may update this policy to reflect changes to Favored, its providers or the law. The date of the last update is shown at the top of this page. If there is a significant change, we will let you know in an appropriate way, for example in the app.

26.Contact

For any question about this policy or your data: