Privacy policy

1.Data controller

The controller of the data described in this policy is:

DAM APP, a French single-shareholder simplified joint-stock company (SASU) with a share capital of €1,000, registered office at 173 rue de Courcelles, 75017 Paris, France (SIREN 109 588 988), publisher of the Miny app and of the damapp.app website.

For any question about your data: contact@damapp.app.

2.Scope

This policy applies to the Miny mobile app (iOS and Android) and to the damapp.app website. It explains what data is processed, why, on which legal basis, by which providers, where and for how long, and the rights you have under the General Data Protection Regulation (GDPR) and the French Data Protection Act.

3.Data stored on your device

Miny works without an account. Your tasks, events, notes, reminders and preferences are stored locally on your device, in an SQLite database belonging to the app. DAM APP has no access to this data and does not store it on any server.

• Notifications: reminders are scheduled locally by your phone’s operating system. Miny does not use push notifications and creates no push token.
• Widget: to show your upcoming items, a copy of their titles and times is placed in local storage shared with the widget (App Group on iOS, app storage on Android). It never leaves the device.
• Backups: on iOS, Miny’s local data is included in your device backups (iCloud or computer) according to your Apple settings. On Android, app data backup is disabled.

As there is no sync, this data is not automatically transferred to another device.

4.Voice capture

When you dictate a request, Miny records audio during the capture (55 seconds maximum), then:

1. the recording is sent over HTTPS to the Miny API, hosted on Google Cloud Run (European Union region, Paris);
2. the API forwards it to Google Cloud Speech-to-Text (chirp_3 model, European Union region) to get a transcription;
3. the temporary audio file is deleted from the Miny server as soon as the request has been processed.

Miny keeps no voice recordings and never uses them for advertising or to train a model.

5.Text, transcriptions and artificial intelligence

To turn your request into a task, event, note or reminder, the transcription text (or the text you type in text capture) and any answers to clarification questions are sent by the Miny API to Google Gemini. Context needed for interpretation (for example today’s date, your time zone and your language) may be included.

• Miny uses the paid Gemini API (billing enabled). Under Google’s terms for this tier, the content sent is not used to train Google’s models.
• Google may retain prompts and responses for a limited period, solely to detect abuse and violations of its usage policies.
• This processing may take place outside the European Union, in particular in the United States (see “Transfers outside the European Union”).
• Gemini receives no identifier: no install ID, no advertising ID, no account.

The structured result is sent back to your device, where you can check and correct it before saving. The Miny server keeps no copy of your content.

Report a problem. On the capture screens, the “Report a problem” button lets you send one specific capture to DAM APP when Miny got it wrong. Nothing is sent without that tap: a sheet first tells you what will be sent. The report contains the capture text, what Miny understood and, depending on the case, the question asked, your answer or your corrections, plus language, time zone, platform and app version. It contains no name, no install identifier and no IP address; email addresses, phone numbers and long digit runs are masked before storage. It is kept for 90 days in Google Cloud Firestore (European Union), solely to improve Miny’s understanding, then deleted automatically.

6.Your consent to AI processing

Voice capture and AI text capture require your prior consent. It is requested on your first capture, before anything is sent. Without it, no data is transmitted and you can keep adding items manually.

You can withdraw your consent at any time in Settings › Privacy. Withdrawal applies going forward and does not affect processing already carried out.

7.Usage statistics (PostHog)

To understand how Miny is used and improve it, the app sends usage statistics to PostHog, on its infrastructure located in the European Union (eu.i.posthog.com). These statistics are on by default and you can turn them off at any time in Settings › Privacy › “Usage statistics”.

This data is pseudonymous, not anonymous: it is linked to a random identifier specific to your installation, plus session and capture identifiers. It is limited to a closed list of technical properties:

• app version, operating system, language, time zone, light or dark theme;
• screens viewed, technical latencies and durations, counts and yes/no flags;
• plan and result of a purchase, voice capture quota status.

It never contains free text or the content of your items (no transcription, title or note). IP-based geolocation is disabled, and there is no session replay and no autocapture of interactions.

When statistics are on, the Miny server also sends PostHog technical events (for example processing time or outcome) linked to the same install identifier. When you turn them off, neither the app nor the server sends any further events.

Legal basis: DAM APP’s legitimate interest in measuring audience and improving its product (Article 6(1)(f) GDPR), with the option to object at any time using the setting above.

8.Crash reporting (Sentry)

Miny uses Sentry (ingestion in the European Union, Germany) to detect crashes and technical errors and to monitor app stability (crash-free session rate).

• Reports contain technical information: error trace, device model, OS and app version, technical context and session health.
• They contain no identity data: sending default personal data is disabled (sendDefaultPii set to false).
• These reports are not governed by the “Usage statistics” setting, because they are needed to fix app failures.

Legal basis: DAM APP’s legitimate interest in keeping Miny working and secure (Article 6(1)(f) GDPR). You can object by writing to contact@damapp.app.

9.Subscriptions and purchases

Miny Pro subscriptions are purchased through Apple’s App Store or Google Play, which process the payment. DAM APP and Miny never see your card details.

To check your access rights, Miny uses RevenueCat (United States), which links an anonymous RevenueCat ID generated by the app to the purchase receipts provided by Apple or Google (product, dates, subscription status, store country).

Legal basis: performance of the subscription contract (Article 6(1)(b) GDPR) and compliance with our legal obligations, including accounting.

10.App updates (Expo)

Miny receives some fixes and updates through Expo’s EAS Update service (650 Industries, Inc., United States). At launch, the app contacts this service, which receives a per-install update client ID, technical information (platform, version, update channel) and your IP address.

Legal basis: DAM APP’s legitimate interest in delivering fixes and security updates quickly (Article 6(1)(f) GDPR).

11.Server, security and logs

• Abuse protection: the IP address of requests is used by an in-memory rate limiter (one-minute, one-hour and one-day windows). These counters are never written to disk and disappear after 24 hours at most.
• Technical logs: Google Cloud Logging keeps request logs (IP address, user agent, URL called, latency, response code) for about 30 days.
• Production logs contain no capture content (no audio, transcription or text).

Legal basis: DAM APP’s legitimate interest in securing the service and preventing abuse (Article 6(1)(f) GDPR).

12.Rating prompt

Miny may invite you to rate the app through Apple’s or Google’s native interface. Your rating and any review are handled directly by Apple or Google; Miny only records on your device that the prompt was shown, so as not to ask too often.

13.Support and emails

When you write to us, we use your email address and the content of your message to answer and follow up on your request.

The app’s feedback button opens your email app with a prefilled message containing technical details useful for diagnosis: Miny version and build number, update ID and channel, OS version and device model. You can review and remove them before sending. Nothing is sent until you send the email.

Legal basis: DAM APP’s legitimate interest in answering requests it receives (Article 6(1)(f) GDPR).

14.What we do not collect

• No advertising identifier (IDFA on iOS, Android advertising ID).
• No access to your location, contacts, calendar or photos.
• No cross-app or cross-site ad tracking, no ads in Miny.
• No selling or renting of data.

15.Purposes and legal bases

16.Retention periods

17.Recipients and processors

Your data is accessible only to DAM APP and to the following providers, to the extent needed for their tasks:

For purchases and app distribution, Apple and Google act as controllers of their own processing, under their own privacy policies.

18.Transfers outside the European Union

Statistics (PostHog), crash reports (Sentry, Germany), API hosting and speech transcription (Google Cloud) are processed in the European Union. Some data may however be processed in the United States:

• text sent to Google Gemini;
• subscription data processed by RevenueCat;
• technical data received by Expo for updates;
• website connection data processed by Netlify.

These transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the recipient is certified, or otherwise on the Standard Contractual Clauses adopted by the European Commission, supplemented where necessary by additional measures. You can obtain information about these safeguards by writing to us.

19.Security

Communication between the app and the Miny API is encrypted (HTTPS). DAM APP applies data minimisation: immediate deletion of audio files, no content in statistics or logs, no identifier sent to Gemini, crash reports without identity data, and rate limiting against abuse.

No system is infallible, so DAM APP cannot guarantee absolute security, but it will notify the CNIL of any data breach and inform the people concerned where the law requires it.

20.Device permissions

• Microphone: needed only for voice capture. You can deny or revoke it in your phone settings; other features remain available.
• Notifications: used for your reminders, scheduled locally. You can turn them off in your phone settings.

Miny does not request access to your location, contacts, calendar or photos.

21.Your rights

You have the right of access, rectification, erasure, restriction of processing, objection (in particular to processing based on legitimate interest), data portability where applicable, and the right to withdraw your consent at any time. Under French law, you may also set instructions regarding your data after your death.

Directly in the app

• Withdraw AI consent and turn off usage statistics: Settings › Privacy.
• “Delete all my data” (Settings): erases all of Miny’s local data, cancels scheduled notifications, resets the statistics identifier and clears widget data.
• Uninstalling Miny also deletes its local data, subject to your iOS backups.

By email

For data held by our providers on our behalf (statistics, crash reports, logs), write to contact@damapp.app. Because Miny works without an account, we may ask for details that help us find the data relating to you, never more than necessary. We answer within one month, which may be extended as provided by the GDPR.

Purchase histories are managed by Apple or Google, with whom you can exercise your rights for that data.

Complaints

If you believe your rights are not respected, you can lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr/fr/plaintes) or with the data protection authority of your country of residence.

22.Minors

Miny is intended for people aged 15 and over, the age from which a minor can consent alone to the processing of their data in France (Article 45 of the French Data Protection Act). Under 15, using Miny and consenting to AI features require the agreement of a person with parental authority.

If you believe a child under 15 has sent us data without such agreement, contact us at contact@damapp.app.

23.The damapp.app website

The damapp.app website is a static site. It uses no cookies, no analytics and no ad trackers, and loads no external resources. Its host, Netlify, processes the technical connection data (IP address, user agent, pages requested) needed to deliver the site and keep it secure.

24.Changes

We may update this policy to reflect changes to Miny, its providers or the law. The last-updated date appears at the top of this page. If a change is significant, we will inform you by appropriate means.

This English version is provided for convenience. In case of discrepancy, the French version prevails.

25.Contact

For any question about this policy or your data: