Privacy Policy

Last updated: September 13, 2026

Introduction

Welcome to the privacy policy of the NoContact AI app. Your privacy matters to us, and we are committed to protecting the personal information you share with us. This policy explains how we collect, use, share, and protect your data when you use our application.

Who We Are

NoContact AI is a mobile application (iOS and Android) personal-development tool designed to help users maintain a "no contact" goal after a breakup. It offers goal tracking, a mood journal, and conversational coaching via an AI named Arya.

• Publisher: Gautier Colasse (sole proprietor)
• Contact: contactappsgc@gmail.com
• Data Controller: Gautier Colasse

Information We Collect

1. Information You Provide Directly

Account

• Email address and password (if signing up with email)
• Apple ID token (if signing in with Apple Sign-In)
• Google ID token, email, name, profile picture (if signing in with Google Sign-In)

AI consent choices

In the version offering this control, we record acceptances and withdrawals with your account ID, the version and language of the notice shown, a request ID and the server timestamp. This record contains no messages or audio recordings and is deleted with your account.

Onboarding Questionnaire

During sign-up, we ask questions to personalize your experience. The answers are stored on our servers:

• First name, age, gender
• Length of the relationship and time since the breakup
• Who initiated the breakup
• Current dominant mood
• Frequency of contact urges and social-media checking
• Personal reason for going no contact
• Nature of the relationship

Daily Mood Journal

• Primary and secondary moods recorded
• Personal text notes
• Adherence to no-contact rules
• AI-generated suggestions based on these entries

Local Storage and Synchronization

Your Arya conversation history and personal Memories are stored locally on your device (AsyncStorage). Local storage does not mean that their content never leaves your device: content needed for AI features is transmitted for processing as described below.

Your personal reminders, including any text and photos you add, messages written in “Talk to your ex”, and local preferences are stored on your device. Your no-contact rules and start date are synchronized with your account on our servers, along with profile and mood journal data.

2. Data Exchanged with the AI

When you use AI features:

• Your messages and the necessary context (profile, onboarding answers, recent emotions, memories) pass through our server functions to OpenAI to generate a response. Memory text may also be transmitted to generate a summary.
• Audio recordings for transcription pass through our server functions to OpenAI's transcription service. Voice conversations also use OpenAI services.
• Chat and memory history is stored in the app, without synchronizing this history to our database. AI exchanges nevertheless involve processing by our servers and OpenAI; the provider's retention terms apply to the data it receives.
• The app is designed to delete temporary audio files after processing. An interruption may leave a temporary file on the device.

3. Information Collected Automatically

• Technical data: device model, OS and version, language, timezone, app version.
• Usage data: features used, open frequency, engagement events (paywall shown, subscription started, etc.).
• Marketing attribution: on iOS, we use the IDFA only after you grant App Tracking Transparency permission. On Android, advertising identifier availability depends on system settings. AppsFlyer may receive technical data and engagement events even without an IDFA to measure the effectiveness of our acquisition campaigns.
• Diagnostics: crash reports and error traces (via Sentry) including device model, OS, and technical stack traces.
• Notifications: free-trial ending reminders are local notifications scheduled on your device through Superwall, with your permission. We do not use the Expo push notification service for these reminders.
• Location: the app does not request access to your GPS location. This does not mean providers cannot process an approximate location derived from technical data such as your IP address.

4. Usage Analytics with PostHog

We use PostHog Cloud in its European hosting region to understand onboarding, feature usage, purchases, and technical difficulties in the mobile application.

• Data sent: usage events, onboarding steps (without questionnaire answers), features used, purchase and subscription events (products, transaction identifiers, amounts, and currencies), technical error codes, language, app version, and technical device information.
• Identifiers: a random identifier is used before sign-in. After sign-in, events may be associated with your internal account identifier, including earlier events linked during sign-in. These data are pseudonymized, but are not anonymous: they can be linked to your account.
• Excluded content: we do not send PostHog your name, email address, questionnaire answers, messages to Arya, personal notes, photos, or audio recordings. Session recording and automatic interaction capture are disabled; only events defined in the application are sent. IP-based geolocation is disabled.
• Your choice: you can disable analytics collection in the app's privacy settings. This choice applies to PostHog and stops mobile analytics events from being sent to that provider; it does not disable other services, including Sentry diagnostics or AppsFlyer attribution, and does not erase data already received.

We use these analytics to improve the app, without combining them with other companies' data for targeted advertising. For more information about this provider, see PostHog's privacy policy.

How We Use Your Information

We use your data to:

• Provide, maintain, and improve the application
• Personalize your interactions with the AI
• Generate emotional analyses and suggestions tailored to your journey
• Manage your paid subscription and premium access
• Schedule free-trial ending reminders locally on your device through Superwall
• Measure the performance of our marketing campaigns and app usage
• Detect and fix bugs (crash reports)
• Comply with our legal obligations

Legal Basis for Processing (GDPR)

We process your data on the following legal bases:

• Performance of a contract (Art. 6.1.b GDPR): account creation, providing the Services.
• Consent (Art. 6.1.a GDPR): advertising tracking (IDFA / Advertising ID), reminder notifications, access to microphone and photo library.
• Legitimate interests (Art. 6.1.f GDPR): improving the application, measuring usage, bug detection, security.
• Legal obligation (Art. 6.1.c GDPR): fraud prevention, accounting retention.

Sharing Your Information

We do not sell your personal data. We share it only with the following service providers to deliver the Service, analyze its usage, and improve it:

We may also disclose your information:

• Legal compliance: if required by law or a court order.
• Business transfer: in case of a merger, acquisition, or asset sale.

International Data Transfers

Some of our providers (OpenAI, Supabase, RevenueCat, Superwall, AppsFlyer, Sentry, Apple, Google, Expo) process your data in the United States or other countries outside the European Union. Processing locations depend on the provider and the service used.

Data Security

• Encryption in transit: all communications with our servers use TLS/HTTPS.
• Authentication: passwords are hashed by Supabase Auth; sign-in sessions are stored locally by the Supabase client in application storage (AsyncStorage). This storage currently does not use Keychain/Keystore through SecureStore.
• Restricted access: only systems strictly necessary for the app's operation have access to your data.

No transmission or storage method is completely secure; absolute security cannot be guaranteed.

Data Retention

• Active account: your data is kept as long as your account exists.
• Account deletion: you can delete your account in Settings > Account > Delete my account. This action deletes account data from our database, then the authentication account. It does not automatically delete third-party provider data. Content stored only on your device remains there after account deletion.
• Third-party providers: deleting your NoContact AI account does not automatically delete data held by our providers under their own retention rules (e.g., RevenueCat payment logs, Sentry crash logs, PostHog analytics events).

Your Rights

Under the GDPR and applicable laws, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or your local authority

To exercise these rights: email us at contactappsgc@gmail.com. Include your User ID if available (Settings > About > Support markers > User ID). If you cannot access it, let us know; we may ask for additional information to identify your account and verify that it belongs to you. We respond within 30 days. For account deletion, see the request instructions.

Settings > Privacy lets you disable PostHog analytics.

In this version, you can also withdraw consent to AI features in Settings > Privacy. Withdrawal blocks new AI submissions on this device; the app indicates if synchronization is pending. Once synchronized, other devices using this control check the withdrawal before a new AI request. Older versions do not have this control. Withdrawal does not delete your local content or previously transmitted data.

App Tracking Transparency (Apple ATT)

Per Apple's requirements, our app asks for your permission to use the IDFA. This consent is used solely for marketing attribution via AppsFlyer. We do not use your data to target you with advertising in other apps.

You can revoke this consent at any time in iOS Settings > Privacy & Security > Tracking. The app’s Privacy page provides a shortcut to system settings; the permission is changed in iOS.

Privacy Labels (App Store & Google Play)

Categories of data collected and linked to your identity:

• Contact info: name and email address
• Identifiers: user ID, device ID, advertising ID (with consent)
• Usage data: interactions with the application
• Diagnostics: crash reports and other technical diagnostic data, including error codes
• User content: questionnaire answers, mood journal entries, and content transmitted to use AI features (messages, memories, audio, and images where applicable)
• Purchases: purchase and subscription information

Categories used for Tracking per Apple's definition:

• Identifiers and app interactions used for marketing attribution. On iOS, access to the IDFA requires your ATT permission; on Android, advertising identifier availability depends on system settings.

We do not sell your data and we do not use it for targeted advertising in third-party apps.

Third-Party Links

The application may contain links to third-party sites or services (for example our Discord community). We are not responsible for the privacy practices of these third parties. Please review their respective policies.

Changes to This Policy

We may update this policy to reflect changes in the app, providers, or regulations. The current version is published on this page with its update date.

Contact Us

For any questions about this policy or your data:

Gautier Colasse Email: contactappsgc@gmail.com

About This Policy

This policy explains how NoContact AI processes your personal data and the choices available to you.