In short
- No data collected. We receive none of your health data, your name, your email address or your location.
- Everything stays on your phone, in an encrypted database.
- Nothing leaves without your action: exports, reports and backups only go out when you decide, to the place you choose.
- No account, no ads, no analytics. This is also what we declare in the “Data safety” section of Google Play.
1. Who publishes Céphée?
Céphée is published by Nicolas Saurel, a sole trader (entrepreneur individuel) operating under the trade name appserre (full details in the legal notice). For any question: [email protected].
2. The data you enter
To work, Céphée saves what you record in it, in particular:
- your attacks: dates and times, duration, intensity, pain areas, symptoms, suspected triggers, notes;
- your treatments and non-drug remedies, and whether you felt relief two hours later;
- your evening check-ins: sleep, stress, factors of the day, impact on your day;
- if you provide them: a first name or nickname, your sex, your period days, your attack plan, your before/after trackers;
- your settings (reminder times, language, colours).
This is health data. It is saved only on your phone, in an encrypted database. We have no access to it: we cannot view it, change it or pass it on to anyone. Insights and summaries are calculated on your phone.
3. What can leave your phone, if you decide so
- Export. You can create a backup file, encrypted with a password of your choice, and save it wherever you like (phone storage, Google Drive, email…). Without this password the file is unreadable, including to us. We do not keep the password: if it is forgotten, the file cannot be recovered.
- Report for your doctor. The PDF is created on your phone. You choose who to share it with (email, messaging, printing).
- Automatic backup (off by default). If you turn it on, a copy encrypted with your password is prepared every day in the app's private storage. It is included in your phone's Android backup, which Google keeps in your Google account. Without your password this copy is unreadable, to Google as well as to us. It follows your phone's backup settings and Google's terms.
4. Subscription and payments
Purchases (monthly or yearly subscription, lifetime purchase) go through Google Play. Payment is processed by Google: we never receive your bank details. The app checks with Google Play whether your purchase is active; none of your health data is sent when it does so.
Google gives us limited information about orders (order number, product, date, amount, country). We use it only for accounting and to help you if there is a payment problem. The data Google processes for payments is covered by Google's privacy policy.
5. Notifications
Reminders (evening check-in, end of attack, two-hour check, monthly summary, attack plan steps) are scheduled directly on your phone. They go through no server. You can turn them off in the app or in Android settings.
6. Permissions requested
- Notifications: for the reminders described above.
- Internet access: only to check your purchase with Google Play. None of your data is sent.
Céphée does not access your location, contacts, camera, microphone or photos.
7. Analytics and crashes
Céphée contains no analytics tool, no advertising ID and no third-party crash reporting tool. If you have agreed in your phone settings to share diagnostic data with Google, Google may give us overall, anonymous statistics on the app's stability (for example the number of crashes per phone model). They contain none of your health data.
8. Retention and deletion
Your data stays on your phone until you delete it. You can erase everything at any time with “Delete all my data” in Settings. Uninstalling Céphée also erases all its data. If you turn off automatic backup, the copy and its key are deleted; older Android backups are managed by Google according to your account settings.
9. Security
The database is encrypted. Exports and backups are encrypted (AES-256) with your password, which is never stored in plain text. An option also hides the app's content in screenshots and in the recent apps list. Locking your phone with a code or fingerprint remains the best protection for your data.
10. Children
Céphée is designed for adults. It collects no data, including children's data.
11. Your rights
As we hold no data about you in the app, you exercise your rights directly in Céphée: you can view, correct, export and delete all your data yourself.
If you write to us, we use your email address and message only to reply, and keep them for no more than 3 years after our last exchange. You can ask for access, correction or deletion at [email protected]. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority in your country.
12. Changes
If this policy changes, for example when a feature is added, the new version will be published on this page with its date. If the change is significant, the app will let you know.
13. Contact
Email: [email protected]. Full details: legal notice.