1. Data controller
Sole trader, 28 Signal, 4 rue des Grandes Vignes, 44190 Clisson, France. SIRET: 88977838700031.
DPO contact: contact@28sig.com
2. Data collected
The following data is collected:
- Email address: to create your account, log you in, and send renewal notifications.
- Date of birth: to calculate your Vitruvian Number. Not shared with third parties.
- First and last name (optional): to personalize your account.
- IP address and browsing data: for security and anonymized usage statistics.
- Billing data: handled directly by Apple or Google (in-app purchases) or by Stripe (card payment on the website). 28 Signal never stores your payment details.
3. Purposes and legal bases
- Running the service: performance of contract (GDPR art. 6.1.b)
- Billing and accounting: legal obligation (art. 6.1.c)
- Anonymized usage statistics: legitimate interest (art. 6.1.f)
- Transactional emails: performance of contract
4. Retention
Your data is kept for as long as your account is active. On account deletion, data is erased within 30 days, except where legally required (billing records: 10 years).
5. Storage and transfers
Data is stored on Supabase servers located in France (EU West). No personal data is sold or shared with third parties for commercial purposes. Apple, Google and Stripe receive only the data needed to process payments (in-app or by card), under their own privacy policies.
6. Your rights
Under GDPR, you have the right to access, correct, delete, port, restrict processing of, and object to processing of your personal data.
To exercise these rights: use "My account" in the app (deletion and edits available directly) or write to contact@28sig.com. You also have the right to lodge a complaint with your local data protection authority.
7. Cookies
One cookie is set: the one that keeps your authentication session alive. No advertising cookies, no third-party tracking.
8. Security
Data is transmitted over HTTPS. Account access is protected by a secure magic link. You are responsible for keeping your email inbox secure.
9. Changes
Any changes to this policy will be notified by email. The version in force is the one published in the app.
Last updated: June 2026