Principles
Social features are on by default: your friends and groups see your drinks of the day and your calendar, never your incidents, and every share can be turned off in the app. We keep what is sent to our servers to a strict minimum. No advertising, no data resale.
Data we collect
- On your device: your detailed drink log (drinks, dates, optional notes) is stored locally.
- Social account (optional): if you create an account for private groups, we receive a sign-in identifier via Apple or Google, your handle, and the days you share with your friends and groups (see "Settings you control").
- Where a drink was logged (optional): if you turn on "Save place with drinks", Sansoif attaches the device's GPS coordinates at that moment (latitude, longitude, accuracy) to the day concerned. This setting is off by default. When cloud backup is active, those coordinates are backed up with the day on our servers, readable by your account only. They are never shared with your friends or your groups.
- Finding friends from your contacts (optional): it only works if you give the app access to your contacts. Phone numbers and email addresses from your address book are normalised and hashed on your device; only those irreversible digests are sent, for the duration of the request, to be compared. They are neither stored nor logged. The only digests we keep are those of your own email address and phone number, if you registered them to be discoverable.
- Purchase screen: each time the Sansoif Plus purchase screen is shown, an anonymous daily counter goes up by one, per entry point (settings, a limit reached, a link...) and per platform, tied to neither your account nor your device; if you buy from that screen, its entry point is kept with your purchase.
- Crash reports: when the app crashes or slows down abnormally, a technical report (stack trace, device model, app and OS version, install identifier) is sent to Sentry. It contains none of your log, none of your drinks and none of your Health data.
- sansoif.com website: audience measurement uses Simple Analytics, with no cookie or advertising tracker.
Apple Health / Health Connect
Syncing with Apple Health or Health Connect is strictly opt-in: you enable the source yourself and can disable it at any time.
Sansoif reads and writes a single data type: the number of alcoholic beverages (numberOfAlcoholicBeverages on Apple Health, AlcoholRecord on Health Connect). No other health data type is requested.
These values stay on the device: they are never backed up to our servers, never shared with your friends or your groups, and never passed to a third party. Everything that leaves the device is computed exclusively from entries you created yourself in Sansoif. This data is never used for advertising, marketing or statistical analysis.
Private groups
Private groups are invite-only. By default, the members of a group see how many drinks you had each day and your calendar (sober days or not), for as long as you are both members. Your incidents never surface in a group. You set this sharing group by group, and if you leave a group, your settings for it are erased.
Settings you control
Sansoif's social features are on by default: they are what makes the app worth using with friends. Unless you change anything, your friends and the members of your groups see how many drinks you had each day and your calendar, and your friends see your badges. Your incidents are never shared by default. Everything is configured in the app, screen by screen, and a choice you made is kept, except a group's settings, which are erased when you leave it.
- Share with my friends: on by default. Your Sansoif friends see how many drinks you had each day and your day-by-day calendar. You can turn this off at any time. Groups are configured separately.
- Share incident counts: off by default. When enabled, friends can see incident totals, never your private notes. Incidents are never shared with a group.
- Sharing per group: on by default. Members see how many drinks you had each day and your calendar. You can turn this off group by group; this choice is independent of sharing with friends.
- Share my rewards: on by default. Friends can see your progress badges (never your records); you can turn it off anytime.
- Discoverable by my contacts: on as soon as you register a verified email or a phone number, which you add yourself under "Manage discovery". You can turn it off or remove them at any time.
- Friends activity: on by default. You get a notification when a friend logs their day; you can turn it off at any time.
- Lock with Face ID: when enabled, Sansoif asks for Face ID after a few minutes away from the app.
- Delete your account: anytime from the app or from the Delete account page.
On the server side, no drink, calendar, incident or reward data belonging to another member is ever returned unless a privileged server function (security definer) has first verified an active friendship or shared group membership. None of these functions are reachable by a signed-out visitor.
Third-party providers
We do not sell or rent your data, and we share it with no advertiser. The only third parties that process it are the technical providers below, acting on our behalf and under our instructions, and contractually bound to a level of data protection at least equivalent to the one described in this policy.
- Supabase, hosting for the social account's database and authentication. Data hosted in the European Union.
- Sentry, app crash reports and performance measurements. Processed in the United States, under the European Commission's Standard Contractual Clauses. No content from your log ever transits through it.
- Postmark, delivery of verification emails and moderation reports.
- Apple and Google, account sign-in (Sign in with Apple, Sign in with Google) and push notifications. All we receive from them is an identifier, an email address and a display name.
- Simple Analytics, audience measurement for the sansoif.com website only, with no cookie.
No data is passed to any artificial intelligence provider.
Retention periods
- Data on your device: kept as long as the app is installed. Uninstalling erases it.
- Social account and backup: kept as long as your account exists. After a deletion request, the account and associated server-side data are permanently deleted within 30 days.
- Discovery digests (hashes of your email address and phone number): kept as long as you stay discoverable, then erased as soon as you remove the identifier. If you delete your account, they are erased with the other server-side data within 30 days.
- Moderation reports: kept for as long as it takes to handle them, then for as long as needed to detect repeat behaviour from the same account. If the reported account is deleted, they are erased with the other server-side data within 30 days.
- Crash reports: kept for 90 days by Sentry, then deleted automatically.
- Server technical logs: kept for our host's retention period, a few days, then deleted automatically.
Beyond that, the only data remaining is what the law requires us to keep (accounting obligations on purchases, for example), for the period it prescribes.
Your rights
In accordance with the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data.
You can withdraw your consent at any time, without giving a reason: every optional collection described above (Apple Health, drink locations, discovery by contacts, sharing, notifications) is turned off from its own setting, in the app.
You can delete your account at any time (see Delete account) or email us at support@sansoif.com. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Contact
Data controller: SXN Labs EURL (see legal notice). For any question about your data: support@sansoif.com.
