Privacy Policy

This Privacy Policy explains how Avenly ("the App") collects, uses, stores, and protects your personal data when you use our services. Avenly is operated by Savannah Sitterlé, trading as Blonde and Blue Studios, registered as Entrepreneur Individuel in France.

Contact: support@avenly.app
Address: 11 Rue de l'Université, 75007 Paris, France

For the purposes of the EU General Data Protection Regulation (GDPR), Savannah Sitterlé is the data controller responsible for your personal data.

If you have any questions about this policy or how your data is handled, please contact us at the email above.

We collect only the data necessary to provide and improve Avenly. Below is a complete list of what we collect and why.

Account data

• Email address — required for authentication
• Display name or first name — used to personalize the experience
• Country (optional) — used to display region-appropriate content
• Mobile phone number (optional) — provided by you if you wish
• Avatar / profile image (optional) — uploaded by you
• App preferences (theme, haptics) — saved to your account

Content you create in the app

• Journal entries (text and optional images)
• Mood logs and timestamps
• Goals (text, completion status, time period)
• Vision board entries (text and optional images)
• Onboarding answers (about your goals, energy, and preferences)

AI-generated content

• Insights — patterns and reflections generated by AI based on your journal entries, mood logs, goals, and onboarding answers
• Recommendations — AI-generated suggestions for new goals or actions

Subscription information

• Your current subscription tier (Basic or Pro)
• Renewal date and next plan, where applicable

Important note on payments: All payment processing is handled by Apple through the App Store's In-App Purchase system. We never see, store, or have access to your credit card details, banking information, or other payment data. Apple provides us only with information about whether your subscription is active or inactive. Please review Apple's Privacy Policy for details on how Apple handles payment data.

Technical data (automatic)

• Login session timestamps (managed by our authentication provider)
• General device information when using Avenly (operating system version)
• Analytics data on our marketing website and within the app (see Section 10)

We do not collect: your location data beyond general country, your contacts, your photos library, your camera or microphone except when you actively upload images, biometric data, or any sensitive categories of personal data beyond what you choose to share in your journal entries.

We use your information to:

• Provide the core functionality of Avenly (journal, goals, mood tracking, vision board)
• Generate personalized insights and recommendations using AI
• Maintain your account and manage your subscription
• Respond to your support requests
• Improve Avenly's features and reliability
• Comply with our legal obligations

We do not use your data for:

• Targeted advertising
• Profiling for commercial purposes
• Sale to third parties
• Training third-party AI models

Under the EU GDPR and equivalent laws in other regions, we process your data based on the following legal grounds:

• Performance of a contract — to deliver the Avenly service you've signed up for
• Your consent — for optional features such as profile photos, mood logging, or onboarding personalization (you can withdraw consent at any time by deleting the relevant data or your account)
• Legitimate interests — to maintain security, prevent fraud, and improve service performance
• Legal obligations — when required to comply with applicable law

We share data only with the service providers strictly necessary to operate Avenly. These are called sub-processors. We don't sell your data to anyone.

Our current sub-processors are:

All sub-processors are bound by data processing agreements and operate under GDPR-compliant standards. International transfers (where applicable) are protected by Standard Contractual Clauses or equivalent safeguards.

Avenly uses AI to generate insights (patterns in your data) and recommendations (suggested next steps). This is a core feature of the Pro tier.

What is sent to AI:

• Your journal entries (recent entries, summarized)
• Mood logs
• Goals (active and completed)
• Onboarding answers

Where it's sent:

• Data is sent to Anthropic's Claude API, routed through Lovable's AI Gateway infrastructure
• Anthropic processes the data to generate insights, then returns the result
• Anthropic does not use API-submitted data to train their AI models (per their API terms)
• Lovable's AI Gateway does not retain or train on your data

You are in control:

• AI processing only happens after you have generated sufficient activity in the app
• You can stop using the Pro tier at any time, which stops further AI processing
• You can delete your account, which permanently removes all data — including AI-generated insights

Your data is stored on Supabase infrastructure hosted in the European Union. We use industry-standard security practices, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Authentication via secure tokens (JWT)
• Row-level security policies that ensure each user can only access their own data
• Regular security reviews

While we take reasonable steps to protect your data, no online service can guarantee perfect security. If we ever become aware of a data breach affecting your data, we will notify you and applicable authorities as required by law.

We retain your data only while your account is active. When you delete your account:

• All personal data (journal entries, mood logs, goals, vision board, insights, recommendations, profile information, uploaded images) is permanently deleted from our systems
• Deletion is completed within 30 days to allow for backup rotation
• After this period, your data cannot be recovered

You can delete your account at any time from within the app (Profile → Delete Account).

Under GDPR and equivalent laws, you have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — Delete your account and all associated data
• Right to restriction — Limit how we process your data
• Right to data portability — Receive your data in a portable format
• Right to object — Object to certain types of processing
• Right to withdraw consent — Where processing is based on your consent
• Right to lodge a complaint — Contact your national data protection authority (for France: CNIL)

To exercise any of these rights, contact us at support@avenly.app. We will respond within 30 days.

On the Avenly app: We use minimal analytics within the app to understand general usage patterns (such as which features are used) and to improve performance. This data is anonymized and not linked to your personal identity beyond your user account.

On our marketing website (avenly.app): Our website uses analytics provided by Lovable to track:

• Page views and visit duration
• Geographic region (country/city level)
• Device type and browser
• Referral sources

This data is used to understand how visitors find and use our website. We do not use marketing cookies, advertising cookies, or trackers from third-party advertising networks.

You can control cookies through your browser settings. Disabling cookies will not affect your ability to use the Avenly app, but may affect how our website tracks visit analytics.

Avenly is intended for users 18 years of age and older. We do not knowingly collect personal data from anyone under 18.

If you are a parent or guardian and you believe your child has provided us with personal data, please contact us at support@avenly.app and we will delete it promptly.

While our primary data storage is in the European Union, some of our sub-processors (such as Anthropic and Apple) may process limited data in the United States. These transfers are protected by appropriate safeguards under GDPR Article 46, including Standard Contractual Clauses and certifications such as the EU-US Data Privacy Framework where applicable.

We may update this Privacy Policy from time to time to reflect changes in our service, technology, legal requirements, or business practices.

When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you within the app or by email if changes significantly affect how we handle your data
• Where required by law, request your renewed consent

The latest version is always available at https://avenly.app/privacy.

For any questions, concerns, or requests regarding your personal data or this Privacy Policy:

Email: support@avenly.app
Postal: Savannah Sitterlé / Blonde and Blue Studios, 11 Rue de l'Université, 75007 Paris, France

You can also lodge a complaint with the French data protection authority:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, 75007 Paris, France
www.cnil.fr