In short
- Your personal plans are visible only to you; you choose the ones you share with friends.
- No ads: we don’t sell your data.
- We measure how the app is used to improve it, without linking these statistics to your name or email.
- You stay in control: you can access, correct or delete your data.
Who is responsible for your data?
The data controller is Thibaut Mallet, sole trader (French micro-entreprise), SIRET 990 716 292 00018, 3 square de l’Europe, 95110 Sannois, France. For anything about your data: contact@oupla.app.
This policy covers the Oupla app (iOS and Android), the service behind it and the oupla.app website. The site sets no cookies and stores nothing on your device. It collects the email address you choose to give for the waitlist and measures its audience anonymously (see “Usage measurement” below); its host processes your IP address to serve it and protect it from attacks.
The data we use
Your account
- Email address: to sign you in, recover your account and send essential emails (password reset).
- Password, if you sign up with email: it is never stored in plain text, it is protected by a secure hashing function.
- Sign in with Apple or Google: we only receive your email address (or Apple’s relay address if you choose to hide yours).
- Username and profile photo (optional).
What you add to Oupla
- The links you share to Oupla and the plans created from them (title, description, image, place, price, rating, category, status, planned date).
- Your lists, their members, the proposed dates and answers.
- Your friends and friend requests.
The links you save can reveal your interests or plans (a show, a trip, a restaurant): we only use them to provide the service. To create a plan, the public content of the page or post (text and images) is analysed automatically; it may mention its author, and only the information useful for the card (title, description, place, price, rating, category, image) is kept.
Your Oupla+ subscription
Payment is handled by Apple (App Store) or Google (Google Play): we never see your payment details. We receive the state of your subscription (plan, renewal or end date, store) and count your monthly analyses to apply the free plan limits.
Notifications
If you allow notifications on your phone, we store a notification identifier to tell you about what concerns you (friend request, date proposed in a list…). You can turn them off at any time in your phone settings.
Technical data
- Server logs: for each request, the date, address called, result, device type and IP address. They are used to run and secure the service and to fix errors.
- Crash reports: when an error occurs, the app sends a technical report (device model, OS and app versions, error trace), without your email, username or the content of your plans.
- Usage measurement: the screens viewed and a few key actions (sign-up, plan added, subscription…), with device information (model, OS, language). These statistics are tied to a random identifier specific to your app installation, not to your name or email: this is pseudonymised data. Your IP address is only used to derive an approximate location (country, region, city) and is not kept. You can object at any time by writing to us.
- Website usage measurement: the pages viewed, the referring page, clicks on the main buttons and the waitlist signup steps (form started, sent, signup completed), with the browser, OS, language and an approximate location (country, region, city) derived from your IP address, which is not kept. This data is tied to a random identifier that only lasts for your visit: no cookie, nothing stored on your device, and your next visit is not linked to the previous one. Invite codes and unsubscribe links are removed from addresses before sending, and your email address is never sent. To object, turn on your browser’s “Do Not Track” setting: the site then sends nothing.
What stays on your phone
Your calendar (the event is created directly on the phone), your photos (only the one picked for your profile is uploaded) and map display (your phone’s map service) don’t go through our servers.
Waitlist
Before the app is out on the stores, you can sign up on oupla.app to be told when it launches.
- Data: your email address, the site language and the signup date.
- Purpose: sending you a confirmation email, then the announcement of Oupla’s launch. Nothing else, and your address is never sold or shared.
- Legal basis: your consent, given by signing up.
- Recipient: Resend, which sends the emails (USA).
- Retention: until you unsubscribe, and at most 6 months after the app launches.
- Unsubscribe: the link in every email deletes your address right away; you can also write to contact@oupla.app.
To block abusive signups, your IP address is used on the spot without being stored. Signups are counted in our usage measurement, without your email address.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Create and manage your account, provide the service (plans, link analysis, lists, friends, notifications) | Performance of a contract (your sign-up and use of the service) |
| Manage your Oupla+ subscription and the free plan limits | Performance of a contract |
| Send essential emails | Performance of a contract |
| Secure the service, prevent abuse, fix errors | Legitimate interest |
| Measure usage to improve the app | Legitimate interest (you can object) |
| Waitlist: launch announcement | Your consent (one-click unsubscribe) |
Sending notifications to your phone also depends on the permission you give, or withdraw, in its settings.
We do no advertising or profiling, and we sell no data.
Who sees your data?
Other users
- Your personal plans are visible only to you.
- Your friends and the members of your shared lists see your username and photo, the plans you add to shared lists and the dates you propose. They never see your email address.
- If you share your invite link, anyone who opens it sees your username and photo, and can become your friend by accepting it. You can create a new link at any time (Friends): the old one stops working.
Our service providers
They process data only on our behalf and on our instructions (processors):
| Provider | Role | Data | Location |
|---|---|---|---|
| OneProvider | Server and database hosting | All service data | France |
| Scaleway | Image and backup storage | Profile photos, plan images, backups | France |
| Cloudflare | Network and protection of the service and site | IP address, requests | USA and worldwide |
| Resend | Sending emails | Email address, reset code, waitlist emails | USA |
| RevenueCat | Subscription management | Oupla account identifier, subscription state | USA |
| Sentry | Crash reports | Technical device and error data | European Union (Germany) |
| PostHog | App and website usage measurement | Random identifier (app installation or website visit), events, approximate location | European Union (Germany) |
| Grafana Labs | Server log storage | Technical logs (including IP address) | European Union (Germany) |
Apple and Google act as controllers of their own processing when you sign in with them, pay for a subscription or receive a notification (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android). Their privacy policies apply.
Transfers outside the European Union
Some providers are located outside the European Union, notably in the United States. Depending on the provider, these transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework, for certified companies) or on its standard contractual clauses. You can ask us for the details of the applicable safeguards.
How long we keep it
| Data | Retention |
|---|---|
| Account, plans, lists, friends | As long as your account exists, then at most 30 days after deletion |
| Password reset code | 15 minutes |
| Waitlist (email, language, date) | Until you unsubscribe, at most 6 months after launch |
| Notification identifiers | As long as they are needed, at most until your account is deleted |
| Server logs | 14 days |
| Crash reports | 90 days at most |
| Usage measurement | 1 year |
| Database backups | 30 days, then erased automatically |
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, and (under French law) the right to set instructions for your data after your death.
- You can change your username and photo in the app (Profile).
- Delete your account: in the app (Profile › Delete my account), or by emailing contact@oupla.app from your account’s address. Your account, plans, lists and photo are deleted; the plans you added to shared lists disappear from them, and the lists you alone own are deleted. Backups are erased when their retention period ends.
- For any other request, email contact@oupla.app. We reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or the authority of your country.
Cancelling Oupla+ does not delete your account: you cancel in your App Store or Google Play subscription settings.
Security
Traffic between the app and our servers is encrypted (HTTPS), passwords are hashed, server access is restricted and backups are stored separately.
Minimum age
Oupla is intended for people aged 15 and over.
Changes
We may update this policy when the app changes. The update date is shown at the top of the page; for significant changes, we will let you know in the app.