Soone holds the most personal things you write. Here is exactly what we keep, where, and for how long.
Who is responsible
LEBOXSTUDIO, 9 rue des Colonnes, 75002 Paris, France. For any question about your data: admin@leboxstudio.fr.
What we keep
Your account: the Apple identifier, the relay address Apple provides, and the first name you enter. Your capsules: title, message, voice or video recording, attached photos, theme, dates. Your settings: language, time zone, time format, reminders, app lock. Usage measurements: capsule created, capsule opened, paywall shown — without the content. Your device: a notification token, if you allowed them.
Why
To run the service, tell you when a capsule opens, manage your subscription, and understand what works and what doesn't. Nothing is sold, nothing goes to an advertiser.
On what basis
Performance of our contract for the service itself, your consent for notifications, and our legitimate interest in measuring usage and preventing abuse.
Where your data lives
The database and files are hosted by Supabase, in a data centre in Paris. A copy also lives on your device, protected by iOS encryption, so the app works offline.
What a sealed capsule protects, and what it doesn't
Until the date arrives, the server returns neither the text, nor the recording, nor the photos: the app itself cannot obtain them. However, the content is not end-to-end encrypted — technically, it could be read on the server side. We don't do that, but we'd rather tell you than let you believe otherwise.
Who else is involved
Apple, for sign-in, purchases and notifications. Supabase, for hosting. RevenueCat, for your subscription status. Superwall, for showing offers. Each only accesses what it needs, and none receives the content of your capsules.
How long
For as long as your account exists. When you delete it, your capsules, files and profile are erased. Usage measurements, which no longer identify you, are kept for at most a year.
Your rights
You can access, correct, export or erase your data, and object to its processing. Account deletion is done from Profile, without writing to anyone. For anything else: admin@leboxstudio.fr. If our answer doesn't satisfy you, you can refer the matter to the CNIL.
Minors
Soone is not intended for people under fifteen. If such an account is reported to us, it is deleted.