Privacy policy

1. Controller and contact

DeepBrief is published by Théo Smondack, acting as an individual and as the controller for the processing described here. For questions or requests about your data, contact support@deepbriefapp.com.

2. Data we use

• Account and sign-in: name, email address, account identifier, email verification status and, depending on your sign-in method, information supplied by Google or Apple, such as a profile image. Sessions use technical identifiers and an expiry date and may include your IP address and device information.
• Personalization profile: age, country of tax residence, investment horizon, risk tolerance, asset interests, ethical preferences and language.
• Content: briefs and audio files associated with your profile, generation dates and feedback you provide when a feedback feature is available.
• Reading signals: when the app sends them, how much of each chapter you read or listened to, chapters you skipped, glossary terms you opened, your ratings and their reasons, the topics you choose to follow and your free-text comments. They weight the topics of your next briefs.
• Subscription: transaction identifiers, purchased product, entitlement status and expiry, provided by the app store and our subscription management provider. DeepBrief does not collect your payment card number.
• Notifications: if enabled, your device notification token, time zone, language, preferences and delivery status.
• Usage and diagnostics: navigation events, brief opens and playback, paywall interactions, app version, technical information and error reports. Full brief content is not added to analytics data.

3. Why we use this data

Account creation, personalization, brief generation and playback, requested notifications and subscription entitlements provide the service you request, on the basis of performance of the contract. Profile information needed for personalization is requested during sign-up; without it, we cannot provide this personalized service.

Technical data helps secure sign-ins, prevent abuse and resolve incidents, on the basis of our legitimate interest in maintaining a reliable service. Data strictly required to meet a legal obligation is processed on that basis.

Usage analytics helps us understand how DeepBrief is used and improve the product. It is enabled by default. You can disable it using the analytics setting in your profile. This does not disable technical diagnostics needed to operate the service; it also removes the association between those diagnostics and your account identifier in the app. Consent is required where applicable law requires it.

DeepBrief does not sell your data or use your profile to display targeted advertising.

4. Service providers and AI generation

The publisher and providers needed to operate the service access data according to their role:

• Hosting and storage providers: storage of accounts, profiles, sessions, briefs and audio files needed to operate the service.
• Email delivery provider: receives your email address and the sign-in code to send you. Third-party sign-in services: authentication if you choose a Google or Apple sign-in option.
• App store and subscription management provider: purchase processing and access validation using your account identifier and purchase and device data.
• AI text generation provider: text generation using news and relevant profile characteristics. Your account name and email address are not included in the information sent to create your briefs.
• Speech synthesis provider: conversion of brief text to synthetic speech. Text may reflect your profile preferences; this does not involve recording your voice.
• Usage analytics provider: analysis of the usage data described above, with a service configured in Europe. Technical diagnostics provider: processing of error reports and technical information needed to resolve them.
• Mobile notification delivery services: receive your device notification token and the content to send you, if you allow notifications.

Personalization selects and presents information. It does not make credit, insurance or financial transaction decisions on your behalf.

Some providers may process data outside the European Economic Area, including in the United States. Countries, technical retention periods and applicable safeguards depend on the services and contracts used. You may request information about recipients and transfer safeguards using the contact address above.

5. Retention and deletion

In the app, open Profile → Delete my account. Read the confirmation, request a code sent to your account email address, then paste it into the app and confirm permanent deletion. The code expires after ten minutes. No password or email to support is required. Resetting your profile, signing out, uninstalling the app or cancelling a subscription does not delete your account.

Without the app (uninstalled, device lost): email support@deepbriefapp.com from your account’s email address asking for its deletion. We check that the request comes from that address, delete the account and the data described below within 30 days, and confirm it by email.

Confirmation deletes the account and sign-in identities, invalidates all its sessions, and removes its profile, personal briefs, feedback and notification records from the active database. Personal audio files are cleaned up in the background; shared chapters still used by other readers are retained. Sign in with Apple tokens are revoked when associated with the account.

On the device making the request, we erase the session, profile, text and audio caches, player state and in-memory data, and sign out of the subscription identity. On another device, offline copies may remain until sign-out or local app data is erased; they no longer allow access to the deleted account on our servers. A notification handed to the mobile delivery service before deletion may still appear during its delivery window, limited to fifteen minutes.

The account becomes inaccessible upon confirmation. Additional cleanup is retried automatically after failures and reviewed by a person, particularly for diagnostics and asynchronous provider erasure. It is handled within thirty days. The app’s welcome screen provides the request status: failures and incomplete processing are not shown as completed cleanup. A technical receipt enables tracking without retaining a session; the result remains available for ninety days after completion. Identifiers needed for cleanup and encrypted Apple tokens are kept only until their processing is finished, then erased.

We request deletion of the subscription management customer record and associated analytics data, including events. These deletions may be asynchronous. Diagnostics containing an account identifier are reviewed for erasure. We do not delete your Apple or Google account.

Technical records follow provider retention cycles: email messages and logs are usually retained for thirty days, with seven-day backups; text generation inputs and outputs and speech synthesis security logs may remain for up to thirty days, and batch text processing data for twenty-nine days. Exceptions may apply for security, disputes or legal obligations. Diagnostics expire according to the service configuration, and their backups follow a separate cycle. We do not promise immediate erasure of all backups or logs. Actual hosting backup periods still need to be specified in our retention register; contact us for the status of those checks. A backup restoration must reapply deletions before service resumes.

Deleting your account does not cancel your App Store or Google Play subscription. The store may continue billing you until you cancel it. The subscription management link (Apple, Google Play) is provided in the confirmation, without requiring cancellation or waiting for expiry before deleting the account immediately. Customer history erased from our provider cannot be recovered with the old account. A valid subscription may be restored to a new account according to the store’s rules and purchase transfer settings. Purchase records held by Apple or Google follow their own retention obligations.

6. Your choices and rights

You can edit your profile and preferences in the app, disable usage analytics in your profile and withdraw notification permission in your device settings.

Subject to applicable law, you have rights of access, rectification, erasure, restriction, objection and portability. Where processing relies on consent, you may withdraw it without affecting processing already carried out. Send requests to support@deepbriefapp.com. We may ask for information needed to verify that a request concerns your own account.

You may also complain to the French data protection authority, the CNIL, or your competent data protection authority.

7. Local storage and updates

The app stores session information, your profile, settings and cached content locally to operate. The deepbriefapp.com website measures its audience without cookies or persistent identifiers, and uses no advertising cookies.

This policy may change as the service evolves. The date at the top shows the latest update; material changes will be brought to your attention through an appropriate channel.