Privacy Policy

1. Data Controller

Rodrigue Buisson, micro-entrepreneur (SIRET: 924 811 763 00011), based in Boulogne-Billancourt (92100), France, manages personal data collected through the website rebornmeditation.com and the mobile application "Reborn Meditation."

Contact: contact@rebornmeditation.com

2. Information We Collect

Website

Email address submitted through the waitlist signup form.

Mobile Application

• Account data: When you use the app, an anonymous account is created automatically. If you sign in with Google, we collect your Google email address, name, and profile picture.
• Preferences: Language preference and preferred meditation voice.
• Usage data: We use PostHog to collect anonymized analytics such as screen views, session duration, and feature usage to improve the app experience. No personally identifiable information is tied to these analytics unless you are signed in.
• Device information: Device locale (language) detected at first launch.

We do not collect health data, location data, contacts, or any sensitive personal information.

3. Legal Basis for Processing

Processing occurs under GDPR Article 6(1)(a) (explicit consent) and Article 6(1)(f) (legitimate interest for analytics and service improvement), in compliance with French data protection law.

4. How We Use Your Information

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Processors and International Transfers

Data transfers outside the EEA (Google, Loops.so) are protected by Standard Contractual Clauses compliant with GDPR Article 46. Supabase and PostHog data remain within the European Union.

6. Data Retention

• Website email addresses: Stored while you remain subscribed. Deleted within 30 days of unsubscribe or deletion request.
• App accounts: Anonymous accounts and associated preferences are retained while you use the app. Upon account deletion request, all data is erased within 30 days.
• Analytics data: Retained for 12 months, then automatically anonymized or deleted.

7. Your Rights Under GDPR / RGPD

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability — receive your data in a structured format
• Object to processing
• Withdraw consent at any time

Requests are processed within one month. Contact: contact@rebornmeditation.com

8. Right to Lodge a Complaint

Complaints may be filed with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Website: www.cnil.fr

9. Cookies and Tracking

• Website: No tracking cookies. Basic analytics measure traffic without collecting personally identifiable information.
• Mobile app: PostHog collects anonymized usage analytics. No advertising trackers are used.

10. Children's Privacy

Our services are not intended for children under 16. If you believe a minor's data has been collected, please contact us for prompt deletion.

11. Data Security

We implement technical and organizational safeguards per GDPR Article 32, including:

• Encrypted data transmission (TLS/HTTPS)
• Row-level security on all database tables
• Private storage buckets with time-limited signed URLs for audio content
• Anonymous-first authentication to minimize data collection

12. Changes to This Policy

Policy updates are published on this page with revised dates. Significant changes are communicated via email (for website subscribers) or in-app notification (for app users).

13. Governing Law

This policy is governed by French law and the GDPR (Regulation EU 2016/679). Paris courts hold exclusive jurisdiction for any disputes.

14. Contact Us

For questions or to exercise your rights: contact@rebornmeditation.com