Privacy Policy

1. Data Controller

Rodrigue Buisson, micro-entrepreneur (SIRET: 924 811 763 00011), based in Boulogne-Billancourt (92100), France, manages personal data collected through the website rebornmeditation.com and the mobile application "Reborn Meditation."

Contact: contact@rebornmeditation.com

2. Information We Collect

Website

Email address submitted through the waitlist signup form.

Mobile Application

• Account data: When you use the app, an anonymous account is created automatically. If you sign in with Google, we collect your Google email address, name, and profile picture.
• Preferences: Language preference and preferred meditation voice.
• Usage data: We use PostHog to collect anonymized analytics such as screen views, session duration, and feature usage to improve the app experience. No personally identifiable information is tied to these analytics unless you are signed in.
• Device information: Device locale (language) detected at first launch.
• Subscription data: When you subscribe to Reborn, RevenueCat receives your anonymous user identifier, subscription status, purchase history, renewal dates, device and platform information, and transaction receipts from Apple. We never see or store your payment details — payments are processed directly by Apple.
• Push notification token: If you enable notifications, an Expo push token is generated for your device so we can send meditation reminders. The token is tied to your anonymous user ID and deleted when you delete your account or disable notifications.

We do not collect health data, location data, contacts, or any sensitive personal information.

3. Legal Basis for Processing

Processing occurs under GDPR Article 6(1)(a) (explicit consent) and Article 6(1)(f) (legitimate interest for analytics and service improvement), in compliance with French data protection law.

4. How We Use Your Information

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Processors and International Transfers

Data transfers outside the EEA (Google, Loops.so, RevenueCat, Expo) are protected by Standard Contractual Clauses compliant with GDPR Article 46. Supabase and PostHog data remain within the European Union.

6. Data Retention

• Website email addresses: Stored while you remain subscribed. Deleted within 30 days of unsubscribe or deletion request.
• App accounts: Anonymous accounts and associated preferences are retained while you use the app. Upon account deletion request, all data is erased within 30 days.
• Analytics data: Retained for 12 months, then automatically anonymized or deleted.

7. Your Rights Under GDPR / RGPD

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability — receive your data in a structured format
• Object to processing
• Withdraw consent at any time

Requests are processed within one month. Contact: contact@rebornmeditation.com

8. Right to Lodge a Complaint

Complaints may be filed with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Website: www.cnil.fr

9. Cookies and Tracking

• Website: No tracking cookies. Basic analytics measure traffic without collecting personally identifiable information.
• Mobile app: PostHog collects anonymized usage analytics. No advertising trackers are used.

10. Children's Privacy

Reborn is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@rebornmeditation.com and we will delete the information promptly.

Users between 13 and 16 in the European Economic Area must have parental consent to use the app, in accordance with GDPR Article 8.

11. Your California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights regarding your personal information:

• Right to know — request a copy of the personal information we hold about you
• Right to delete — request deletion of your personal information (you can also do this directly in the app via Settings → Delete Account)
• Right to correct — request correction of inaccurate personal information
• Right to opt out of sale — we do not sell your personal information to third parties, and we never have
• Right to non-discrimination — we will not deny service or charge different prices for exercising these rights

To exercise any of these rights, contact us at contact@rebornmeditation.com. We will respond within 45 days.

12. Data Security

We implement technical and organizational safeguards per GDPR Article 32, including:

• Encrypted data transmission (TLS/HTTPS)
• Row-level security on all database tables
• Private storage buckets with time-limited signed URLs for audio content
• Anonymous-first authentication to minimize data collection

13. Changes to This Policy

Policy updates are published on this page with revised dates. Significant changes are communicated via email (for website subscribers) or in-app notification (for app users).

14. Governing Law

This policy is governed by French law and the GDPR (Regulation EU 2016/679). Paris courts hold exclusive jurisdiction for any disputes.

15. Contact Us

For questions or to exercise your rights: contact@rebornmeditation.com