Privacy

No cookies

This site sets no cookies and writes nothing to your browser's storage, neither for measurement nor for advertising. The analytics described below work without cookies and without storing anything on your device. There is therefore no banner to accept.

Analytics

This site counts its visits, so that we know whether it is read and how people reach it. No third-party analytics tool, no advertising tracker, no cookie: the measurement is done by our own server, hosted in France, and feeds no one else. No font is loaded from a third-party domain, and the platform logos are hosted here: no request is made to a third party while you browse.

What is recorded on each visit: the page viewed, the site you came from — its domain name only, never the full address, which could contain your search terms —, your browser's language, a screen class (mobile, tablet, desktop), your time zone and the time spent on the page.

To tell two visitors apart without following you, the server computes a fingerprint from your IP address and your browser, mixed with a secret only we hold. Your IP address is never stored and cannot be recovered from that fingerprint. The fingerprint is, however, stable over time: it lets us know that a visitor has come back. It is therefore pseudonymised data, not anonymous. It is used only for counting, is cross-referenced with no other source, and never leaves our server.

A visit is kept for thirteen months — the period the French data protection authority applies to analytics — then deleted automatically. We locate visitors roughly, by country and city, at their first visit, and keep no precise position: the country and city are computed on our own server from your IP address, with the DB-IP Lite geolocation database installed there. Your IP address is not sent to any third party and is not stored: only that place is. IP Geolocation by DB-IP.

As with any web server, the host keeps technical connection logs for security and for the proper running of the service. Those logs are the host's responsibility and are neither used nor consulted for analysis by TheUnnamedCompany.

Beta and waiting list

This site carries a single form: the one that lets you join the beta and be told when the app is released. We collect your email address, and nothing else — no name, no phone number, no organisation. It is used only to send you the beta invitation, then the release message. It is never sold, and never used for a newsletter. Legal basis: your consent, given by submitting the form. Retention: for the duration of the beta and until the release message is sent, and at most 2 years, or immediately on request.

To keep automated submissions out, the form measures how long elapsed before sending and includes an invisible trap field. Neither is kept beyond handling the request.

There is no other form on this site. If you write to us by email, the information you send — name, contact details, the context of your request — is used only to answer it. Legal basis: our legitimate interest in replying to an enquiry (article 6.1.f GDPR). Retention: 3 years from our last exchange.

The TooMee app

If our server stops, TooMee keeps working: your library lives on your devices and in your private iCloud database, which we cannot access. Only analysis by the included engine waits for it to return.

Here is what the app sends to our server.

• Usage measurement: the app reports that an item was filed, its type, the entry point used, whether the analysis succeeded and which feature was used, along with the app's platform and version — never what the item contains: no title, no address, no note, no tag. These events are attached to a randomly drawn installation identifier, hashed by our server, and linked to the user's licence (see below): we can therefore tell that two installations belong to the same person. On an installation's first event, the country and city are derived from the IP address in the same way as for a site visitor, then stored on the installation's record. Purpose: knowing what is actually used, and helping someone who writes to us. Legal basis: legitimate interest. Retention: thirteen months.
• The included-engine licence: a fingerprint of the user's iCloud identifier (the identifier itself never leaves the device), the first-launch date, platform and app version. We assign it a code (LIC-…), shown in Settings › About, and keep a history of the actions taken on it: creation, plan applied, extension or expiry set, expiry, plan change (subscription), revocation and its lifting, engine set by hand, access token renewed. We may also attach internal labels to it (for example “beta”) to group licences and support their holders; they are never used for advertising profiling and never passed to anyone. We also count, per day, the included engine's calls, tokens and errors, to enforce its daily cap. Purpose: opening the included engine during the trial and subscription. Legal basis: performance of the requested service. Retention: while the licence exists; deletion on request at contact@toomee.app.
• Content analysed by the included engine: when the user relies on the included engine, an item's content — title, address, extracted text and, for an image, the image itself — passes through our server to the model provider, which returns a title and a description. Our server neither stores nor logs it; only the daily number of calls and tokens is counted. Legal basis: performance of the requested service.
• The TooMee Plus subscription: purchases go through Apple's App Store, which handles payment; we never see your payment method or your Apple ID. Tracking them is entrusted to RevenueCat, which receives from the app an identifier drawn at random by TooMee (kept in the iCloud keychain) and your purchase history. Our server also stores this randomly generated identifier on your licence, so it can tell whether your subscription is active. It is not tied to your name or your Apple ID. RevenueCat then tells our server the state of the subscription, and our server may ask it again right after a purchase: we keep on the licence the plan, the period start and end, whether it renews, the environment (test or live) and the last event received — never a price, a name or an email address. Purpose: opening TooMee Plus to whoever paid for it, on iPhone and Mac alike. Legal basis: performance of the contract. Retention: while the licence exists.
• The ToomCard and sponsorship, if the user opens their card: a randomly drawn card identifier kept in their iCloud keychain, the nickname they choose to display, and — if they scan someone's card — the fact that this person sponsored them. It is the only data we keep that links two people together. None of the library is part of it. Legal basis: performance of the requested service. Retention: as long as the card exists; deletion on request at contact@toomee.app.

With an activation code we handed out, the same content goes straight from the app to the model provider named by that code, without passing through our server. With an engine the user configured themselves, content goes to that provider without passing through us. With Apple Intelligence, analysis stays entirely on the device.

This data is received and stored on our own server, hosted in France by OVH. It is never sold, never passed to a third party — except the content relayed to the model provider and the subscription identifier shared with RevenueCat, described above —, and never used for advertising profiling. The app's Settings › Privacy screen describes it item by item, in the user's own language.

Processors and hosting

• OVH SAS — 2 rue Kellermann, 59100 Roubaix, France (Lille Métropole trade register 424 761 419 00045): hosting for the pages of this site, and for the server that receives and stores the waiting-list addresses, the app's usage measurement, licences, subscription states and their relay to the model provider, and the sponsorship links (server located in Gravelines, France).
• OpenAI (OpenAI, L.L.C., United States) — model provider for the included engine: receives the content of analysed items — text, address and, for an image, the image —, relayed by our server or sent directly with an activation code. Transfer outside the European Union covered by the European Commission's standard contractual clauses; under its API terms, submitted content is not used to train its models.
• RevenueCat (RevenueCat, Inc., United States) — tracking of subscriptions bought on the App Store: receives the random identifier and the purchase history, and passes the subscription state to our server. Transfer outside the European Union covered by the European Commission's standard contractual clauses.
• Fly.io (Fly.io, Inc.) — temporary relay, Paris region (France): earlier versions of the app still call its address, which forwards to our server without storing anything, until they are updated.
• Scaleway (Scaleway SAS, France) — delivery of transactional emails related to the beta and the waiting list, and storage of our server's backup copies, encrypted before upload and unreadable by Scaleway (kept thirty days), servers located in Paris. Data erased at your request disappears from all our backups within thirty days at most (fourteen days for the copies kept on our own server).
• Apple — synchronisation of the library through the user's own private iCloud database, to which we have no access; sale and payment of the subscription through the App Store, under Apple's policy.

No other processor is involved in the running of this site or of the app.

Your rights

You have the right to access, correct, erase, restrict, object to and port your data. Write to contact@toomee.app: we answer within 30 days. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).