1. Who we are
LINELY is an iOS journalling app published by the LINELY team.
Data controller under the GDPR: Alexandre Marlhens, sole trader (micro-entreprise), trading as LINELY. SIREN 107 572 927, registered with the Montpellier commercial registry.
Data controller contact: support@linely.fr
This policy applies to the LINELY iOS app, to all of its features, and to the linely.fr website.
2. Data we collect
Data you give us
Email address, display name, username. Optionally: profile photo, bio.
The text of your journal entries, the mood attached to them, any tags. Photos and audio memos attached optionally.
The pages you choose to share with your Circle, and the reactions to them. Visible only to the people you invited there, never public.
If you turn cycle tracking on, LINELY reads the date of your period through HealthKit (or from what you enter by hand). Your dates never leave your device: neither the day of your period nor the length of your cycle is stored on our servers.
However, if you subscribe to LINELY MAX, the name of your phase (menstrual, follicular, ovulatory or luteal; never a date, never a day) is sent to Anthropic, in the United States, to write your edition. The text produced may name that phase, and that text is kept on our servers like the rest of your edition.
This is health data under Article 9 of the GDPR: it is only processed because you turned it on, and tracking can be turned off at any time in Settings.
If you choose "Continue with Apple", Apple sends us a stable identifier specific to LINELY and, on the first sign-in only, your name and an email address. At that moment you decide whether it is your real address or a private relay address provided by Apple; in the second case we never know the real one. We also keep the token needed to revoke the connection if you delete your account. We receive nothing else from your Apple account.
Data collected automatically
Used to show the weather and the town in your entries and, since version 1.0.12, to match your writing reminder to the weather. You can refuse this permission with no impact on the main features. We never store your exact position: a page keeps only the town and the sky of the moment (sun, clouds, rain, snow or storm). Pages written before version 1.0.12 also keep the temperature of that moment.
Your area. If the option “Place and weather on your pages” is on (it is by default) and you have allowed location, we keep on our servers an area rounded to about 10 km, never your exact position. Its only use is to know what the weather is like where you are at the time of your writing reminder (rain, snow, wind, cold…), so that it can match it. It is never shown to the people close to you, or to anyone. It is erased as soon as you turn the option off (Settings → Your pages), with your account, or if it has not been updated for 30 days.
A Supabase session identifier, used solely to authenticate you securely. If you allow notifications, the device token provided by Apple (APNs) is kept in order to send them to you; it says nothing about you and is deleted with your account. Nothing is shared with third parties for advertising purposes.
Sign-in log. Each time a session opens, our authentication provider records the IP address and the browser or device used. That is what makes it possible to recognise abnormal access to your account. Those lines are kept as long as your account exists and disappear with it.
To know whether the app works (for example: how many new arrivals write their first line), we record a few journey milestones: an event name ("first line", "letter sealed"…), a random installation identifier, the account identifier if there is one, and the version number. Since version 1.0.14, each visit to the app also leaves a short trace: when the app was opened and closed, how you came in (the icon, a notification, a link), the tabs you opened, and whether you scratched the quote, opened the writing space, started a text or saved a page. Never the content of what you write, never the device. These traces are kept for 12 months at most and then erased automatically. No third-party tool: everything stays in our own database.
When you entrust a letter to someone, we keep a snapshot of it: its text, its title, its delivery date, your name as sender, and that person's email address, so we can hand it to them on the day.
On the day of delivery, that letter becomes readable on linely.fr by anyone holding the link, with no account and no password: that is what makes it possible to open it from an email. The link is neither indexed nor guessable, but it can be forwarded. Only share it with the person the letter is meant for.
That snapshot stays with the person who received it, even if you delete your account afterwards (see section 4).
🔒 We do not collect: precise location data, contacts, browsing history, payment card information (handled by Apple/StoreKit), IDFA or any advertising tracking identifier.
Data collected on the linely.fr website
If you sign up through the form on linely.fr, we record your email address, the page you came from, and a technical fingerprint of your browser, a string computed from its name, which cannot recognise you anywhere else and serves only to spot automated sign-ups. If you later create an account with the same address, we match the two to know how many sign-ups became users. All of it is stored on Supabase (EU) and used solely to send you an email when the app launches. No other communication, no sharing, no resale. You can unsubscribe at any time by writing to support@linely.fr.
The linely.fr website uses no tracking cookie, no advertising pixel, no behavioural analytics tool (no Google Analytics, no Meta Pixel, no Hotjar). No cookie consent banner is required because no non-essential cookie is set.
3. How we use your data
| Purpose | Legal basis (GDPR) | Data concerned |
|---|---|---|
| Providing the service (journal, multi-device sync) | Performance of the contract | All content data |
| Authentication and account security | Performance of the contract | Email, user ID |
| Sharing in the private Circle | Consent (opt-in, page by page) | The pages you choose to share |
| Notifications (evening rendezvous, Circle events) | Consent (GDPR Art. 6.1.a), given through the iOS permission; nothing is sent without it, and each rendezvous can be turned off in the app | APNs device token, reminder settings |
| Matching the writing reminder to the weather | Consent: the iOS location permission and the option “Place and weather on your pages”, which you can turn off at any time in Settings → Your pages | Area rounded to about 10 km and the date it was last updated; the days when the reminder mentioned the weather |
| Writing your editions with a language model (week, month, season, year; LINELY MAX) | Performance of the contract, for the LINELY MAX part you subscribed to. Without a MAX subscription, no text is ever sent. | The text of your pages and of your evening reflections for the period, your moods, the joys you slipped in, and, if you turned it on, the name of your cycle phase. Sent to Anthropic (United States), encrypted in transit, not retained by them, never used to train a model. |
| Improving the service (internal measurement) | Legitimate interest | Pseudonymised journey milestones and visit traces (see section 2), without content, purged within 12 months |
| User support | Performance of the contract | Email, description of the problem |
We never sell your data to third parties and do not use it for advertising purposes.
4. Storage and security
Your data is stored on Supabase (PostgreSQL infrastructure hosted on AWS eu-west-3, Paris, France). All communications are encrypted in transit (TLS 1.3) and at rest (AES-256).
Access to your database is protected by PostgreSQL Row Level Security (RLS): technically, no other user can reach your entries, even knowing your identifier.
Temporary data (drafts, preferences) is stored locally in UserDefaults and the iOS Keychain on your device. It is deleted when you sign out or delete your account.
⚠ Transparency about AWS: although the physical hosting is in Paris (France, EU), AWS is a US company and remains, in theory, subject to the US CLOUD Act. To our knowledge, no access request has been received to date. Should one arrive, we would oppose it within the limits of applicable law and would notify you without delay if the law allowed us to.
Retention periods
- Account data and content: kept as long as your account is active.
- After account deletion: your profile, your pages, your joys, your undelivered letters and your editions are erased immediately from the live database. Your files (photos, voice memos) go with the nightly round, at the latest the following day. What you gave stays with the person you gave it to: a page entrusted, a letter already delivered, a joy offered, your words in a thread, an answer already revealed. Those traces no longer carry your name, they are signed by an empty account, but they are not erased, because they also belong to the other person (Article 17.3 of the GDPR). See section 6.
- Backups: an encrypted copy of the database and files is made every day, so that everything can be restored after an incident. It is kept for 30 days at most, in the publisher's personal storage (iCloud Drive), and no one can read it without its key. What you erase also disappears from these copies within 30 days.
- Technical logs: language model calls (function called, word count, duration, never the content): 40 days. Errors from our server functions: 30 days. Local device log (OSLog): 30 days, and it never leaves your iPhone.
- Usage milestones and visit traces (internal measurement): 12 months at most, automatic purge.
- Weather area: erased as soon as you turn off the option “Place and weather on your pages”, with your account, or after 30 days without an update. The log of weather reminders (a date and a kind of weather, never a place): 90 days, one year for the “first times” (first snow, first lovely day), which must only come once a season.
- Waitlist email (linely.fr website): kept until the app launches, then erased 30 days after the launch email is sent. Unsubscribing is possible at any time.
5. Third-party services
Database, authentication, file storage. Hosted in Europe (AWS eu-west-3, Paris).
LINELY+ subscriptions are handled entirely by Apple. We never see your payment information.
Since version 1.0.12, the weather shown in LINELY comes from Apple ( Weather data). Your approximate coordinates are sent to it only to retrieve the weather. For the writing reminder, our server also asks Apple for the forecast of your rounded area (about 10 km), with nothing that identifies you: no account, no name. Earlier versions used Open-Meteo, an open-source service with no account and no tracking.
Your week, month, season and year editions, as well as writing suggestions, are generated through Anthropic's API. What is sent depends on the edition, and we would rather say it precisely:
- Week edition: the full text of the pages, the evening reflections, the joys slipped into the Jar and the answers to the questions for that week, along with their moods. A sealed letter is represented only by its date, never by its content.
- Month edition: short excerpts of your entries (280 characters maximum per entry) and their moods.
- Season and year editions: only the editions already written for the period. Your pages themselves are not sent again.
These transfers are encrypted in transit (TLS) and happen only for the time of the generation; they are neither stored by Anthropic nor used to train models (a contractual commitment of the API). The generated text is then kept at Supabase like any other data belonging to your account. Anthropic is a US company.
Account emails (confirmation, password reset), the waitlist confirmation email and Circle invitations sent by email go through Resend (only the address concerned and the content of the message). Resend is a US company.
We integrate no advertising SDK, no third-party social network, and no behavioural analytics tool of the Firebase Analytics or Mixpanel kind.
6. Your rights (GDPR)
You have the following rights under the GDPR and the French Loi Informatique et Libertés:
- Right of access (Art. 15): obtain a copy of your data from Settings → Your account → All my data (GDPR), in JSON format. The file covers your profile, your pages, your joys, your letters, the pages you entrusted and received, your seals and your words, your questions for two, the messages and thoughts exchanged in your Circle, your Circle itself and your editions.
- Right to rectification (Art. 16): change your profile, your name and your entries directly in the app.
- Right to erasure (Art. 17): delete your account from Settings → Your account → Delete my account. One limit, and we would rather write it down: what you entrusted to someone close is not erased from their side. Those are their memories too, and Article 17.3 reserves that case. Your name is removed from them.
- Right to restriction of processing (Art. 18): ask for the processing of your data to be suspended in certain cases (accuracy contested, objection under examination, and so on). Send us a request by email.
- Right to portability (Art. 20): export your data as JSON (machine-readable) or your journal as a PDF, from Settings → Your account.
- Right to object (Art. 21): turn push notifications off in iOS Settings at any time, or write to us to object to any processing based on legitimate interest.
- Right to withdraw consent: take back the pages you shared in your private Circle, or delete your account, at any time.
- Post-mortem instructions (Art. 85 LIL): you can tell us by email what you would like to happen to your data after your death.
To exercise these rights or ask any question: support@linely.fr. We answer within 1 month of receiving your request, a period that may be extended to 3 months for complex requests (with a reasoned notice).
No DPO appointed: LINELY is not required to appoint a Data Protection Officer (the nature and scale of the processing do not cross the thresholds of Article 37 of the GDPR). All GDPR requests are handled directly by the team at support@linely.fr.
If you believe the processing of your data is not compliant, you can lodge a complaint with the CNIL (the French data protection authority).
7. Minors
LINELY is intended for people aged 16 and over, in line with the App Store age rating, a threshold above that of Article 45 of the Loi Informatique et Libertés (15 years, France's transposition of Article 8 of the GDPR). For minors between 16 and 18, use is unrestricted.
For those under 16, we do not knowingly collect data relating to such users. If you believe a minor under 16 has created an account, contact us at support@linely.fr for immediate deletion.
8. Contact
The LINELY team
This policy may be updated. In the event of a significant change, a notification will be sent in the app. The date of the last change is shown at the top of this page.