Your secrets are safe with us.

01Who we are

The Cumfy app is published by Ovega SAS, 4 rue de la République, 69001 Lyon, France, which is the data controller for the processing described here.

For any question about your data: contact@ovega.fr.

02Your data stays with you

Cumfy uses no servers for its core features. Everything you enter is stored only on your device, protected by iOS encryption, and is never sent to Ovega or anyone else:

• your partners: first name or nickname, photos, age, nationality, body type, body hair, role, notes;
• your encounters: date, time, duration, place, participants, kinks, role, notes, photos, condom use;
• your health: your PrEP doses, your protection status and its history;
• your preferences: settings, default role and kinks.

This information is sensitive (sex life, health). That's exactly why we chose never to get our hands on it.

03App permissions

Cumfy only asks for a permission when you use the feature that needs it. You can revoke it at any time in your iPhone's Settings.

• Face ID / Touch ID: to lock the app. Recognition is done by iOS; Cumfy only gets "success" or "failure", never your face or fingerprint.
• Location (while using the app): to pre-fill the place of an encounter. The position is saved on your phone and nowhere else.
• Notifications: for PrEP reminders. They are scheduled locally by your iPhone.
• Photos: only the pictures you pick are copied into the app.
• Siri and Shortcuts: to log a PrEP dose by voice. The request is processed by Apple according to your Siri settings; the dose is saved on your phone.

04What leaves your phone (and why)

A little information, never taken from your diary, goes through providers chosen for how little they collect:

When data is processed outside the European Union (RevenueCat, Apple), the transfer is covered by the safeguards provided for by the GDPR, such as the European Commission's standard contractual clauses.

Usage stats: why they are truly anonymous

To know which features get used and which get in the way, we use Aptabase, an analytics tool built to know nothing about you. Here is what that means in practice.

• You decide. Usage stats are off by default. The app asks you once, and you can change your mind at any time in Settings › Privacy. If you decline or turn the switch off, nothing is sent.
• We only measure actions. The list is closed and hard-coded in the app: app launches, a report or a partner being created (the fact, never its content), the statistics being opened, the lock being turned on, PrEP being turned on (with the type of regimen, nothing else), the premium screen being viewed and how a purchase ends.
• We never see your content. No names, notes, photos, places, dates, practices, number of reports or PrEP doses. Nothing you type can leave your phone: the app simply has no way to send it.
• No identifier. Aptabase reads neither the advertising identifier nor your iPhone's identifier, and uses no cookies. A technical code, recomputed every day, stands in for an identifier: it cannot recognize you from one day to the next, or from one app to another. Events cannot be linked to your name, your account or any other profile.
• European hosting and open source. Aptabase data is stored exclusively in the European Union (Germany), and the service is open source: anyone can check how it works. Aptabase acts as a processor under the GDPR.
• Nothing to erase, nothing to find. Because this data cannot be linked to you, nobody, us included, can pull up “your” stats. Turning the switch off is enough to stop everything.

05What we never do

• Sell, rent or trade your data.
• Show targeted ads or track you across apps.
• Create an account or a profile in your name.
• Access the content of your diary, your health data or your photos.

06How long we keep data

• App data: on your phone, until you delete it. Deleting the app erases it.
• Usage stats: anonymous, kept by Aptabase for up to 5 years.
• Purchases: for the length of your subscription, then as long as accounting and legal obligations require.
• Support conversations (by email): as long as needed to handle your request, then no more than 3 years after our last exchange. You can ask us to delete them sooner.

07Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. Under French law, you can also set instructions for what happens to your data after your death.

For data stored on your phone, you're in control: edit or delete it directly in the app, or delete the app. For everything else, write to contact@ovega.fr; we answer within one month at most.

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL, or with the authority of the country where you live.

08Minimum age

Cumfy is for adults only. We do not knowingly collect any data about minors.

09This website

This site uses no cookies, no audience measurement and no trackers. It only remembers the language you picked, in your browser's local storage, without sending us anything.

Fonts are loaded from Google Fonts: your browser therefore sends your IP address to Google to download them. Our hosting provider may also keep technical logs (IP address, date, page requested) to keep the site secure.

10Changes

This policy may change, for example when the app gets a new feature. The date at the top of the page is the reference; if something important changes, we'll let you know in the app.

11Contact

A question, a request, a doubt? contact@ovega.fr or the contact page.

Ovega SAS — 4 rue de la République, 69001 Lyon, France.