Your secrets are safe with us.

01Who we are

The Leffy app is published by Ovega SAS, Bureau 3, 30 avenue Maréchal Foch, 69006 Lyon, France, which is the data controller for the processing described here.

For any question about your data: contact@ovega.fr.

02Your data stays with you

Leffy uses no servers for its core features. Everything you enter is stored only on your device, protected by iOS encryption, and is never sent to Ovega or anyone else:

• your partners: first name or nickname, photos, age, nationality, body type, body hair, role, notes;
• your encounters: date, time, duration, place, participants, kinks, role, notes, photos, condom use;
• your health: your PrEP doses, your protection status and its history;
• your preferences: settings, default role and kinks.

This information is sensitive (sex life, health). That's exactly why we chose never to get our hands on it.

03App permissions

Leffy only asks for a permission when you use the feature that needs it. You can revoke it at any time in your iPhone's Settings.

• Face ID / Touch ID: to lock the app. Recognition is done by iOS; Leffy only gets "success" or "failure", never your face or fingerprint.
• Location (while using the app): to pre-fill the place of an encounter. The position is saved on your phone and nowhere else.
• Notifications: for PrEP reminders. They are scheduled locally by your iPhone.
• Photos: only the pictures you pick are copied into the app.
• Siri and Shortcuts: to log a PrEP dose by voice. The request is processed by Apple according to your Siri settings; the dose is saved on your phone.

04What leaves your phone (and why)

A little information, never taken from your diary, goes through providers chosen for how little they collect:

When data is processed outside the European Union (RevenueCat, Apple), the transfer is covered by the safeguards provided for by the GDPR, such as the European Commission's standard contractual clauses.

Usage stats: designed to be anonymous

To know which features get used and which get in the way, we use Aptabase, an analytics tool built to collect as little as possible about you. Here is what that means in practice.

• You can object at any time. Usage stats are on by default. A switch in Settings › Privacy turns them off: nothing is sent afterwards. The app explains the principle from the welcome screens.
• We only measure actions. The list is closed and hard-coded in the app: app launches, a report or a partner being created (the fact, never its content), the statistics being opened, the lock being turned on, PrEP being turned on (with the type of regimen, nothing else), the Leffy XL screen being viewed and how a purchase ends.
• We never see your content. No names, notes, photos, places, dates, practices, number of reports or PrEP doses. Nothing you type can leave your phone: the app simply has no way to send it.
• No identifier from your phone. Aptabase reads neither the advertising identifier nor your iPhone's identifier, and uses no cookies. Your IP address goes through its servers, like with any internet connection; Aptabase states that it uses it only at the moment of sending, to compute a technical code and work out your country, without storing it. The code is recomputed every day: it cannot recognize you from one day to the next, or from one app to another.
• European hosting and open source. Aptabase data is stored exclusively in the European Union (Germany), and the service is open source: anyone can check how it works. Aptabase acts as a processor under the GDPR.
• No individual profile. Because this data is not linked to you, we cannot pull up “your” individual stats. To object to the processing, just turn the switch off.

05What we never do

• Sell, rent or trade your data.
• Show targeted ads or track you across apps.
• Create an account or a profile in your name.
• Access the content of your diary, your health data or your photos.

06How long we keep data

• App data: on your phone, until you delete it. Deleting the app erases it.
• Usage stats: anonymous, kept by Aptabase for up to 5 years.
• Purchases: for the length of your subscription, then as long as accounting and legal obligations require.
• Support conversations (by email): as long as needed to handle your request, then no more than 3 years after our last exchange. You can ask us to delete them sooner.

07Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. Under French law, you can also set instructions for what happens to your data after your death.

For data stored on your phone, you're in control: edit or delete it directly in the app, or delete the app. For everything else, write to contact@ovega.fr; we answer within one month at most.

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL, or with the authority of the country where you live.

08Minimum age

Leffy is for adults only. We do not knowingly collect any data about minors.

09This website

This site uses no cookies, no audience measurement and no trackers. It only remembers the language you picked, in your browser's local storage, without sending us anything.

Fonts are loaded from Google Fonts: your browser therefore sends your IP address to Google to download them. Our hosting provider may also keep technical logs (IP address, date, page requested) to keep the site secure.

10Changes

This policy may change, for example when the app gets a new feature. The date at the top of the page is the reference; if something important changes, we'll let you know in the app.

11Contact

A question, a request, a doubt? contact@ovega.fr or the contact page.

Ovega SAS — Bureau 3, 30 avenue Maréchal Foch, 69006 Lyon, France.