Privacy policy

Last updated: 17 October 2026 — Beta version.

1. Who is responsible for your data

Avennir is a non-profit dating app, published by [Maxence Plitta, natural person — to be replaced by the association or entity once created], [postal address to complete]. Contact for any question about your data: support@avennir.fr. Your data is never sold, rented or shared for advertising or marketing. There are no advertising trackers in the app.

2. Data we collect

• Account: email address, password (stored encrypted, never readable) or the identity provided by Google, Apple, Facebook or Microsoft if you use those logins (name, email, possible profile photo), and a technical identifier.

• Questionnaire: your answers. Some are "special category" data under the GDPR (article 9): sexual orientation, religious beliefs, political opinions, aspects of intimate life. We process them only because they are essential to compatibility matching, with your explicit and separate consent, given through a dedicated checkbox before the questionnaire.

• Public card: your first name, your photo, your city (optional) and your approximate location (rounded to about 1 km, never your exact address), to compute the distance to your match and how many profiles exist in your area. Location is only requested with your permission through your phone or browser.

• Exchanges with your match: messages, images, GIFs, voice messages, activities and games, and the duration of calls (duration only: call content is neither recorded nor stored).

• Presence: the date you last opened the app and your availability confirmation for a wave, so that matches are only offered to active people.

• Referral: your referral code and the link with the people you invited.

• Notifications: the channels you choose (phone notification, email, SMS with your number, Instagram handle).

• Reports and moderation: content you report or that is reported about you, and the reason given.

• Offered or purchased matches: your match balance and its link to your phone number (see point 7).

• Technical: app errors (message, screen, device type, version) to fix bugs. No audience analytics, no behaviour tracking.

• Local settings: language, music and your login session are stored on your device (phone or browser local storage). These are strictly necessary for the app to work: no advertising cookies, no audience measurement.

• Later: a phone number may be requested to verify that each account belongs to a real person; it will only be kept as a fingerprint (see point 7).

3. Why, and on which legal basis

• Compute compatibility and offer you one match at a time, in waves, in your area; prepare the date (reveals, activities, games) and advance the "quest" that gradually unveils photos — legal basis: performance of the service you requested (contract). For sensitive answers: your explicit consent.

• Notify you (your area opening, new match, confirmation before a wave) through the channels you chose — legal basis: your consent, changeable at any time in your Profile.

• Keep the service safe: fight fake and duplicate accounts, handle reports, exclude banned people, fix bugs — legal basis: our legitimate interest in providing a safe service, and our legal moderation obligations.

• Manage offered and, later, purchased matches — legal basis: the contract.

No advertising profiling, no resale, no hidden purpose.

4. An automated decision: matching

The choice of the person proposed to you is fully automated: an algorithm compares your answers with those of other members in your area, weights each question according to the pillars you ranked, applies your eliminatory criteria (age, gender and orientation, distance, children, languages, and your optional seal, the non-negotiable criterion) and computes a compatibility percentage. Nobody reads your answers to decide. This decision has no legal effect on you; its only consequence is a proposed introduction that you remain free to accept, continue or end. You can change your answers at any time (Profile → My answers), which changes future computations, and ask us to explain the result.

5. Who has access to your data

• Your match only sees: your first name, your city, your age, the distance between you, your photo (blurred at first, revealed as your quest progresses), your reveals and what you share in the conversation. They never see your detailed questionnaire answers: only the compatibility percentage, possibly detailed per pillar, is shared.

• If you end a match, the reason you choose (from a list) is passed on to the other person.

• The Avennir team only accesses your answers and exchanges in two cases: a report (the reported content and the relevant conversation are then read by a person to decide) or a request from you (support, exercising your rights). There is no public directory and no freely browsable profile.

• Our technical processors, acting only on our instructions:

– Supabase (database, authentication, files, server functions): hosted in the European Union ([Frankfurt region, Germany — to confirm in the project]).

– Brevo (French company): sending emails (your email address and the message content).

– Vercel: hosting of the web version of the app (static site); processes your IP address and technical logs when you access the site. US company, covered by the European Commission's standard contractual clauses.

– Giphy (Shutterstock group, USA): only if you use the GIF search in the chat; your search and IP address are then sent to it.

– Google, Apple, Meta (Facebook), Microsoft: only if you choose to log in with them; they then act as identity providers under their own policies.

– Expo (EAS): distribution of mobile app updates; your device contacts its servers to check for a new version (IP address, app identifier).

– Later: OVH (France) for SMS, Apple and Google for phone notifications.

No data is transferred outside the European Union except in the cases listed above, and never your questionnaire answers.

6. Where your data is stored and how it is protected

On servers located in the European Union. Exchanges between the app and the servers are encrypted (HTTPS/TLS). Passwords are never stored in clear text. Photos, images and voice messages are stored in a private space, accessible only through temporary links. Server-side access is compartmentalised: each member can only read what concerns them and what their match shares with them. In case of a data breach presenting a risk to you, we will inform you and notify the CNIL within the legal deadline (72 hours).

7. How long

• Your data is kept as long as your account exists.

• End of a match: exchanged messages and media are deleted, unless a report concerns one of the two participants within the last 30 days (they are then kept 30 days for moderation).

• Reports: kept 12 months after handling, to detect repeated behaviour.

• Technical errors: 90 days. Sent-notification queue: 30 days.

• Location: only the last rounded position is kept; it is replaced at each update.

• Account deletion: your personal data is erased from our systems (answers, card, photos, messages, preferences). We only keep a fingerprint (hash) of your phone number if it was verified, for 3 years, to prevent abuse (recreating an account to obtain free matches in a loop) and to give you back your remaining matches if you return with the same number; and, in case of a ban, a fingerprint of your email and number for the duration of the ban. These fingerprints cannot be used to recover your number or email.

8. Your rights (GDPR)

At any time you can: review and correct your answers (Profile → My answers) and your public card; choose your notifications; delete your account (Profile → Account → Delete my account: immediate and permanent deletion, server side included). You also have the rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw your consent at any time (for sensitive answers, withdrawal means deleting the account, as the service cannot work without them). To exercise them: support@avennir.fr, from your account's email address (we may ask you to confirm your identity). Reply within one month. You can also lodge a complaint with the CNIL (cnil.fr) if you believe your rights are not respected.

9. Minors

The app is strictly reserved for adults (18 and over): adulthood is declared at sign-up and checked against the age given in the questionnaire. Any account of a minor is deleted as soon as we become aware of it.

10. Changes

This policy may evolve (new features, new processors). The date at the top changes with each version, and any significant change will be announced in the app before it applies.