Privacy

Your data, and your customers' data.

What Yatsury Studio collects, why, who processes it, for how long, and how to exercise your rights.

This translation is provided for convenience; the French version prevails.

Data controller

Eyal Ouaknine, publisher of Yatsury Studio, reachable at eyal.ouaknine@gmail.com.

Data collected

• Your account: email, display name and photo if you sign in with Google, password (stored in an irreversible form, never readable).
• Your apps: description of your idea, answers to the questionnaire, texts, photos and settings you add.
• Your apps' customers: what they enter in your app (orders, bookings, contact details, messages, votes, challenge photos, loyalty card, queue tickets) and, in apps installed from the stores, a notification token. For this data, you are the data controller and Yatsury acts on your behalf, as a processor.
• Beta sign-up: first name, email, app idea and area of interest.
• Improving suggestions: the sentence describing your idea in the creation questionnaire and the features suggested, kept, added or removed, not linked to your account, kept for 12 months.

Purpose and legal basis

• Providing the service (creating, saving and publishing your apps, running their orders, bookings and notifications): performance of the contract.
• Keeping you informed about the beta: your consent.
• Limiting abuse (number of requests per device, IP address irreversibly encrypted): legitimate interest.
• Improving the features suggested when creating an app (measuring how accurate they are): legitimate interest.

Retention period

As long as your account exists. Deleting your account (My account → Delete my account) erases your apps and their data. A customer of an app can erase their own information from the app ("Erase my information"). Beta sign-up: three years after your last contact, or until you unsubscribe.

Recipients and processors

Your data is never sold or transferred. It is processed by:

• Supabase: database and files, servers in Paris (European Union).
• Vercel: site hosting, United States.
• Anthropic: AI text generation (description of your idea, requests made to Atlas and to your apps' AI tools), United States.
• OpenAI, Google or Mistral AI: only if you connect your own AI key from one of them; your AI requests are then sent to them.
• Stripe: only if you turn on online payment in your app (your customers' payments, on your own Stripe account).
• Expo: delivery of notifications for apps installed from the stores (notification token and notification text), United States.
• Google: if you choose Google sign-in.

Transfers outside the European Union rely on these providers' contractual safeguards (the European Commission's standard contractual clauses).

Audience measurement

The site measures its traffic with a privacy-friendly tool, without cookies or personal data. No cookie banner is therefore needed.

Your rights

You can access your data, correct it, delete it, object to its processing or withdraw your consent at any time by writing to eyal.ouaknine@gmail.com. You can also file a complaint with the CNIL, the French data protection authority (cnil.fr).