Privacy policy

What you record in VivaLaVulva stays on your phone. We do not see it, collect it or sell it. The only thing that leaves your phone is what you choose to share with a person you choose, and it leaves encrypted with a key we never hold.

The VivaLaVulva app (working name: Flare) is published by SARL Pitsana, the data controller for what is described here; its legal details are in the legal notice. No data protection officer is designated. Contact:  .

Your whole record stays in the app on your iPhone, protected by iOS encryption. If your iPhone backups are on, the record is included like any app's data; those backups are managed by Apple or by you, not by us. There is no account, no analytics, no third-party crash reporting, no advertising and no advertising identifier. The app never reads what you write.

• For each person you choose two separate things: your record (days, cycle, episodes, treatments, past appointments) and your sexual life. Your words travel as you wrote them.
• Before leaving, the content is reduced: a partner becomes an initial; private notes about a partner, photos and test results never travel.
• It is encrypted on your phone (AES-GCM, one random 256-bit key per share).
• The key travels in the link, in the part of the address browsers never send to a server. We never have it.
• Our server, hosted by Supabase in Paris (EU), keeps the ciphertext, a share id, a hash of your update token and two timestamps.

We can see ciphertext sizes, update times and how many shares are open, never a word of content. Our host keeps request IP addresses in time-limited technical logs. Withdrawing a share deletes it from our server without notifying anyone. A share your phone has not refreshed for 12 months is deleted automatically. Legal basis: your explicit consent, given by opening a share and withdrawn by closing it.

Reminders are scheduled on your phone and their text never mentions your body. The test build is distributed through Apple's TestFlight, which passes us the feedback you send and, if you agree, crash and usage reports that do not contain your record (a screenshot you attach to feedback shows whatever is on screen). We measure nothing today, and nothing is sent to research. Either would be a separate, explicit choice, described here first.

You hold the GDPR rights of access, rectification, erasure, portability, restriction and objection. Because your record is on your phone, you exercise them in the app: export everything, delete everything, free, at any time. You may also complain to the CNIL (cnil.fr). VivaLaVulva is for adults only.

To join the test you leave a first name and an email; we use them to send the steps and the invitation (your email then goes to Apple for TestFlight), and for nothing else. pitsana.com is hosted by Vercel Inc. (USA) and measures its audience with Google Analytics cookies (13 months at most), unrelated to the app. Email is hosted by Google Workspace and kept three years after our last exchange. Where technical data may be reachable from the United States, transfers rely on the EU-U.S. Data Privacy Framework or the Commission's standard contractual clauses. No automated decision is made about you.