Privacy Policy

Version dated

This policy describes which data HypnoSelf processes on the hypnoself.app website and in the app.hypnoself.app application, why, with whom, for how long, and how to exercise your rights. It supplements the Terms of Use and the Terms of Sale. Its version date appears below the title.

Who this policy applies to

The data controller is WAYNA, a company established in France, whose full details appear at the end of this document. Because WAYNA is established in France, the General Data Protection Regulation (GDPR) applies to all of your data, wherever you live (art. 3.1 of the GDPR). If you live outside the European Union, the law of your country may give you additional rights: they are added to those described here and do not replace them.

One address for any question about your data: contact@hypnoself.app. For people living in Quebec, the person in charge of the protection of personal information is the manager of WAYNA, who can be reached at that same address (Act respecting the protection of personal information in the private sector, s. 3.1).

The hypnoself.app website

The website contains no forms and asks you for no data. With your consent, it counts page views, clicks through to the app, video plays, questions opened in the FAQ and book cards opened. Nothing is loaded before you make your choice in the banner, and that choice also applies to the app (see Cookies and analytics). Apart from that section on cookies, which is shared by the website and the app, everything else in this document concerns your account in the app.

The data we process, and why

Each use of your data rests on a legal basis provided for by law (art. 6 of the GDPR); it is indicated in brackets.

Your account

Email address, password (stored in hashed form, never in clear text), first name, chosen gender (to match your affirmations grammatically), time-stamped age declaration, language, time zone and preferences. This data is used to create and secure your account, to personalise your sessions and to reach you for the operation of the service (performance of the contract, art. 6.1.b).

Your content

Rituals, affirmations, audio recordings, session images and conversation summaries. This is the heart of the service (performance of the contract, art. 6.1.b). Most of this content is encrypted end to end, as described in Encryption of your data. The text you write during the conversation with the AI assistant is subject to specific rules, described in Conversation with the AI assistant and Health data.

Your use of the app

Listening history (duration, frequency) and usage statistics, to track and display your progress (performance of the contract, art. 6.1.b). An anonymous counter, with no account identifier, counts how many people reach each major step of the journey (entry page, conversation, sign-up, recording, trial) and helps us improve the app (legitimate interest, art. 6.1.f).

Notifications

If you enable reminders, a notification token is stored on our servers in order to send them to you; you can disable and delete it at any time from your profile (consent, art. 6.1.a). If you enable a daily affirmation sent as a notification, that affirmation is stored in clear text for as long as the option remains active, because our servers must be able to read it in order to send it to you.

Where your sign-up came from

Only if you accepted audience measurement in the banner: the source of your first visit (campaign “utm” parameters, referring website, page and button of the website you arrived from) is recorded in your profile when the account is created, so that we know what brings sign-ups. Without that consent, nothing is recorded (consent, art. 6.1.a).

Subscription and billing

Billing address (country and address), customer identifier with Stripe, invoices and receipts, and the log of subscription events (trial started, converted or cancelled, payment succeeded or failed). This data is used to collect your subscription payments, to apply the correct VAT, to decline the countries where HypnoSelf does not sell and to keep our accounts (performance of the contract, art. 6.1.b; legal obligation, art. 6.1.c). We store no payment card data: see Payment and billing.

For each box you tick (terms and conditions, automatic renewal, request for immediate performance, “health data” consent), we record the type of document, its version and the time stamp. This proof allows us to demonstrate your agreement if a dispute arises (legitimate interest, art. 6.1.f; defence of legal claims, art. 17.3.e). The law also requires us to be able to demonstrate your consent (art. 7.1 of the GDPR) and places on us the burden of proving the information we owe you before a purchase (article L221-7 of the French Consumer Code).

Encryption of your data

Once encryption is enabled on your account, your affirmations, your conversation summaries and your audio recordings are encrypted on your device (AES-256-GCM) with a key derived from your password. This key is never sent to our servers: we cannot read this content, and neither can anyone else. A recovery key is given to you when encryption is enabled. If you lose both your password and this key, your encrypted content is permanently lost; we have no way to restore it.

What this encryption does not cover, in full transparency:

  • The title of your sessions and their themes, stored in clear text so that your library can be displayed.
  • The affirmations sent as daily notifications, if you enable that option (see above).
  • The content of the conversation with the AI assistant while it is taking place, since it has to be sent in clear text to Google to generate your affirmations. This thread is not kept; only the summary you approve and the affirmations you keep are recorded, encrypted.
  • Sessions created before encryption was enabled. You can encrypt them from Profile > Security.

Conversation with the AI assistant

You are conversing with an artificial intelligence assistant, not with a person; the interface indicates this with the label “AI Assistant”. This conversation, the generation of your affirmations and the generation of your session images rely on the Gemini API of Google LLC (United States), text and image models.

What is sent to Google: your first name (so that the affirmations address you directly), the chosen gender (for grammatical agreement) and the content of your exchanges, in clear text at the time of the call, since Google has to read it in order to reply. Never sent: your email address, your account identifier and your IP address.

Where your text is processed: the functions on our servers that call Gemini run in the Paris region (AWS eu-west-3) of our hosting provider Supabase; your text passes through no other region before reaching Google. Google, for its part, may process the data in any country where Google or its agents maintain facilities. This transfer outside the European Union is covered by the EU-US Data Privacy Framework, under which Google LLC is certified, and, failing that, by the Standard Contractual Clauses of the European Commission provided for in our contract (art. 45 and 46 of the GDPR).

What Google does with it: our contract with Google is in WAYNA’s name, as a paid service. Under the Gemini API terms for paid services, Google does not use the content sent to train or improve its models. Google may log prompts and responses for a limited period, solely to detect abuse; Google does not specify that period. These commitments depend on the Gemini API terms, which we do not control on our own: we will inform you if they change.

What we keep: not the thread of the conversation. Only the summary you approve and the affirmations you keep are recorded, encrypted end to end. The “Clear my conversations” button (Profile > Security) deletes the conversation summaries that are kept.

AI-generated content: your affirmations and your session images are produced by the AI. In the JSON export of your data, each affirmation carries the marker genere_par_ia: true; the images retain the invisible SynthID watermark applied by Google (Regulation (EU) 2024/1689 on artificial intelligence, art. 50).

No automated decision, no human reading: the assistant makes no decision producing legal effects concerning you or similarly significantly affecting you (art. 22 of the GDPR), and nobody at WAYNA reads your exchanges. If distress is expressed during the conversation, the assistant stops the generation and refers you to the emergency numbers on the Safety page of the app; HypnoSelf is not an emergency service (see the well-being notice in the Terms of Use).

Health data

What you write during the introspection conversation may reveal your emotional state or your mental health. We therefore treat this text as health data, a special category protected by article 9 of the GDPR, and only with your explicit consent (art. 9.2.a). This section brings together everything that concerns this data, including for the laws of certain countries that require dedicated information about consumers’ health data.

  • Categories: the text of your conversations with the AI assistant, the conversation summaries you approve and the affirmations derived from them, insofar as they reflect your emotional or psychological state.
  • Source: you alone. We collect no health data from third parties and infer none by other means.
  • Purpose: to generate your personalised affirmations and sessions. No other.
  • Consent: before your first conversation, you read this information and tick a dedicated box, not pre-ticked: “I agree that what I write here, which may concern my emotional state or mental health, is analysed by an AI. I can withdraw this consent at any time in Profile > Security.” We record the version of this text and the time stamp of your consent. If the text changes substantially, we ask for your consent again.
  • Withdrawal: at any time in Profile > Security. The conversation then becomes unavailable; the rituals already created remain. Withdrawal does not affect the processing carried out before it (art. 7.3 of the GDPR).
  • Sharing: this data passes through our server functions, hosted by Supabase in Paris, and is sent to a single outside provider, Google LLC, as a processor, to operate the AI assistant (see the previous section). The summaries and affirmations derived from it are stored with Supabase, encrypted as soon as encryption is active. Nobody else receives them. We do not sell health data and do not share it for advertising purposes.
  • Geofencing: we use no geofencing and no precise location.
  • Protection: summaries and affirmations are encrypted end to end as soon as encryption is active; the thread of the conversation is not kept.
  • Your rights: all the rights described in Your rights apply, including withdrawal of consent and erasure.

Minimum age

The app is reserved for people aged 16 or over and is not intended for younger people. An age declaration is collected and time-stamped at sign-up. This threshold is the highest that article 8 of the GDPR allows and is above the age of 15 set in France (article 45 of the French Data Protection Act). If we learn that an account has been created by a younger person, we delete it together with its data.

Payment and billing

Payment is entrusted to Stripe (Stripe Payments Europe Ltd, Dublin, Ireland, with processing by Stripe, Inc., United States). You enter your card or your digital wallet on Stripe’s payment page: WAYNA neither sees nor stores any payment card data. Your payment method is kept by Stripe in “tokenised” form, that is, replaced by a token that cannot be used anywhere else.

The billing address (country and address) is required: it is used to apply the correct VAT and to decline the countries where HypnoSelf does not sell, as provided in the Terms of Sale. Depending on the country of your card or your location, Stripe may offer to let you pay in your currency; that choice remains yours.

Stripe issues an invoice and a receipt for each payment, sent by email and available from Profile > Subscription > My receipts as well as from the Stripe customer portal. For its own obligations (fraud prevention, payment regulations), Stripe acts as a separate data controller, under its own privacy policy. Legal bases: performance of the contract (art. 6.1.b) and accounting and tax obligations (art. 6.1.c).

Service emails

We write to you only to operate your account and your subscription: account confirmation, password reset, link to switch to your phone, subscription confirmation (with the essential terms of your subscription), reminder three days before the end of the trial, reminder before each renewal, cancellation confirmation, one or two reminders if your first ritual has not been recorded yet and, where applicable, cancellation of the subscription for a country where we do not sell. These emails are sent through Brevo (Sendinblue SAS, Paris, hosted in the European Union). We send no newsletter and no marketing email. Data processed: email address, first name, language and content of the message. Legal bases: performance of the contract (art. 6.1.b) and, for the reminders before renewal, legal obligation (article L215-1 of the French Consumer Code).

The messages you send us at contact@hypnoself.app are routed to WAYNA’s mailbox by the forwarding service ImprovMX. Data processed: your address and the content of your message (legitimate interest, art. 6.1.f: replying to your requests).

Cookies and analytics

HypnoSelf sets a Google Analytics audience measurement cookie only with your consent, given in the banner shown on your first visit (consent, art. 6.1.a of the GDPR and article 82 of the French Data Protection Act). Nothing is loaded before you make that choice, and a refusal is remembered in the same way as a consent, for 180 days.

You can withdraw or give your consent at any time:

  • _ga and _ga_C1XJFRXN51 (Google Analytics, 13 months): audience measurement identifier, set only after your consent.
  • hs_consent (180 days): your choice, and nothing else. Shared between hypnoself.app and app.hypnoself.app so that you are not asked again when moving from the website to the app.
  • Technical session cookies: required to keep you signed in, requiring no consent.

Audience measurement (Google Analytics 4 and Google Tag Manager) is set to the most restrained configuration: your IP address is not kept, Google Signals is disabled, no data is used for advertising, and the data is deleted after 14 months. It never sees the content of your conversations or your affirmations, only the pages and screens viewed and the steps of the journey.

Global Privacy Control signal: if your browser sends this signal, we treat it as a refusal of audience measurement.

Processors and transfers outside the European Union

The providers below process your data on our behalf and according to our instructions, under a data processing agreement (art. 28 of the GDPR). Your account data and your content are hosted in France, in Paris. When a provider is established outside the European Union, or may process data outside it, the transfer rests on an adequacy decision of the European Commission, here the EU-US Data Privacy Framework (DPF, art. 45), and, failing that, on the Standard Contractual Clauses of the Commission (SCCs, art. 46).

Provider Role Data concerned Place of processing Transfer mechanism
Supabase Pte. Ltd. (Singapore) Database, authentication, file storage, server functions All account data and content, most of it encrypted AWS, Paris region (eu-west-3). The functions that process the introspection text run in Paris; the others (payment, emails, export) may run in the region closest to you SCCs
Google LLC (United States), Gemini API AI assistant, generation of affirmations and session images First name, gender, content of the conversation United States, or any country where Google or its agents maintain facilities DPF (Google LLC certified), failing that SCCs
Google LLC, Google Analytics 4 and Tag Manager Audience measurement, only with your consent Cookie identifier, pages and screens viewed, steps of the journey; IP address not kept United States DPF, failing that SCCs
Google LLC, Google Fonts Fonts of the app (the website hosts its own) IP address, when the fonts are loaded (legitimate interest, art. 6.1.f) United States DPF, failing that SCCs
Stripe Payments Europe Ltd (Ireland) and Stripe, Inc. (United States) Payment, billing, receipts, customer portal, VAT calculation, fraud prevention Email address, billing address, payment method, payment history Ireland, with processing by Stripe, Inc. in the United States DPF (Stripe, Inc. certified), failing that SCCs
Brevo (Sendinblue SAS, Paris) Service emails Email address, first name, language, content of the message European Union No transfer
Pennylane SAS (Paris) WAYNA’s accounting: import of the invoices issued by Stripe Name, billing address, amounts European Union No transfer
Vercel Inc. (United States) Hosting and delivery of the website and the app (static files), technical logs IP address and user agent, for a short period United States DPF (Vercel certified) and SCCs incorporated into its data processing agreement
Sentry (Functional Software, Inc., United States) Redacted technical error reports, never the content of your sessions or your exchanges. Inactive to date; the publisher may enable it Technical data about the error United States This policy will be updated before it is enabled

Your billing data (name, billing address, amounts) is also disclosed to our chartered accountant, solely for our accounting and tax obligations. Apart from these cases, we disclose your data to nobody, except where required by law (for example a lawful request from an authority) or at your request.

Retention periods

Your data is kept for as long as you use the app.

Account deletion: from your profile, erasure is immediate. Your encrypted content becomes unrecoverable at that moment, since the key is known only to you. A current subscription is cancelled without a refund for the period already started, except in the cases where the Terms of Sale or the law provide for a refund (for example if you are still within the withdrawal period); a current trial is stopped. Four items survive deletion, each for a specific reason:

  1. The proof of your acceptance of the legal documents and of your consents, kept without any account identifier or technical data (anonymised), for the defence of legal claims (art. 17.3.e of the GDPR).
  2. An irreversible fingerprint (SHA-256 hash) of your normalised email address, kept in a register of trials already used, so that a free trial is granted only once per address. This fingerprint does not make it possible to recover your address.
  3. The log of subscription events (trial started, converted, cancelled, payment succeeded or failed), kept without any account identifier for accounting purposes.
  4. Your billing data with Stripe (invoices, receipts, tokenised payment method), kept for as long as accounting and tax obligations require.

Inactive account: if you do not sign in for one year after the end of your paid access, your rituals, your audio recordings, your session images and your listening history are deleted. Simply signing in resets this period. Your account remains usable. Founders’ Circle accounts (an offer reserved for the first accounts created, described in the Terms of Sale) and gifted accounts are not affected.

Data Period
Account and content For as long as the account is active; immediate deletion at your request; content purged after one year of inactivity
Conversation summaries Until they are erased with the “Clear my conversations” button or the account is deleted; the thread of the conversation is never kept
Proof of acceptance and consent (including automatic renewal and health data) 5 years after the end of the relationship (limitation period, article 2224 of the French Civil Code)
Billing data, log of subscription events 10 years (article L123-22 of the French Commercial Code)
Fingerprint of the used trial Without limit for as long as the “one trial per address” rule exists; irreversible
Audience measurement (Google Analytics) 14 months
Cookies hs_consent 180 days; _ga 13 months
Technical hosting logs From a few days to a few weeks

What we do not do

  • We do not sell your personal data and do not share it for advertising purposes, including for cross-site or cross-app behavioural advertising.
  • We do no targeted advertising.
  • We use no geofencing.
  • We make no automated decision producing legal effects concerning you (art. 22 of the GDPR).

Security and data breaches

Your data is protected by the end-to-end encryption described above, by password hashing and by the measures of our hosting providers (art. 32 of the GDPR). If a breach of your data occurred despite this, we would notify the CNIL within 72 hours and would inform you directly if it presented a high risk to your rights (art. 33 and 34 of the GDPR).

Your rights

You have the following rights over your data (art. 15 to 22 of the GDPR). Most of them can be exercised directly in the app; for the others, write to contact@hypnoself.app.

  • Access: view your data in the app, or ask us for a copy.
  • Rectification: edit your information from your profile.
  • Erasure: delete your account and your data from your profile, with immediate effect (see Retention periods for the four exceptions).
  • Portability: download all of your data in JSON format from your profile, “Export my data” button. Your encrypted sessions are decrypted on your device before download if your data is unlocked.
  • Restriction and objection: write to us to ask for a processing operation to be restricted or to object to it, in particular processing based on our legitimate interest.
  • Withdrawal of your consents, at any time and without giving a reason: audience measurement with the “Manage cookies” button above, health data in Profile > Security, notifications in your profile.
  • Instructions for after your death: you can tell us what should happen to your data (article 85 of the French Data Protection Act).
  • Complaint: with the CNIL (www.cnil.fr) or, if you live in another country of the European Union or the European Economic Area, with the data protection authority of that country (art. 77 of the GDPR). Outside that area, you may also contact the authority of your country, for example the Commission d’accès à l’information in Quebec.

We reply within one month, extendable by two months if your request is complex, in which case we inform you (art. 12.3 of the GDPR). Exercising your rights is free of charge (art. 12.5). If there is doubt about your identity, we may ask you to confirm it, for example by writing to us from the email address of your account (art. 12.6).

Changes to this policy

Each new version is published on this page with its date. This policy informs you; it does not ask you for any acceptance. However, if the text of the “health data” consent you accepted changes substantially, we ask for your consent again in the app before any new conversation.

Contact and data controller

Data controller: WAYNA, EURL with a share capital of €100, registered with the Annecy Trade and Companies Register (RCS) under number 979 238 417 (SIRET 979 238 417 00013), whose registered office is at 20 chemin des Combes, 74410 Saint-Eustache, France, VAT number FR35 979 238 417.

Person in charge of the protection of personal information (Quebec): the manager of WAYNA.

For any question about your data or to exercise your rights: contact@hypnoself.app.