Privacy Policy

This English version is provided for convenience only; the French version is the one that governs and prevails in the event of any discrepancy.

This policy explains what data ManipulateMe processes, why, how long it is kept, and what your rights are. It supplements the Terms of Use and Sale.

In short: no account, no email requested, no advertising, no tracking. Your conversations are used to run the game, and for nothing else.

1. Data controller

ManipulateMe is published by Clément Eiserloh, entrepreneur individuel, SIRET 131 043 184 00012, 17 rue de Chaligny, 75012 Paris. Contact: contact@manipulateme.app.

2. What stays on your phone

The first name and language chosen at onboarding, your debriefs, your favorite cards and concepts, and the theory sections you've browsed are kept only on your phone. Your first name is never sent. The app also keeps a copy of your rounds and your purchase there, whose original lives on our servers (see below).

The analysis of your playing style is computed on your phone, from this data, and is never sent anywhere.

Reminders (one notification a day with the concept of the day, only without Premium and only if you accepted them) are scheduled by your phone itself: no server sends them, and no notification identifier is sent to us. You can turn them off in Settings or in your phone's own settings.

Deleting the app erases all of this data. "Reset my progress," in Settings, erases only the openings found, the sections browsed, and your favorites.

3. What we receive

A device identifier. It's a randomly generated code created on first launch, containing no information about you or your phone. It's used to link your rounds, your attempts, and your purchase. On iPhone, it's stored in the keychain and may survive an uninstall.

Your conversations. For each round: the challenge played, your messages, the character's replies, the scoring of each turn, the outcome, and the date.

Your counters. The number of attempts used per challenge, and whether Premium is active.

Technical data. Your IP address and request metadata (date, endpoint called, response code) pass through our hosting provider, which needs them to route and protect the service. We do not store them in our own database.

Your purchase. Payment is processed by Apple: we see neither your card, nor your identity, nor your Apple account. We only receive confirmation that Premium was purchased, refunded, or restored.

If you write to support: your email address, your message, and whatever you choose to attach.

We do not collect your location, your contacts, your photos, or any advertising identifier. The app contains no audience-measurement, advertising, or diagnostics tool.

4. Why

Making the characters respond, scoring your rounds, and producing your debrief: performance of the contract (the game you're using).

Unlocking and restoring Premium: performance of the contract.

Limiting each challenge to five attempts and preventing abuse: legitimate interest, since each turn has a real cost for us.

Running and securing the service, fixing failures: legitimate interest.

Responding to support: performance of the contract or legitimate interest, depending on the request.

Your messages are never shown to other players, never sold, never used for advertising or to train an artificial intelligence model. The AI's scoring of your rounds is used only for the game and has no effect outside it.

5. Your messages and artificial intelligence

The characters are powered by an artificial intelligence model provided by Anthropic (United States). On every turn, the text of the ongoing conversation is sent to it to produce the reply and the scoring. No first name, device identifier, or IP address is sent to it.

Anthropic processes this data on our behalf, does not use it to train its models, and deletes it after a short period set by its own commercial terms.

The game's situations are fictional: do not enter real personal information in them, whether about yourself or anyone else.

6. Who has access

The publisher, and the following providers, each for their sole purpose:

Cloudflare: hosting the service and storing your rounds and counters, routing and protecting requests. Your rounds and counters are stored within the European Union; requests travel over its global network.

Anthropic: generating the characters' replies and the scoring, from the text of your conversations. United States.

Apple: distributing the app, processing payment and restoring purchases, under its own privacy policy.

RevenueCat: verifying purchases and their restoration, from the device identifier and the transaction identifiers provided by Apple. United States.

The email service used for support, if you write to us.

When data is processed outside the European Economic Area, the transfer relies, depending on the provider, on an adequacy decision (including the EU-US Data Privacy Framework for certified organizations) or on the European Commission's standard contractual clauses. You may ask us for details of the safeguards that apply.

7. How long

The text of your conversations is erased from our servers 12 months after the round.

The number of attempts per challenge, the outcome of your rounds (without their text), and the state of your purchase are kept for as long as the service exists. They contain no message and are used to enforce the attempt limit and to retrieve your progress.

The hosting provider's technical logs are automatically erased after a few days.

Support messages are kept for as long as it takes to handle your request, then for as long as needed for a possible dispute or our legal obligations.

Data stored on your phone stays there until you erase it or delete the app.

8. Your rights

Under the GDPR and French data protection law, you have the right to access your data, to have it corrected or erased, to object to its processing, and to request its restriction and portability.

To exercise these rights, write to contact@manipulateme.app, stating your identifier, shown at the bottom of Settings (tap to copy it). With no account, this is the only way we can find your data: we cannot look it up from your name or email address. We respond within one month.

An erasure request deletes the text of all your conversations. The attempt counters and the state of your purchase, which contain no message, are kept: without them, erasing your data would be enough to replay without limit.

You may also file a complaint with the CNIL, the French data protection authority (www.cnil.fr).

9. Minors

The Service is intended for people aged 15 or older, the age from which a minor may consent alone to the processing of their data under French law. Below that age, its use requires the consent of a parent or legal guardian.

10. Security

Communication between the app and our servers is encrypted (TLS). Your rounds are only accessible with your device identifier, and administrative access is protected by a secret key. Your identifier grants access to your rounds and your purchase: only share it with support.

11. Changes

This policy may change along with the Service. In the event of a material change, you will be informed within the app before it takes effect.

12. Contact

For any question about your data: contact@manipulateme.app.