Privacy policy

1. Data controller

The data controller is [to be completed], [to be completed]. For any question or request: [to be completed].

2. What we don’t do

Nexpiria shows no ads, uses no analytics or advertising tracking tools, never sells or rents your data and doesn’t use it for profiling.

3. Data processed and purposes

Depending on how you use the service, we process:

• Website browsing: IP address, browser type, pages requested and timestamps, recorded by the hosting provider in technical logs to keep the service secure and running. Legal basis: legitimate interest.
• Account: email address, password (stored only in encrypted form by the authentication service), your chosen first name or nickname and, if you use it, the identifier provided by Google or Apple. Purpose: creating and securing your account. Legal basis: performance of the contract (terms of use).
• Deadlines, notes, household profiles, preferences and attachments: stored only in your browser’s local storage. They are not sent to our servers and we have no access to them, except the deadlines you choose to share with your household and, if you turn on reminders (see below), the title and date of the deadlines concerned.
• Shared household (if you create or join one): the household name, each member’s display name, and the shared deadlines with their attachments, stored on our servers and visible to every household member, who can edit them. Purpose: keeping track of family deadlines together. Legal basis: performance of the contract.
• Google link (if you turn it on): your Google account address, verified with a code sent by email, and an encrypted access token. Your attachments are copied to the app’s private folder in your Google Drive and your deadlines to a “Nexpiria” calendar in your Google Calendar, straight from your browser: they do not go through our servers. Legal basis: your consent, which you can withdraw at any time by unlinking your account.
• Email and push reminders (if you turn them on): for each reminder, the deadline’s title and date, the send time and the chosen channel; your account email address for emails (sent from no-reply@nexpiria.com); for notifications, the technical identifier of your device provided by your browser. Notes, numbers and attachments are never sent for this. Legal basis: your consent, which you withdraw by turning reminders off.
• Country detection (first visit): your IP address is sent to the api.country.is service, which returns only the country, so that a suitable language, country and currency can be offered. The result is kept on your device and you can pick your country by hand in settings. Legal basis: legitimate interest.
• WhatsApp link (if you turn it on): your phone number, verified with a code received on WhatsApp, then, for each reminder, the deadline’s title and date, passed to WhatsApp (Meta) to be delivered to your number. Legal basis: your consent, which you withdraw by unlinking your number.
• Monitoring: when an error occurs, the technical message, the page concerned (without parameters) and the browser type are recorded, along with service availability checks. No identifier, email or content is included. Legal basis: legitimate interest (security and reliability).
• Contact requests: your email and message, to reply to you. Legal basis: legitimate interest.

4. Scanning and dictation

Document text recognition runs in your browser. To work, it downloads its engine and language data from the jsDelivr content delivery network, which receives your IP address in the process; the content of your documents is not sent.

Dictation uses your browser’s speech recognition service, which may send the recording to its provider (for example Google for Chrome). Camera and microphone access always requires your permission.

AI analysis (optional, signed-in accounts): if you accept it, the scanned image is sent to Claude, Anthropic’s AI, which extracts the document type, issuer, number and dates to fill in the form. Nexpiria does not keep this image on its servers; Anthropic does not use it to train its models and only keeps it as long as needed for the service and safety (30 days at most). Legal basis: your consent, which you can change at any time in Settings → Privacy.

5. Retention periods

• Technical logs: 12 months maximum.
• Account: until it is deleted. Deletion is immediate; encrypted traces of any Google links are erased within 14 days.
• Local data: until you delete it in the app or clear your browser data. Items in the trash are erased after 30 days.
• Shared household: for as long as the household exists. A shared deadline moved to the trash is erased after 30 days; leaving the household removes your access; deleting the household, or its owner’s account, erases all its shared deadlines.
• Reminders: erased 30 days after they are sent, or immediately if you delete the deadline, turn reminders off or delete your account. Devices subscribed to notifications and the linked WhatsApp number: until you turn them off or delete your account.
• Error log and availability checks: 30 days.
• Email exchanges: 3 years after the last contact.

6. Recipients and processors

Your data is only accessible to authorised staff of the publisher and to the following providers, bound by confidentiality commitments:

• Hostinger International Ltd.: hosting of the website and app.
• Supabase Inc.: authentication and account database.
• Google and Apple: only if you choose to sign in with these services; Google also if you link Google Drive and Google Calendar.
• jsDelivr: delivery of the files needed for scanning.
• Anthropic PBC: AI analysis of scans, only if you turn it on.
• country.is: country detection on the first visit (IP address only, no account data).
• Meta Platforms Ireland Ltd. (WhatsApp): delivery of codes and reminders to your number, only if you link WhatsApp.
• Your browser’s notification services (Google, Apple, Mozilla, Microsoft): deliver push notifications; the content is passed to them encrypted.

7. Transfers outside the European Union

Some providers (Supabase, Google, Apple, Anthropic, jsDelivr, country.is, Meta) may process data outside the European Union, notably in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

8. Security

The website is served over HTTPS only, passwords are never stored in plain text and access to account data is restricted by access rules. As no measure offers absolute security, please protect access to your device and export your data regularly.

9. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to give instructions about what happens to your data after your death. You can export or delete your data directly in the app, or email [to be completed]. We respond within one month.

You may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris CEDEX 07, France, www.cnil.fr, or with your local supervisory authority.

10. Minors

Nexpiria is intended for people aged 15 or over. Below that age, consent from a holder of parental authority is required.

11. Changes

This policy may change. The update date appears at the top of the page; for significant changes, we’ll let you know in the app.