Privacy policy

1. Who we are

Mots complices is published by Diwbiau Labs, Kinshasa, Democratic Republic of the Congo (“we”, “us”). We decide how and why the personal data described here is used: in data protection terms, we are its controller.

This policy covers the Mots complices app for iPhone and Android and the website motscomplices.com. For any question or request about your data, write to contact@motscomplices.com.

2. What we collect, and why

Using the app without an account

On first launch, the app creates an anonymous account: a random identifier, with no name, email address or phone number. Your learning data stays on your phone and is backed up to our servers under that identifier:

• your progress and review history, and your daily statistics;
• your favourites, your study queue and the collocations you chose to learn;
• the uses you log with « Je l’ai utilisée ! », including the optional context and note you add;
• your settings, such as your level, daily goal and reminder times.

We also keep a random device identifier created by the app, the device type (« iPhone », « iPad » or « Android », never the model or serial number), the app version and the time of the last sync. They keep your devices in step and help us when you contact support.

Linking an account

You can link your progress to Apple, Google or an email address (we send a one-time code; there is no password). We then receive your email address (with Apple, it may be a private relay address) and, when the provider gives it, your name. We use your first name to greet you in the app. With Premium, your data syncs across your devices; on the free plan, it can be restored once on a new phone.

Purchases

Purchases are made through the App Store or Google Play and managed with RevenueCat. We never see your card details. We receive what you bought, when, its status (active, renewed, refunded, expired), your store’s country and any offer code you used, linked to your account so that your plan works on all your devices. If we grant Premium to fix a problem, we record the reason.

The Atelier: AI checks

When you use « Écris-la », « Dis-la » or « Améliore mon texte », what you wrote (up to 1,500 characters) or your recording (up to 30 seconds) is sent through our server to an AI provider, which returns feedback. Recordings are first turned into text by OpenAI, then deleted.

We do not store your text, your recording, its transcript or the feedback. They stay on screen until you close it. We keep only:

• the number of checks you used this month, to apply your plan’s allowance;
• a technical log of each check (date, tool, AI model, duration, success, the collocation practised, the verdict, your plan and the length of the recording), with no text and no account identifier;
• when the AI suggests a phrase that isn’t in our catalogue: that phrase, the weaker phrase it replaces and its level, never your text or your account, so we can add the most requested ones.

Please only send your own words. Don’t paste other people’s messages or sensitive information about yourself or anyone else.

Anonymous usage statistics

To improve the catalogue and the app, the app sends us anonymous statistics: the screens visited and features used during a visit, your answers in sessions (which collocation, right or wrong, and how long it took, in broad ranges), sessions finished, errors shown, paywalls opened and how they closed, purchases (the product only), the number of days since install, the app version, platform, plan, level and your store’s country.

When a search finds nothing, the searched word is sent too, but only if it is 2 to 40 letters and at most three words, so numbers, email addresses and sentences never leave your phone.

These statistics carry no account ID, device ID, advertising ID, email address or IP address, and can’t be traced back to you. They may be sent in the background when your connection comes back. Because they can’t identify you, there is no switch to turn them off. Raw events are deleted after 90 days.

Error reports

« Signaler une erreur » sends the category you pick, your optional sentence, the collocation and the app version. It is never linked to your account, so please don’t include personal details.

Reminders

Reminders are scheduled on your phone. We don’t send push notifications and receive no notification token.

Contacting us

When you email us, we use your address and message to answer you.

The website and the early-access list

The website sets no cookies and uses no tracking or advertising tools. To count visits, we use Vercel Web Analytics: it records the page visited, the referring site, and your country, browser and type of device. It tells visits apart with a fingerprint that is reset every day, stores no IP address, and can’t follow you across sites or identify you. Its fonts are served from our own site. Your browser remembers whether you picked English or French; that choice stays in your browser and never reaches us.

If you join the early-access list, we keep your email address, the language of the page and the date. We use them to send you a welcome email, to tell you when the app launches, to send your founding-member offer with your personal code, and now and then to share news about the app, such as a chance to try it early. We write rarely. Each address also gets a random unsubscribe code, so our unsubscribe links never contain your email address. To prevent abuse, we keep a one-way fingerprint (hash) of your IP address for about a day, never the address itself. Every email has an unsubscribe link, or you can write to us.

Like any website, our host keeps standard technical logs (such as IP address and pages requested) for a short time, for security.

3. Legal bases

If you are in the European Union, the United Kingdom or a country with similar rules, we rely on these legal bases:

4. Who processes your data

We use a few service providers, bound by contract to use your data only to provide their service to us:

Under their business terms, the AI providers don’t use the data we send them to train their models; they may keep it for a short time to detect abuse. Apple and Google handle sign-in with Apple or Google, payments and app distribution under their own privacy policies.

We don’t sell your personal data or share it for advertising. Our team sees account data only to answer a support request.

5. Transfers outside Europe

Our database is in the European Union. Some providers are in the United States. Those transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework when the provider is certified, or on the Commission’s standard contractual clauses.

We are based in the Democratic Republic of the Congo. Wherever your data is handled, we apply this policy and the protections of the European General Data Protection Regulation (GDPR).

6. How long we keep it

• Account and learning data: until you delete your account in the app. It is then erased from our database at once, and from our backups within 30 days. If you uninstall the app without deleting your account, an anonymous backup stays on our servers but can no longer be linked to you; to erase it, delete your account before uninstalling.
• Atelier texts and recordings: never stored. The technical log and catalogue requests contain nothing that identifies you.
• Anonymous statistics: raw events for 90 days, then only totals.
• Purchase records: as long as accounting and tax law require.
• Early-access list: until you unsubscribe, and no longer than the founding-member offer runs.
• IP fingerprint from the sign-up form: about a day.
• Support emails: as long as needed to answer you and follow up.

7. Your rights

You can ask to access, correct or delete your data, to receive it in a portable format, to object to or limit how we use it, and to withdraw your consent at any time. Deleting your account from the app (Profil, then « Compte et synchronisation ») erases everything linked to it.

For any other request, write to contact@motscomplices.com. We answer within one month. If you think we haven’t handled your data properly, you can complain to your data protection authority; in France, it is the CNIL (cnil.fr).

8. Security

Data travels encrypted (HTTPS). Access rules on our database let each account read only its own data. Keys to outside services stay on our servers, never in the app, and our team signs in with two-step verification. No system is perfectly secure, but we take care to protect your data and tell you without delay if a breach puts it at risk.

9. Children

Mots complices is not meant for children under 13. If you are under the age at which you can consent to online services where you live, ask a parent or guardian before using the app. If you think a child has given us personal data, write to us and we will delete it.

10. Changes to this policy

When this policy changes, we update this page and the date at the top. If a change matters, we will also tell you in the app, or by email if you are on the early-access list.

11. Contact

Diwbiau Labs, Kinshasa, Democratic Republic of the Congo. Email: contact@motscomplices.com.