Privacy policy

Data controller

Olivier Schmitt, sole trader (Manala Production), 6 place Clémenceau, 68250 Rouffach, France, SIREN 519 897 680. Privacy contact: contact@klique.app. No Data Protection Officer has been appointed, as none is legally required; the contact above handles all privacy requests.

This policy covers the Klique mobile app (iOS and Android, com.toutifr.couple360) and the klique.app website.

Data we process, feature by feature

Anonymous account and preferences

On first launch the app creates an anonymous technical ID (Supabase anonymous account). No name, email, phone number or password. Linked to it: app language, your confirmation that you are 18 or older (and its date), whether intimate content is enabled and the date of your explicit consent, your public encryption key (the secret key never leaves your phone), and the store country or device region, used to comply with local laws. The age signal from your phone's parental controls (Declared Age Range on iOS, Play Age Signals on Android) is read on the device to block adult content and is not stored on our servers.

My couple (360 questions)

• Your answers are end-to-end encrypted on your phone before being sent, with a shared key only you and your partner hold (X25519 and XSalsa20-Poly1305). The server only stores unreadable ciphertext. Until you link with a partner, your answers stay on your phone only.
• The couple link: couple code, technical IDs of both members, dates.
• IDs of answered questions, readable by the server, so an answer is only shown to your partner once they have answered the same question.

Secret PIN

The 4-digit PIN protecting your answers and games never leaves your phone. Only a salted SHA-256 hash is stored in the device's secure keychain. We cannot read or recover it. If you forget it, the app data must be erased to create a new one.

Remote and group games (Compatibility test, Do you really know me?, Group mode, Purity test)

The first name or nickname you enter (24 characters max), the chosen relationship, language and question pack, your test answers, your gender in group mode if you choose to provide it (used to rank pairs), the game code, participants' technical IDs and dates. These are visible only to the participants of that game, become inaccessible 30 days after the game is created and are then deleted automatically. Games played on a single phone (Getting to know you, Friend zone, Most likely to, Never have I ever, Would you rather) send no answers to our servers.

Community (optional)

Klique (two-phone comparison): your game answers (answer index per question, never your couple answers) and chosen first name are sent to our servers for the comparison; each person only receives which questions matched or differed, never the other's answers; the host's profile is deleted as soon as the comparison is done and the session after 15 minutes; the result is stored only on your phone.

Only if you opt in: your anonymous game profile (your answers to the Classic pack questions of the compatibility test, the questions you mark as "what I look for", your country as a two-letter code, language, update date), the affinity percentages computed between profiles, if you provide them, your gender (woman, man, non-binary) and what you're looking for (friendship, more if it clicks, both); if you provide it and give explicit consent, the genders you want to meet, which may reveal your sexual orientation (special category data, GDPR art. 9): used only for mutual match filtering, never shown to anyone, stored with your consent date and deleted if you withdraw consent or leave the community; anonymous challenges (18+ only: sender and recipient technical IDs, test code, percentage, country, dates), the usernames or handles you choose to propose after a challenge (an Instagram, Snapchat or TikTok username only, shown to the other person only if you both proposed one), blocks and reports (challenge, members involved, reason, handle if any, date), and the number of challenges sent per day (3 max). Other members never see your answers or identity, only a percentage and a country. Leaving the community immediately deletes your profile, challenges and handles.

Purchases and access codes

Purchase status (product, date, active or not) and the anonymous technical ID shared with RevenueCat, the store country, and, if you redeem an access code, the code, unlocked content and validity period. Payment is handled exclusively by Apple or Google: we never receive your payment details, name or the email of your Apple or Google account.

Technical data

Server logs (IP address, date, request, error code) kept by our host for security and diagnostics. When checking for app updates, the app contacts Expo's servers, which receive your IP address and technical information (platform, app version). The klique.app website is hosted by Vercel, which records technical logs (IP address, browser, requested page). The website sets no non-essential cookies.

Support emails

If you email us, we process your email address and message to reply.

What we never do

No ads or advertising ID (Android advertising ID access is blocked), no analytics or tracking tools, no marketing profiling, no selling or renting of data, no geolocation, no access to your contacts, photos, camera or microphone.

Sensitive data

Answers in the Intimacy & desire theme and its extensions, and in the Purity test and Spicy pack, may reveal information about your sex life (GDPR article 9). They are processed only with your explicit consent: for couples, given when enabling intimate content (off by default, adults only), these answers are end-to-end encrypted and only compared if you both enabled intimate content; for 18+ games, given by voluntarily starting or joining the game, visible only to participants and deleted after 30 days. You can withdraw consent at any time by disabling intimate content in Settings or deleting your account.

Purposes and legal bases

No decision producing legal or similarly significant effects is made solely by automated processing. Compatibility percentages are a game.

Who can see your data

Your linked partner (only answers to questions you both answered, decrypted on their phone); participants of a game (names and answers of that game); community members (a percentage and a country, your handle only with mutual consent); our processors, strictly for their task; and authorities where required by law. The publisher cannot read your encrypted couple answers.

Processors

Transfers outside the EU

App data is hosted in the EU. Transfers to US providers rely on the European Commission's standard contractual clauses and, where the provider is certified, the EU-US Data Privacy Framework (adequacy decision of July 10, 2023). A copy of these safeguards is available on request.

Retention

Security

End-to-end encryption of couple answers with the secret key kept in the phone's secure keychain, HTTPS (TLS) for all traffic, Row Level Security on the database so each user only accesses their own data and what is shared with them, opaque references in the community so no member can obtain another member's ID, and a local PIN. In case of a data breach posing a risk to your rights, we will notify the CNIL and, where required, affected users.

Age requirement

Klique is for adults (18+) only: it is rated 18+ on the App Store and Google Play and age is declared on first launch. Intimate content, the Purity test, the Spicy pack, Never have I ever and community challenges are never offered to minors, nor when the phone's parental controls indicate a minor or supervised user. If you believe a minor is using the app, report it in the app ("Seems underage") or email us and the data will be deleted.

Your rights

Under the GDPR and the French Data Protection Act you have the right of access, rectification, erasure, data portability, objection to processing based on legitimate interest, restriction, withdrawal of consent at any time, and, under French law (article 85 of Law 78-17), the right to set instructions regarding your data after your death.

How to exercise your rights

• In the app (fastest): Settings, Delete my account and answers (immediate and permanent); Community, turn off participation (deletes your profile and challenges); Settings, Leave couple; Settings, turn off Intimate content (withdraws consent).
• By email: contact@klique.app. Since we know neither your name nor your email, we may ask for details to locate your data (such as a couple code or game code). We reply within one month, extendable by two months for complex requests.

See also Delete my account. As couple answers are end-to-end encrypted, we cannot decrypt them for you; they remain viewable in the app on your and your partner's phones.

Complaints

You may lodge a complaint with the French data protection authority, CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the supervisory authority of your EU country of residence. We encourage you to contact us first.

Changes

This policy may change, for instance when features are added. The update date is shown at the top. Significant changes will be announced in the app.