Privacy policy

Data controller

Benjamin Lafitte, sole trader registered with the Mende Trade and Companies Register under number 988 673 547, trading under the business name Feellow, 1 Impasse du Général Leclerc, 48000 Mende, France. Contact: contact@feellow.app. The site's processing does not require a data protection officer; an external officer will be appointed as soon as the scale of the application's processing requires it, and at the latest when the company taking over Feellow is created.

Data collected on the site

The feellow.app website collects only the following data:

• Anonymized audience statistics via Plausible Analytics (cookie-free, hosted in the EU).
• Beta sign-up form data (first name, last name, email, age range, device type). Stored with Supabase in the Paris region.
• Practitioner form data (name, first name, professional email, practice type, specialty, message, ADELI optional). Stored with Supabase in the Paris region.

No user data from the Feellow application is processed by the website.

Purposes

• Anonymous statistics to improve the site.
• Selecting beta testers and informing registrants about the beta's progress and public release, with the option to unsubscribe at any time by replying or via the link in each email.
• Responding to contact requests from health professionals and informing them about the opening of the practitioner programme.

Legal bases

Beta form: your consent, given by ticking the box at sign-up, withdrawable at any time. Practitioner form: our legitimate interest in answering a professional contact request. Plausible statistics: legitimate interest, consent-exempt audience measurement. All fields in the beta form are necessary to process the sign-up. In the practitioner form, only the ADELI number is optional; without the other fields, the request cannot be handled.

Recipients and processors

Data is accessible to the data controller only. Processors: Supabase (database, Paris region, European Union); Vercel Inc. (site hosting, United States, transfers covered by the European Commission's standard contractual clauses and the Data Privacy Framework); Plausible Analytics (statistics, European Union). No data is sold or passed on to third parties.

Retention period

Beta form data: at most 24 months after sign-up, or 12 months after the application's public release if that comes first, or as soon as you ask for deletion. Practitioner form data: 36 months from the last interaction. Plausible statistics: retention in line with Plausible settings (limited to 1 year).

Feellow application

Data entered in the mobile application (mood, writings, questionnaire answers) is governed by the application's own privacy policy, available in the app before any entry. For transparency: this data, which relates to health within the meaning of GDPR article 9, is processed on the basis of your explicit consent, encrypted, and hosted in France with Clever Cloud. In its consumer version, Feellow is a self-observation tool used outside any care pathway, and no data is collected in the course of prevention, diagnosis or care activities: the current hosting is not HDS-certified (French Health Data Hosting). As soon as the application is used with health professionals, that certification becomes mandatory; it will be obtained before any such opening.

Your rights

Access, rectification, erasure, objection, portability. Exercise them by writing to contact@feellow.app. You may file a complaint with the CNIL.

Cookies

The site sets a single technical cookie that remembers your chosen language. It is strictly necessary and exempt from consent. Plausible audience measurement works without cookies or identifiers, in line with CNIL guidelines. No advertising trackers, no third-party cookies.

Transfer to a company

If the Feellow business is taken over by a dedicated company, it will become the data controller on the same terms and for the same purposes. Every person whose address we hold (beta registrants, practitioners who contacted us) will be informed individually by email at least 30 days before the transfer, with the identity and contact details of the new controller and the option to request deletion of their data beforehand. This page will be updated accordingly.