Legal information
Privacy policy
Last updated : July 20, 2026
Protecting your privacy is at the heart of Ozer. This policy describes, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, the data processing carried out as part of the Service.
1. Data controller
REALITIM, 34 rue Joncours, 44100 Nantes, France. For any question about your data: dpo@realitim.com.
2. Data collected
| Category | Examples |
|---|---|
| Identity & account | First name, email, sign-in identifier (Apple, Google). |
| Age | Date of birth (18+ verification). Only an anonymized age bracket is used by Luna. |
| Profile data & preferences | Gender identity, relationship status, goals, play preferences, avatar. |
| Intimate life data (sensitive) | Challenge content, exchanges with Luna, quiz answers, intimacy profile. |
| Usage & technical data | Usage statistics, stability logs (crash), technical identifiers. |
| Advertising identifiers (with consent) | On iOS, the advertising identifier (IDFA) only after permission via App Tracking Transparency; on Android, the advertising ID where applicable. Used to measure the effectiveness of our acquisition campaigns (install and purchase attribution), not to build an advertising profile from your intimate exchanges. |
| Purchase data | Subscription status (via Apple / Google / RevenueCat). |
Some data relates to sexual life or orientation and constitutes sensitive data within the meaning of article 9 of the GDPR. It is only processed on the basis of your explicit consent, collected at sign-up, and can be withdrawn at any time.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Provision of the Service and account | Performance of the contract |
| Personalization (challenges, Luna, intimacy profile) | Explicit consent (sensitive data) |
| Age verification (18+) | Legal obligation / legitimate interest |
| Security, abuse prevention and moderation | Legitimate interest |
| Improvement and statistics | Legitimate interest / consent (cookies) |
| Advertising measurement and attribution (IDFA / advertising ID) | Consent (App Tracking Transparency / device settings) |
| Subscription management | Performance of the contract |
4. Recipients and processors
Your data is never sold. It is shared only with technical processors acting on our instructions:
- Google Firebase / Google Cloud (authentication, database, hosting, analytics, Cloud Vision for image moderation, and Vertex AI for opt-in semantic memory when enabled);
- Anthropic (generating Luna’s replies via the commercial API — under Anthropic’s commercial API terms, your exchanges are not used to train their models; they may still be processed temporarily for security, abuse prevention and legal compliance);
- RevenueCat / Apple / Google (subscription management and, with your consent, advertising attribution);
- Sentry (stability logs);
- your partner, for the sole data you choose to share in couple mode.
On iOS, if you decline tracking via App Tracking Transparency, no IDFA is collected; attribution may then rely only on aggregated mechanisms (e.g. SKAdNetwork). You can change this choice in iOS Settings → Privacy → Tracking.
4a. Artificial intelligence processing
To generate Luna’s replies, your messages (and related images, if any) are sent to Anthropic via its commercial API. Calls run server-side; no API key is stored on your device. Automatic image moderation may involve Google Cloud Vision. If semantic memory is enabled, text excerpts may be turned into embeddings via Vertex AI (Google Cloud), without being used to train third-party models.
5. Transfers outside the European Union
Some processors are located in the United States. These transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission and/or the Data Privacy Framework).
6. Retention periods
- Account data: for the duration of use, then deleted when the account is closed;
- Exchanges and content: deleted when the account is deleted;
- Billing data: kept in accordance with legal accounting obligations;
- Technical logs: limited duration for security purposes.
7. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time. See our Your rights (GDPR) page. You can exercise these rights at dpo@realitim.com or delete your account directly from the app.
You can lodge a complaint with the CNIL (www.cnil.fr) or with your local supervisory authority.
8. Security
We implement appropriate technical and organizational measures (encryption, strict access control, minimization) to protect your data. AI processing runs server-side; no sensitive key is stored on your device.
9. Cookies
The site uses trackers described in our cookie policy.
10. Contact
For any question about your data, to exercise your rights or report an incident: dpo@realitim.com.