Privacy Policy — Stoa

Version française

Last updated: October 19, 2026

This privacy policy describes how the Stoa app ("we", "our app") collects, uses and protects your personal data. It applies to all users of the app, in accordance with the General Data Protection Regulation (GDPR).

1. Who we are

Stoa is a mobile app published by Arthur Désirant, an individual based in Belgium.

For any question about this policy or your personal data, you can contact us at: stoa.arthur@gmail.com

2. Data we collect

2.1 Account data

• Email address
• Password (encrypted, never stored in plain text — handled by our authentication provider Supabase)
• Unique identifier (handle) that you choose, visible to other users, which can be changed with a minimum delay between two changes

2.1 bis Sign in with Google or Apple

If you choose to sign in with Google ("Sign in with Google") or with Apple, we only receive:

• your email address;
• your name (and, for Google, your public profile picture);
• a technical account identifier provided by Google or Apple.

This data ("email" and "profile" scopes) is used exclusively to create your Stoa account, authenticate you and display your first name in the app. We do not access any other data from your Google account (contacts, Gmail, Drive, calendar, etc.).

Data received from Google is not sold, not used for advertising, and not transferred to third parties, except our authentication provider Supabase for the sole purpose of managing your account. The use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Stoa's access at any time from your Google account settings and delete your Stoa account (see section 7).

2.2 Profile data

• First name
• Age (optional)
• Job or situation (optional)
• Information you choose to share to personalize your experience: your main weakness, a recent failure, what you need
• App language (French or English), saved in your profile so the app, the mentor's content and notifications are shown in that language

This information is only used to personalize the analyses and the content of the virtual mentor. It is never shared with other users.

2.3 Progress data

• Experience points (XP), level, streaks of consecutive days
• History of the quotes viewed and the related analyses (for Premium users, in the "Review" section)
• Daily usage statistics

2.4 Social data (Circle feature)

• List of your contacts/friends in the app
• Handle and first name visible to your friends
• Premium subscription status visible to your friends (as a badge)
• History of friend requests and encouragements sent and received

2.5 Subscription data

• Subscription status (free or Premium)
• Transaction information handled by Apple (App Store) or Google (Google Play) and our subscription management provider RevenueCat — we never receive your card details directly

2.6 Generated content

• Text of the personalized analyses generated by artificial intelligence from your profile
• Audio files generated temporarily for the mentor's voice playback (not stored permanently)

2.7 Notifications

If you allow them, we store your phone's notification identifier (push token). It is used to send you a daily reminder and Circle notifications (friend request, request accepted, encouragement), in the language of your profile. You can turn them off at any time in your phone's settings.

3. How we use your data

We use your data to:

• Create and manage your account
• Personalize the daily quotes and analyses
• Generate the voice of the mentor
• Display your progress and statistics
• Enable the social features (Circle of friends)
• Manage your Premium subscription
• Send you emails related to your account (sign-up confirmation, password reset)
• Send you the notifications you allowed
• Display the app in the language you chose
• Improve the app and fix technical issues

We never sell your personal data to third parties.

4. Sharing with service providers

To run the app, some data passes through technical providers, each bound by its own confidentiality obligations:

These providers only use your data to provide their technical service to Stoa, not for their own commercial purposes.

5. Data retention

• Account and profile data: kept as long as your account is active
• Quote and analysis history: kept as long as your account is active; the "Review" section shows the last 8 days
• Data after account deletion: deleted immediately and completely (see section 7)

6. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: ask for your account and data to be deleted
• Right to data portability: receive your data in a structured format
• Right to object: object to certain processing

To exercise these rights, contact us at stoa.arthur@gmail.com. You can also delete your account directly and immediately from the app (see section 7).

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA): https://www.autoriteprotectiondonnees.be

7. Deleting your account

You can permanently delete your account at any time, directly from the app (Profile → Delete my account). This action:

• Immediately and completely deletes your login account — you will no longer be able to sign in with this email
• Deletes all associated data: profile (including language), progress, quote and analysis history, subscription status, friendships, friend requests and encouragements sent and received, pending notifications and notification tokens
• Is irreversible — no restoration is possible after confirmation

Your Premium subscription is not cancelled automatically: cancel it in your App Store or Google Play settings to stop being charged.

8. Security

We implement reasonable technical measures to protect your data (password encryption, secure HTTPS connections, strict database access control, identity verification through an authentication token for any sensitive action). However, no method of transmission or storage is 100% secure.

9. Minimum age

In accordance with Belgian law (which sets the age of digital consent at 13, as allowed by the GDPR), Stoa is not intended for children under 13. We do not knowingly collect data from children under 13 without the consent of a parent or legal guardian. If you believe a child under 13 has provided us with personal data without this consent, contact us for immediate deletion.

10. Changes to this policy

We may update this privacy policy from time to time. Any significant change will be notified to you through the app.

11. Contact

For any question about this privacy policy or your personal data:

Email: stoa.arthur@gmail.com