Privacy Policy

TextCalm AI — last updated: November 11, 2026

This policy explains how Thibault Demars ("we") processes personal data in connection with the TextCalm AI application, including under the EU General Data Protection Regulation (GDPR).

Summary

Your analyses: the message or screenshots you choose to submit, and what you write in the “Step back” exercise to get an answer, are sent, after your consent, to Microsoft Azure for AI analysis, processed within the European Union and not stored by TextCalm after the response. If you link an analysis to a card, the first name or nickname, the type and length of the relationship, your note and the number of your checked fears about this person are sent with the content, in the same way. Cards stay on your device.
Your journal: history, preferences, moods and onboarding answers stay on your device. One exception, which depends on your app version: if you accept usage measurement, your onboarding choices (reason, situations, frequency, people involved, what you have already tried, goal, how you found the app, age range) are sent as option identifiers, to measure which profiles use the app and subscribe: to PostHog since the version 1.0.2 update of 28 October 2026, and from version 1.0.3 to both Appwin and PostHog. Since 29 October 2026, under the same consent, these choices are also sent to RevenueCat, our subscription provider, under a pseudonymous identifier and with the onboarding version you saw (A/B test), to measure which profiles subscribe. Since 9 November 2026, under the same consent, RevenueCat also receives the device's pseudonymous usage-measurement identifier (PostHog, and also Appwin from version 1.0.3), to link how the app was used during a trial to its outcome (kept, stopped, paid). Your starting anxiety level, moods, feelings and other answers stay on your device.
Usage measurement and session recording: optional and off by default. With your consent, Appwin may record a sample of sessions as video. Input fields, text and images are masked on the device before encoding. Usage measurement also goes through PostHog (alone in version 1.0.2, alongside Appwin from version 1.0.3), with no session recording at PostHog. PostHog is also used to split the app's A/B tests.
Feedback on an analysis: if you say whether an analysis helped you (👍/👎), with a reason picked from a list where relevant, that feedback and the number of analyses made are sent as part of usage measurement, under the same pseudonymous identifier and the same consent. Neither the message content nor your anxiety level is sent. You can add an optional free comment (300 characters at most), sent the same way; the app asks you not to include your messages or any personal details.
Subscriptions: handled by Apple or Google and RevenueCat, using pseudonymous identifiers.
Your rights: delete your local data in the app at any time, or write to support@textcalm.app. We answer free of charge within one month.

1. Data controller

Thibault Demars, French sole trader (SIRET 840 556 914 00025) — 59 rue de Ponthieu, Bureau 326, 75008 Paris, France.
Privacy contact: support@textcalm.app

2. Data, purposes and legal bases

Data	Purpose	Legal basis
Messages and screenshots submitted for analysis, which may contain data about the user or other people	Transcribe screenshots and generate the requested AI analysis	Performance of the requested service; explicit consent where submitted content reveals sensitive data
Local preferences, such as display name, intention and empathy setting	Personalise the application and its analyses	Performance of the service
Journal and reflection history stored on the device	Display the user's history and trends	Performance of the service
Pseudonymous usage data and sampled video recording of the interface, with input fields, text and images masked on the device before encoding	Measure usage, understand interface difficulties and improve the product. Entered content, messages, screenshots, personal answers, moods and reflections are masked.	Optional, explicit consent, withdrawable at any time
Subscription status and purchase identifier	Provide and restore Premium access	Performance of the subscription contract
Installation-integrity identifier, public key and signature counter	Prevent abuse and verify that requests originate from the official application	Legitimate interest in securing the service

3. What we do not do

TextCalm does not create a database of submitted messages. Content is processed to answer the request and is not intentionally written to application logs.
Readable message content, entered text and screenshots are not sent to Appwin, PostHog or RevenueCat: these areas are masked on the device before any replay is encoded.
We do not sell personal data.

4. Service providers

Providers are grouped by purpose. Each one processes only the data listed for it.

AI analysis

Microsoft Azure (Azure AI Foundry)
Role	Transcribes submitted screenshots and generates the requested analysis; applies Microsoft's safety and abuse-prevention controls. The models run on Microsoft infrastructure: submitted content is not shared with the model publishers and is not used to train models.
Data	Submitted message text and screenshots, and the context given before the analysis (quick choices, including how you feel, and written details)
Location	European Union (Azure EU Data Zone; resource located in Sweden Central)
Privacy	Data, privacy and security · Microsoft Privacy Statement

Usage measurement (only with consent)

Appwin (from version 1.0.3)
Role	Pseudonymous usage analytics and sampled session recording
Data	Viewed screens, technical actions, app, device and OS version, language, time zone, pseudonymous identifier and interface frames. Input fields, text and images are masked on the device before encoding. No IP-based location, no user profile.
Location	European Union
Privacy	Appwin website

PostHog
Role	Pseudonymous usage analytics and A/B test assignment
Data	Viewed screens, actions and time spent per feature, A/B test variant, onboarding choices if usage measurement is accepted (option identifiers), non-fatal error reports, app, device and OS version, language, time zone, pseudonymous identifier. No IP-based location, no user profile.
Location	European Union
Privacy	PostHog Privacy Policy

Subscriptions and payments

RevenueCat
Role	Subscription and entitlement management
Data	Pseudonymous app user identifier, purchase and subscription status, store receipts; if you accept usage measurement, your onboarding choices (option identifiers) and the onboarding version seen (A/B test)
Location	United States
Privacy	RevenueCat Privacy Policy

Apple / Google
Role	Store payment and purchase processing, as independent controllers
Data	Store account and payment data, handled by the store; we do not receive your payment details
Location	According to the user's store region and the provider's terms
Privacy	Apple Privacy Policy · Google Privacy Policy

Infrastructure and security

Expo / EAS
Role	Hosting and operation of the application's API; submitted content passes through it in transit to Microsoft Azure and is not stored
Data	Requests to the analysis service, technical request metadata
Location	According to the configured service region and contract
Privacy	Expo Privacy Policy

Upstash
Role	Storage required for application attestation
Data	Installation-integrity identifier, public key and signature counter
Location	According to the configured region
Privacy	Upstash Privacy Policy

Where a provider processes personal data outside the European Economic Area, the transfer relies, depending on the provider and destination, on an adequacy decision or the European Commission's Standard Contractual Clauses. You may request information about the applicable safeguards using the privacy contact above.

5. Retention

Submitted content: not stored by TextCalm after the response. Microsoft may process or retain content flagged by its abuse-prevention systems depending on the Azure configuration and applicable terms.
Journal and preferences: stored locally while the application is used and removed when local data is erased or the application is uninstalled.
Appwin pseudonymous usage data and replays: the retention period configured for the Appwin project, up to 12 months.
PostHog pseudonymous usage data: the retention period configured for the PostHog project, up to 12 months.
RevenueCat subscription data: for the subscription relationship and applicable statutory limitation periods.
Attestation data: for as long as required to protect the service or until the relevant installation record is deleted.

6. Your rights

Subject to applicable law, you may have rights of access, correction, deletion, restriction, objection and data portability, as well as the right to withdraw consent without affecting prior lawful processing.

Most journal, preference and onboarding data remains on the device (only your onboarding choices are sent, as option identifiers: to PostHog if you accept usage measurement, and also to Appwin from version 1.0.3, and in both cases to RevenueCat with the onboarding version seen). It can be erased through Help & Safety → Delete my data or by uninstalling the application.

Appwin, PostHog and RevenueCat data is associated with pseudonymous technical identifiers. The in-app deletion control erases local data and resets the usage-measurement identifier on the device (PostHog, and also Appwin from version 1.0.3). To request deletion of data already received by a provider, contact support@textcalm.app and include the relevant identifier or store receipt if available.

Requests are free of charge. We answer as soon as possible and within one month of receipt; this period may be extended by two further months for complex requests, in which case we will tell you within the first month. We may ask for information needed to identify the data concerned.

You may also lodge a complaint with the French data-protection authority, the CNIL, or with the competent supervisory authority in your country.

7. Security

Communications with the analysis service are encrypted in transit using TLS. Access to systems is restricted to authorised persons and providers requiring access for their role.

8. Children

TextCalm AI is not intended for children under 16. If you are a parent or guardian and believe a child has submitted personal data without the required authorisation, contact us to request deletion.

9. Changes

We may update this policy. The date above identifies the latest revision, and material changes will be communicated in the application where required.

Version française