Privacy Policy

Effective date: 24 September 2026 · Version 1.0

Stet is a private journal. What you write belongs to you. We collect as little as we can, we never sell your data, we never use your journal for advertising, and nobody trains an AI model on it.

1. Who is responsible for your data

Stet is published by Mehdi NECIB, an individual developer (the “controller” under the EU and UK General Data Protection Regulation, “we” or “us”).

• Postal address: 8 Rue Serge Levasseur, France
• Privacy requests: support@stetnote.app
• General support: support@stetnote.app

We have not appointed a data protection officer, as the law does not require one for our activity. The person above handles all privacy questions directly.

This policy covers the Stet apps for iPhone and Android and this website.

2. Your journal is sensitive data

A journal can reveal your health, beliefs, relationships, sex life or political opinions. We treat everything you write as special category data (Article 9 GDPR) and as sensitive personal information under other laws, whether or not it actually contains such details. This means:

• we only store your pages on our servers after you create an account and give your explicit consent;
• your pages are used for one purpose only: to show them back to you (and, if you choose, to write your weekly recaps);
• your pages never appear in usage statistics, crash reports, logs, notifications, file names or web addresses;
• nobody reads your pages. The only exception is if you explicitly ask us to look at a specific page to solve a problem, and that access is recorded;
• your pages are not used to train artificial intelligence models, by us or by anyone else.

Honest limit: Stet does not use end-to-end encryption. Your pages are encrypted in transit and at rest on our servers, but they are technically readable by our infrastructure so that sync and recaps can work. Access is restricted as described in Security.

3. What we collect and why

3.1 If you use Stet without an account

Your pages, settings and reminder times are stored only in a database on your device. The database is excluded from iCloud and Google device backups. We receive nothing about what you write.

When the app is first opened, it may register a random installation identifier with our server, together with the platform (iOS or Android) and the server time. This identifier contains no name, email, device identifier or content, and we do not store your IP address with it. It is used to keep the app's clock reliable (so that a page closes at the right midnight) and to prevent abuse. Unused identifiers are deleted after 12 months.

3.2 If you create an account

3.3 Reminders

Daily reminders are scheduled locally on your phone. Their texts are generic: they never contain your name, a date or anything you wrote.

3.4 This website

This website uses no cookies, no analytics and no third-party fonts or scripts. It is hosted by GitHub Pages (GitHub, Inc., USA), which processes visitors' IP addresses in its server logs for security purposes, under GitHub's privacy statement.

3.5 What we never do

• No advertising, no advertising identifier (IDFA or Android advertising ID), no cross-app tracking.
• No sale or rental of personal data, and no “sharing” for targeted advertising.
• No session recording, no screenshots, no capture of what you type in analytics or crash tools.
• No location, contacts, photos, microphone or camera access.
• No automated decision with legal or similarly significant effects on you.

4. Legal bases (EU and UK)

Where we rely on consent, you can withdraw it at any time in the app's settings, without affecting what was done before. Where we rely on legitimate interest, you can object (see Your rights).

Withdrawing the consent to store your journal on our servers means we can no longer back it up: in practice, you do this by deleting your account. Your pages then stay only on your device if you keep the app installed.

5. Weekly recaps (automated summaries)

Weekly recaps are optional. They are only created if you turn them on and accept a dedicated consent screen that names the provider we use.

• Once a week, the text of the pages you wrote that week is sent to an artificial intelligence provider, which returns a structured summary. Your name, email and account identifiers are not sent.
• With Premium, a monthly and a yearly recap are also written: the provider receives the weekly (or monthly) recaps of the period and short passages from the start of each page, never more than needed.
• The provider is Mistral AI (France). Our settings and contract with Mistral AI forbid using your text to train models. Mistral AI keeps it at most 30 days, only to detect abuse, then deletes it (or immediately, once zero data retention is in place for our account).
• The recap is stored in your account so you can read it. It is written automatically and can make mistakes; it is not medical, psychological or professional advice.
• If you turn recaps off, no more pages are sent. You can delete your account to remove past recaps.

The provider currently used is listed in section 7. If we change provider, we will update this list and, if the new provider is outside the European Economic Area, ask for your consent again.

6. Usage statistics and crash reports

Usage statistics (PostHog, EU)

If you accept, the app sends anonymous usage events such as “a page was written today” or “the settings screen was opened”, with values grouped in ranges (for example “50–100 words”). Events never contain the text of your pages, your email or your name. They are linked to a random identifier created by the app, not to your email. IP addresses are not stored and location is limited to the country. Session recording, automatic capture of screen content and heatmaps are disabled.

If you refuse, no event is sent. The app can still test small variations of its interface (for example the order of onboarding screens): this choice is made on your device from a random number and is not sent to us.

You can change your choice at any time in Settings › Privacy.

Crash reports (Sentry, EU)

When the app crashes, it sends a technical report: error type and stack trace, app version, operating system, device model, memory and time. Reports are filtered before they leave your device to remove any text you entered. They contain no user identifier, no email, no screenshot and no view hierarchy, and IP addresses are not stored.

7. Who processes your data for us

We use the following service providers (“processors”). They act only on our instructions, under a data processing agreement, and may not use your data for their own purposes.

Independent controllers. Apple (Apple Distribution International Ltd) and Google (Google Ireland Ltd) process data under their own privacy policies when you download the app, sign in with Apple or Google, or pay through the App Store or Google Play. Payments are handled entirely by them.

We may disclose data if required by law or a court order, to protect our rights or the safety of users, and only to the extent strictly required. If Stet is transferred to another publisher, you will be informed in advance and this policy will continue to protect your data.

8. International transfers

Your journal is stored in the European Union. Some providers are companies based in the United States, and some data (for example subscription data with RevenueCat, or push tokens with Google) may be processed there. These transfers are protected by the European Commission's Standard Contractual Clauses and, where the provider is certified, by the EU–US Data Privacy Framework (and its UK and Swiss extensions), with additional measures such as encryption and data minimisation. You can ask us for a copy of these safeguards.

9. How long we keep your data

Deleting your account removes your pages, recaps, profile, devices and subscription link from our database immediately, in a single operation. We also ask PostHog to delete your usage data, revoke your Sign in with Apple authorisation and ask RevenueCat to delete your subscriber data. Copies in server backups disappear when those backups expire, and we never restore a deleted account from a backup. Deleting your account does not cancel a store subscription: cancel it in your App Store or Google Play settings.

10. Security

• Encryption in transit (TLS) and at rest on our servers.
• Row-level security: each account can only read its own data; the app cannot modify a closed page directly.
• Administrator access limited to the publisher, with two-factor authentication, and no tool that displays journal content.
• Logs, analytics and crash tools are designed so that they cannot receive your text.
• On your device, the journal is excluded from system backups; on iPhone, it is protected by the operating system's data protection.

No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will notify the competent authority within 72 hours and inform you without undue delay when the law requires it.

11. Your rights

Depending on where you live, you have the right to:

• access your data and receive a copy;
• portability: receive your pages in a structured, commonly used format (JSON and plain text);
• rectification of inaccurate account data. Journal pages are the record of what you wrote on a given day, so they are not rewritten after midnight; if you ask for correction or erasure of a page, we handle it with you case by case;
• erasure: delete your account in Settings › Delete my account, on our web page, or by email;
• restriction of processing and objection to processing based on legitimate interest;
• withdraw consent at any time (recaps and statistics in Settings);
• give instructions on what happens to your data after your death (France).

To exercise these rights, write to support@stetnote.app from the email address of your account. We answer within one month (extendable by two months for complex requests, in which case we tell you why). It is free. We may ask you to confirm your identity, but we will not ask for more information than necessary.

You can also lodge a complaint with a supervisory authority, in particular where you live. In France: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07. In the UK: the Information Commissioner's Office.

12. Age limit

Stet is intended for people aged 16 and over. We do not knowingly collect data from younger people. If you believe a child under 16 has created an account, contact us and we will delete it.

13. Additional information by region

United States (California and other states)

This section applies to residents of states with comprehensive privacy laws, including California (CCPA/CPRA), Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others.

• Categories collected in the last 12 months: identifiers (email, account and device identifiers); customer records; commercial information (subscription status); internet or electronic activity (usage events with your consent, technical logs); sensitive personal information (account login; the content of your journal, which may reveal health, sex life, sexual orientation, religious or philosophical beliefs or other sensitive information). Sources: you, your device and the stores. Purposes and retention: see sections 3 and 9. Recipients: the service providers in section 7.
• No sale, no sharing: we do not sell personal information and do not “share” it for cross-context behavioural advertising, and have not done so in the last 12 months. We do not knowingly sell or share data of people under 16.
• Sensitive personal information is only used to provide the service you ask for, as permitted by California Civil Code section 1798.121 and its regulations. We do not use it to infer characteristics about you.
• Your rights: know and access, delete, correct, portability, opt out of sale, sharing, targeted advertising and profiling (we do none of these), limit the use of sensitive personal information, and non-discrimination for using these rights. You may use an authorised agent; we will verify your identity and the agent's authority. If we deny a request, you may appeal by replying to our answer; we respond to appeals within the time required by your state's law, and you may contact your state Attorney General if you disagree.
• We honour Global Privacy Control signals where applicable; since we do not sell or share data, they do not change how the app works.

Canada (including Quebec)

The person responsible for the protection of personal information is Mehdi NECIB, reachable at support@stetnote.app. Your data may be stored and processed outside Quebec and Canada (European Union, United States) by the providers in section 7, under contracts that ensure adequate protection. You can access and correct your personal information, withdraw consent, request de-indexing or data portability, and complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

Brazil (LGPD)

You have the rights listed in Article 18 of the LGPD, including confirmation of processing, access, correction, anonymisation, portability, deletion of data processed with consent, information about the entities with which data is shared, and revocation of consent. Sensitive data is processed with your specific and highlighted consent. International transfers rely on standard contractual clauses. You can complain to the Autoridade Nacional de Proteção de Dados (ANPD).

United Kingdom

The UK GDPR and the Data Protection Act 2018 apply in the same way as described in this policy. Transfers to the United States rely on the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.

14. Consumer Health Data Privacy Policy (Washington, Nevada)

This section is our consumer health data privacy policy under the Washington My Health My Data Act and Nevada Senate Bill 370. Stet is not a health app, but what you write in your journal may describe your physical or mental health.

• Consumer health data we collect: any health information you choose to write in your pages, and recaps generated from them if you turn recaps on.
• Why: only to store, sync and show your journal to you, and to create your recaps if you consent.
• Sources: you, through the app.
• Sharing: only with the processors in section 7 that are needed for these purposes (hosting, and the recap provider if you consent). We do not sell consumer health data.
• Consent: we collect it only with your consent, given when you create an account; recaps require a separate consent.
• Your rights: confirm whether we collect or share your consumer health data, access it along with the list of third parties and affiliates it was shared with, withdraw consent, and delete it. Write to support@stetnote.app or delete your account in the app. You can appeal a refusal by replying to our answer; if the appeal is denied, you can contact the Washington or Nevada Attorney General.

15. Changes to this policy

We may update this policy, for example when we add a provider or a feature. The date at the top shows the latest version. For significant changes we will inform you in the app before they apply and, where the law requires it, ask for your consent again. Earlier versions are available on request.

16. Contact

Mehdi NECIB — 8 Rue Serge Levasseur, France — support@stetnote.app