Privacy policy

1. Who is this policy for?

This policy covers the Shht website and mobile app. The website lets you discover the service and play previews without creating an account. The app is in preparation; some online features depend on their configuration.

Shht’s publisher is responsible for the data processing it determines. Its identity and contact details must be provided below before public launch.

2. When you visit the website

The website currently has no collection forms, advertising tools or integrated audience analytics. Your FR / EN choice is part of the page address and does not require a cookie. Audio files are only requested when you start playback.

To deliver pages and files, the hosting provider necessarily receives technical information such as your IP address, requested resources and connection details. Technical logs or, for a private preview, authentication information may be processed by the hosting platform. The provider, its arrangements and applicable retention periods must be specified before publication.

3. When you use the app

On your device, Shht stores information including your language, selected interests, favourites, listening history and progress, and downloaded audio. This allows your experience to continue between sessions.

When online services are enabled, an account identifier may be created, including for an anonymous account. Sign in with Apple may provide an email address or an Apple relay address. Preferences, favourites and progress information may then be synchronised.

The app integrates Firebase services for operation, usage analytics, error diagnostics and protection against abuse. If enabled, these process usage events, technical information and device or account identifiers according to their configuration. Consent choices and production settings still need to be finalised: this page does not claim that a consent mechanism is already operational.

For subscriptions, Apple may send transaction, product, expiry and renewal information, together with an account-linking identifier. Shht does not receive your full payment card number through these notifications.

Shht does not ask for a medical diagnosis or health records. Choosing a topic or listening to a story is not used by Shht to make a diagnosis.

4. Why is information used?

Operational data supports playback, preferences, synchronisation and, when available, subscription access. Technical information also helps secure the service and understand errors. Usage events help understand how the app is used.

For processing subject to the GDPR, the proposed grounds are performance of the requested service for necessary features, legitimate interests for security following an assessment, and consent for processing that requires it. The precise allocation and any required prior consent must be validated before production activation. Accepting the terms does not amount to consent for every use of data.

5. Recipients and hosting

People authorised to operate Shht and necessary service providers may access information relevant to their tasks. Planned integrations include Google Firebase for online services and Apple for sign-in and subscriptions. Apple and Google may also process information under their own policies.

Hosting locations and any international transfers depend on the providers and regions actually selected. These details and applicable safeguards, including for transfers outside the European Economic Area where the GDPR applies, must be documented before launch. Exclusively European hosting is not claimed at this stage.

6. Retention and deletion

Local preferences and files remain on your device until removed using available controls or by deleting app data, subject to backups managed by the operating system. Removing a download deletes the local copy; it does not necessarily remove other account information.

The account deletion feature targets the Firebase account and its profile. This alone is not a guarantee that all logs, analytics, backups or transaction records are immediately erased.

Retention periods for accounts, usage events, error reports, security logs, subscription notifications and backups must be defined by category before launch. Any legal obligations and justified security needs will be taken into account. No automated deletion that has not been implemented is promised here.

7. Your choices and rights

You can change your language and manage favourites and downloads in the app. Deleting an account and cancelling a subscription are separate actions.

Depending on applicable law, you may request access, correction, erasure, restriction or portability of your data, or object to certain uses. Where processing relies on consent, you can withdraw it for the future. Legal exceptions may apply.

Send requests to the publisher’s contact shown on this page, which must be completed before launch. You can also contact the competent data protection authority; in France this is the CNIL.

8. Updates to this policy

This page will be updated as features and data processing arrangements are finalised. Important changes will be communicated through an appropriate channel. The date at the top identifies the latest revision of the text.