Publisher and contact
The « Nous Deux » app is a free, ad-free project focused on couple life (shared calendar, period tracking, optional location sharing). For any questions about this policy or your data, you can contact us via the project repository: github.com/Eragon67360/nous-deux.
Data we collect
We only collect and process data necessary for the app to work and for sharing within the couple you form with your partner.
- Account and authentication: login identifier (Google or Apple sign-in), email address linked to the account if provided by the identity provider.
- Profile: display name, gender, app language, profile picture (avatar), link to your partner when you form a couple.
- Shared calendar: titles, descriptions, dates and times of events you or your partner create, visible only within the couple.
- Period tracking: cycle dates, mood, symptoms, notes. This data is shared with your partner to support and coordinate.
- Location (optional): if you enable location sharing, your real-time position (latitude, longitude) is used for display on the map. No location history is stored.
- Notifications: notification token (FCM) to send you reminders (e.g. partner period reminder) and calendar reminders.
- Technical data: requested permissions (calendar, notifications, location, camera for profile photo) and information needed for the app to work on your device.
Purposes of processing
Data is used to: provide and secure the service (authentication, storage, sync); enable sharing within the couple (calendar, period tracking, location when enabled); send notifications you have agreed to; display the map (via Mapbox) when location sharing is enabled.
Legal basis
Processing of data related to your account, profile, calendar and period tracking is necessary for the performance of the contract (use of the app). Location sharing and push notifications are optional and based on your consent; you can turn them off at any time in the app or device settings.
Hosting and processors
Data is hosted and processed by the following services, in line with their privacy policies and applicable rules (including GDPR where relevant):
- Supabase: authentication, database, profile photo storage (hosting may be in the EU depending on project configuration).
- Firebase (Google): sending push notifications (FCM).
- Mapbox: map display when location sharing is enabled.
- Google and Apple: sign-in (Sign in with Google / Sign in with Apple); data processed by these services is governed by their own policies.
Retention
Data is kept while your account is active. Location is not stored long term: only the current position is used for real-time display. If you delete your account or request deletion, your data is deleted in line with our procedures and processors' technical constraints.
Your rights
Under the GDPR and applicable data protection law, you have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure (subject to legal obligations)
- Right to restriction of processing
- Right to object to certain processing
- Right to data portability
To request deletion of your account and data, see the dedicated page: Account deletion.
To exercise your other rights, contact us via the GitHub link at the start of this document. You may also lodge a complaint with the CNIL (www.cnil.fr) or the supervisory authority in your country of residence.
Policy changes
We may update this privacy policy. The current version is the one published on this page; the last update date is shown at the top. We encourage you to check it from time to time.
Effective date
This privacy policy took effect on 11 February 2026.