← Kreyolang

Privacy Policy

Last updated: May 2026

Translation provided for convenience. The legally binding version of this Policy is the French version, in accordance with French law.
This policy describes how Christopher Jeanne EI (operating under the trade name CMJ Group and the Kreyolang trademark) collects, uses, and protects your personal data, in accordance with the General Data Protection Regulation (GDPR — EU 2016/679), the Apple App Store Review Guidelines (§ 5.1), and the Google Play Developer Policy.

Article 1 — Data controller

Sole proprietor: Christopher Jeanne EI, operating under the trade name CMJ Group and the verbal trademark Kreyolang

SIREN: 879 333 664

Address: 47, rue Vivienne – 75002 Paris, France

Website: kreyolang.com

Contact: contact@kreyolang.com

Article 2 — Data collected

2.1 Identity data

2.2 Progress data

2.3 Technical data and identifiers

2.4 Payment data

Banking details are processed exclusively by Apple, Google, or Stripe and are never transmitted to nor stored by Kreyolang on its own servers. We only retain the confirmation of subscription status (active / inactive / plan type) through RevenueCat.

Article 3 — Purpose of processing

PurposeLegal basis
Account creation and managementContract performance
Progress synchronization (Supabase cloud)Contract performance
Premium subscription management (RevenueCat)Contract performance
Sending progress notifications and remindersConsent
Anonymized usage analytics (service improvement)Legitimate interest
Compliance with legal and accounting obligationsLegal obligation

Article 4 — Sub-processors

Kreyolang uses the following providers, selected for their GDPR compliance guarantees and certified security:

ProviderRoleLocation & safeguards
SupabaseDatabase, authentication, cloud storageEU / USA — Standard Contractual Clauses (SCCs), SOC 2 certified
RevenueCatPremium and mobile subscription rights management (iOS & Android)USA — Standard Contractual Clauses (SCCs), data minimization
PostHogBehavioral progress analytics (opt-in)EU — EU Cloud, GDPR compliant, anonymized data
StripeSecure web payment processingUSA / EU — PCI-DSS Level 1 certified
SentryError monitoring and app stabilityEU — EU hosting, minimal data (userId + email only)
ExpoPush notification delivery (learning reminders)USA — Only push token + notification content transmitted
ResendTransactional email delivery (welcome, confirmation)USA — Only the recipient's email address is transmitted

Article 5 — Retention period

Active account dataSubscription duration + 1 year after last login
Progress dataLifetime of the active account
IP addressAutomatically anonymized after 30 days
Technical logs90 days rolling
Billing data10 years (statutory accounting obligation, art. L123-22 French Commercial Code)
Deleted accountAll personal data erased within 30 days of the request

Article 6 — User rights

How to exercise your rights:

Send your request to contact@kreyolang.com — Response time: 30 days maximum. In the event of an unsatisfied complaint, you may refer the matter to the CNIL (www.cnil.fr), the French data protection authority.

6.1 Right of access

You may request a complete copy of all personal data we hold about you, within 30 days.

6.2 Right of rectification

You may correct inaccurate information directly from your profile settings in the app, or by contacting us by email.

6.3 Right to erasure — "Right to be forgotten"

You may request the complete and permanent deletion of your account and all your personal data. This action is irreversible: it permanently erases your progression, XP, Gems, streaks, and learning history.

Deletion can be initiated:

6.4 Right to portability

You may request the export of your progress data in a structured, readable format (JSON) via contact@kreyolang.com.

6.5 Right to object and to restrict

You may object to the processing of your data for analytics purposes, or request its restriction, at any time from your privacy settings or by contacting us.

Article 7 — Cookies and trackers

7.1 Strictly necessary cookies

These cookies enable secure authentication (JWT tokens via Supabase) and store your preferences. They are essential to the operation of the service and do not require your consent.

7.2 Analytics cookies (opt-in)

Used via PostHog EU Cloud to analyze aggregated usage and improve the learning experience. These cookies require your prior consent via the dedicated banner. They may be declined without impacting your use of the service.

7.3 No advertising cookies

Kreyolang uses no third-party advertising cookies. No browsing data is shared with advertising networks.

Article 8 — Policy changes

We reserve the right to modify this policy to reflect legal, regulatory, or functional changes to our service.

In the event of a substantial change affecting your rights, you will be notified by email at least 30 days before the new provisions come into effect. The current version is always available on this page.

Christopher Jeanne EI — CMJ Group — Kreyolang trademark

SIREN: 879 333 664

47, rue Vivienne – 75002 Paris, France

Contact: contact@kreyolang.com

Supervisory authority: Commission Nationale de l'Informatique et des Libertés (CNIL)