Transparency and trust

Privacy policy

This page explains what data SentiAct processes, why it does so, which services are involved, and how to request deletion.

Last updated: 13 October 2026

1. Data controller

SentiAct is published by JB Interactive, the trade name of Jérémie Boucard, a sole trader (SIRET 109 954 172 00010), whose registered address is 16 rue des Troubadours, 31270 Cugnaux, France. Contact: contact@jbinteractive.fr.

2. Data we process

• Your email address and technical identifiers needed for secure email-link sign-in.
• The activity theme you enter (up to 300 characters), the generated suggestion, its date and completion state, and an AI request counter.
• Your separate choices about sending a theme to AI and personalizing the journey, including the version of the notice accepted and the date updated. These are stored in your Supabase account and deleted with it.
• Your optional feedback on a completed minimum (too easy, just right, or difficult), encrypted on your device and sent with your theme to Supabase and OpenAI only if AI consent is enabled and you request a new suggestion.
• If you grant Health Connect access, the step counts available for the last 14 days. Your history and journey total are encrypted on your device.
• If you separately enable route personalization, an aggregated summary of those steps and completed daily minimums is sent to SentiAct and OpenAI to calculate a destination. The resulting destination is encrypted on your device.
• Technical connection and security data processed by hosting services.

Reading steps through Health Connect is optional and can be revoked in its settings. Route activity summaries are sent only after separate consent on the journey screen. Your theme and, if provided, latest effort feedback are sent to AI only while AI consent is enabled and when you request a suggestion. You can withdraw either consent in the app. Days without data are not treated as zero steps. SentiAct does not request location or contacts access. If you use voice input, recognition is provided by the Android speech service selected on your device; SentiAct receives the recognized text. If you start the movement counter, camera frames are analyzed on-device only during the session; they are not saved or transmitted, and the count is not retained after closing. Do not enter personal or medical information in the AI theme.

3. Purposes and legal grounds

Account data and suggestions provide the features you request: sign-in, saving your daily minimum and showing your progress. Step counts move the local journey marker. If you provide separate consent, an aggregated summary of observed steps and completed daily minimums is sent to AI to select and adjust your route destination. Your theme and optional effort feedback are sent only when AI consent is enabled and you request a suggestion. Consent-based processing stops when you withdraw consent; quota controls and technical data help secure the service.

4. Service providers

• Supabase: authentication, database and server functions. The project is hosted in the West EU (Paris) region. Database access is restricted to the relevant account by access rules.
• OpenAI: your theme and, if provided, your optional effort feedback are sent when you request a suggestion while AI consent is enabled. With your separate consent, an aggregated summary of observed steps and completed daily minimums is also sent to personalize your route destination (gpt-6-luna model, response storage disabled). API data is not used to train models by default. Abuse-monitoring logs may contain requests and responses and may be retained for up to 30 days by default. Some processing may take place outside the European Economic Area.
• Google Play: app distribution and management of installations and updates. The current version has no in-app purchases or subscriptions.

Your theme is sent to an AI provider. Do not include names, contact details, diagnoses, treatments or other confidential information. Suggestions are general and are not medical advice.

For this website, Cloudflare provides hosting and network security. It may process request data, including IP address, traffic routing data, and system configuration. See its privacy policy; its global network may involve processing outside the EEA.

5. Retention

Account data, saved suggestions, consent choices and the associated counter are kept while your account exists. The journey step history and destination remain encrypted locally on your device until you delete your account in the app or clear the app data. SentiAct does not retain the aggregated summary sent to calculate the destination; providers retain technical logs under their own periods. OpenAI states that abuse-monitoring logs may be kept for up to 30 days by default.

6. Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction or portability, object to certain processing, and withdraw consent when consent is the legal basis. Email contact@jbinteractive.fr. You may also lodge a complaint with the French data protection authority, the CNIL.

7. Account deletion

In the app, open Me and choose Delete my account and data. This deletes your authentication account and associated SentiAct data. If you can no longer access the app, email contact@jbinteractive.fr from the address associated with your account and request deletion. Provider technical logs may remain until their applicable retention period ends.

8. Security and updates

Connections to SentiAct services use HTTPS. Account data is protected by account-level access controls. The local journey history is encrypted with a device-specific Android Keystore key. This policy may change if the app, data or service providers change; the date above shows the latest revision.