Envies

Privacy Policy

Updated October 12, 2026 · Terms of Use · Support · Français · All apps

Controller

Charles Venayre, publisher of Envies. Contact: charlesvenayre@me.com. The Envies server is hosted by Supabase, in the European Union (Paris region).

No named account

Envies asks for no email address, no password and no sign-up, and connects to no social network. The first time you open it, the app opens an anonymous session: a technical identifier, created by the server, links your phone to your couple. It is attached to no identity and disappears with your account.

What you entrust to us

• A display first name for you and one for your partner. You choose them freely; nothing obliges you to give real names.
• Your couple's code, produced by the server, and the date the couple was created.
• Your settings: maximum heat, excluded categories, card time, time zone, notification preferences.
• Your game: the “yes” or “skip” answers given to each card, the wishes you have in common, the ones that are drawn, carried out or marked as favourites, and the matching dates.

Your individual answers are never shown to your partner: the server sends them only what you both accepted. Envies asks for neither your contacts, nor your location, nor access to your photos, and contains no messaging.

Notifications

If you allow them, the app registers your device's notification token, provided by Apple, to tell you about the evening draw and to let you know your partner has finished their cards. The content of a card or an individual answer never appears in a notification. The token is deleted as soon as you refuse notifications, change device or delete your account. Envies sends no notification about your trial, your subscription or a payment: those messages are Apple's business.

Subscriptions

Purchases are handled by Apple. We receive a signed receipt from Apple, of which we keep the transaction identifier, the product purchased and the expiry date, in order to unlock the app for both of you (Duo; a former Solo subscription unlocks only its holder). We receive neither your name, nor your address, nor your payment method.

Usage statistics

To understand what is used and what gets in the way, the app sends the screens you open and a few actions (card answered with its category, draw played, wish carried out, paywall shown, purchase). To these are added the app version, the device model, the system version, the language, the region and the time zone, along with an installation identifier renewed at each reinstall. If you installed the app from an App Store ad, the campaign and keyword the install came from are also sent, as provided by Apple. Never the text of a card, a first name, the couple's code, or an answer tied to a specific card. No IP address is kept, these statistics use no advertising identifier, and no data is sold or shared with an advertiser. Ad measurement with Meta, described below, is separate and happens only with your explicit consent. These statistics are pseudonymous: they are tied to the app's anonymous session (never to a name, an e-mail address or an account) and cannot be used to recognise you; they are kept for 13 months. No setting in the app turns them off: to object, write to us. For any question about them, write to us at charlesvenayre@me.com.

Ad measurement (Meta)

Envies promotes the app through ads on Facebook and Instagram. To learn which ones led you to the app, and to show fewer but better ones, the app may send a few events to Meta Platforms Ireland. Only if you allow it in Apple's “Tracking” prompt, shown after you have discovered the app: without your consent, nothing is sent to Meta.

• What is sent to Meta: the device's advertising identifier, the opening of the app, the creation of the couple (create or join), and the start of a trial or a subscription (product, amount, currency).
• What is never sent to Meta: your answers to cards, your shared wishes, your draws and wishes carried out, first names, your couple's code, your settings, your feedback. Since Envies does not hold your e-mail address, it cannot pass it on.
• You can withdraw your consent at any time in Settings › Privacy & Security › Tracking: nothing further is sent. Meta keeps this data according to its own privacy policy.
• Without your consent, only Apple's attribution (SKAdNetwork) tells Meta, with no identifier at all, that an install came from an ad.

Legal basis: your consent, collected in Apple's prompt. Recipient: Meta Platforms Ireland (measurement of Facebook and Instagram ads, only with your consent).

Your feedback

If you send us an idea or a problem from the Us tab, we receive your message, the screen concerned, the app version, the device model, the language and a short technical log, attached to your anonymous session. This feedback is kept for as long as it takes to deal with it.

Server technical log

The server records refusals (invalid invitation code, attempt quota exceeded) in order to detect abuse. This log contains the reason for the refusal and the session identifier, never the first name or the code that was typed. It is purged automatically.

Retention periods

Your game data is kept for as long as your account exists. Deleting your account immediately erases your answers, your declarations, your first name, your recorded subscriptions and your anonymous session; if a step fails, the purge is resumed automatically within 24 hours. At the moment of deletion you choose whether the wishes you had in common are kept for your partner, to whom they also belong, or erased as well. When the last member of a couple leaves, the couple and its history disappear.

Your rights

Under the GDPR, you have a right of access, rectification, erasure, objection and portability:

• Access and portability: Us → Export my data, which returns all of your data in a JSON file.
• Rectification: first names, heat and excluded categories can be changed at any time in Us.
• Erasure: Us → Delete my account.
• Objection: write to us at charlesvenayre@me.com. For Meta ad measurement, withdraw your consent in Settings › Privacy & Security › Tracking. Usage statistics are pseudonymous and cannot be used to identify you; the other data is used only to run the game for your couple.

For any question or complaint: charlesvenayre@me.com. You may also lodge a complaint with the CNIL, the French data protection authority, or with the supervisory authority of your country.

Minors

Envies is for adults only. The app is not aimed at children and does not knowingly collect their data.

Last updated: 12 October 2026.