GDPR and your rights
In plain terms. The publisher collects no personal data about you through the app: what you do in it stays on your device. You can erase it yourself, at any time, from the app. Your rights remain intact for the few data the publisher may hold (for example your e-mails), and the publisher will answer your requests.
1. Who is the data controller?
Adnene Hamdouni, sole trader trading as Isquare, 27 allée des Commerces, 77200 Torcy, France. Contact: contact@isquare.digital. See the legal notice. Data protection officer: none appointed.
2. Which data are concerned?
- In the app: your answers, results, calendar, flashcards, points, badges and settings are stored on your device. The publisher has no access to them. See the privacy policy.
- Optional check for official texts: if you turn it on, the app downloads a small public file from the publisher's website and sends nothing about you. As with any Internet request, the website's host sees the device's IP address.
- On this website: no cookie, no tracker (see cookies). Only the host's technical logs may exist.
- If you write to us: your e-mail address and the content of your message, used only to answer you.
- Purchases: handled by Apple or Google, who are responsible for those data.
3. Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| E-mail correspondence | Answering your request | Legitimate interest in answering requests received (art. 6.1.f GDPR); where relevant, pre-contractual measures or performance of the contract (art. 6.1.b) |
| Requests to exercise rights | Answering your GDPR requests | Legal obligation (art. 6.1.c) |
E-mails are kept as long as needed to handle your request, then deleted. You can ask for their deletion at any time.
4. Your rights
- Access (art. 15): find out whether the publisher holds data about you and get a copy.
- Rectification (art. 16): have inaccurate data corrected.
- Erasure (art. 17): ask for your data to be deleted.
- Restriction (art. 18) and objection (art. 21), in the cases provided for.
- Portability (art. 20), where processing is based on contract or consent and is automated.
- Post-mortem directives: decide what happens to your data after your death.
5. Erase your data yourself
In the app's Settings, the "Effacer ma progression" (erase my progress) command deletes from the device your answers, mock exam history, review dates, marked questions, the series or exam in progress, your flashcards, calendar, points, badges, Pomodoro sessions and mind map state. It keeps your settings, your plan status and the fact that the free mock exam has been used. Uninstalling the app deletes all local data. This does not cancel a subscription and does not delete a purchase: they remain tied to your Apple or Google account and are managed with the store.
6. How to exercise your rights with the publisher
Write to contact@isquare.digital. To identify you, the publisher only needs the e-mail address you write from; it does not ask for ID unless there is reasonable doubt. It answers within one month, extendable by two months for complex requests, with prior notice (art. 12 GDPR). Exercising your rights is free.
If your request concerns the app alone, the publisher will confirm that it holds no progress data: they are on your device, under your control.
Request template
Subject: Request to exercise my rights (GDPR)
Dear Sir or Madam,
Pursuant to Regulation (EU) 2016/679, I exercise my right [of access / to rectification / to erasure / to restriction / to portability / to object] regarding any personal data about me that you may hold.
E-mail address concerned: [your address]
Details: [to be completed]
Please reply within the one-month period set by article 12 of the GDPR.
Kind regards,
[Name]
7. Complaint to the CNIL
If, after contacting the publisher, you believe your rights are not respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL): www.cnil.fr/fr/plaintes; 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. If you live in another EU Member State, you may contact the data protection authority of your country.