Legal documents

1. Data controller

The controller of your data is Apex Horizon, a French simplified joint-stock company (SIREN 919 388 926), 171 Grand'Rue, 74350 Cruseilles, France. For any question about your data: privacy@hypn.app.

2. The data we process

Account data: email address, chosen first name, preferences (voice, ambient sounds, notifications), login methods (including Face ID/passkey — biometrics stay on your device; we only receive a cryptographic key).

Data from your welcome interview and your exchanges with your coach: goals, habits, free-text answers. These answers may include HEALTH DATA (substance use, sleep, anxiety, pain, treatments you mention spontaneously). They are processed only with your explicit consent, given when you accept this policy — you can withdraw it at any time by deleting your account.

Usage data: session listens (counters, dates), post-listen check-ins and free notes, optional self-tracking (for example cigarettes per day), messages sent to your coach, problem reports.

Technical data strictly necessary to run the service (security logs, session identifiers). No advertising cookies, no third-party trackers, no selling of data — ever.

3. Why we process it (purposes and legal bases)

Creating and personalizing your program and your audio sessions — performance of the contract, and explicit consent for health data (Article 9 GDPR).

Tracking your progress and adapting your support (counters, check-ins, session adjustments) — performance of the contract and explicit consent.

Sending you communications tied to your program (session-ready emails, reminders, milestones; push notifications if you enable them) — performance of the contract; each channel can be turned off in your settings.

Keeping the service secure and meeting our legal obligations — legitimate interest and legal obligations.

4. Personalized generation and human review

Your sessions (text, then voice) are generated by artificial-intelligence technologies from your answers, then systematically read and validated by your coach — an identified human bound by a confidentiality obligation — before being offered to you.

In practice: your coach has access to your file (interview, scripts, audio, check-ins, messages) for the sole purpose of ensuring the quality and safety of your support. No data is ever used to train artificial-intelligence models.

5. Hosting and processors

We use strictly necessary technical providers: application and database hosting, AI text and voice generation, email delivery. Some of these providers are located in the United States; those transfers are governed by the mechanisms provided for by the GDPR (standard contractual clauses and/or the Data Privacy Framework).

Each provider only accesses the data needed for its task and is bound by a data-processing agreement compliant with Article 28 GDPR. The detailed list of processors is available on request at privacy@hypn.app.

6. Retention periods

Your data is kept for the lifetime of your account. If you delete your account, your personal data and your audio files are deleted immediately; only anonymized technical traces (usage metrics with no identity) and records the law requires us to keep may remain. Accounts inactive for more than 3 years are deleted after an email warning.

7. Your rights

You have the rights of access, rectification, erasure, restriction, objection, and portability, as well as the right to withdraw your consent at any time.

The app builds in the two main ones: "My data" in your settings lets you export all of your data (in a readable format) and permanently delete your account, without having to write to us. For any other request: privacy@hypn.app. You can also lodge a complaint with the CNIL (cnil.fr), the French supervisory authority, or with your local data protection authority.

8. Security

Your data is encrypted in transit, partitioned by strict database-level access rules (each account can only reach its own data), and audio files are served through time-limited signed links. Coach access is nominative and limited to your support.

9. Cookies

HypN only uses cookies strictly necessary for the service to work (login session, security). No advertising or third-party analytics cookies are set — which is why no cookie banner is required.

10. Minimum age

The service is restricted to adults (18 and over). No account may be created for a minor.

11. Changes to this policy

Any substantive change to this policy will be presented to you in the app for a new acceptance after reading. The version date appears at the top of the document.

This policy is a courtesy translation provided for your convenience: in the event of any discrepancy, the French version (available at hypn.app/legal/confidentialite) prevails.