Privacy Policy — Captaine
Last updated: 22 October 2026.
Data controller: Leandre (leandre.io), publisher of Captaine. Contact: contact@leandre.io.
Captaine is an artificial-intelligence coach: it talks to you, gives you missions, looks at the photos that prove them and comes back on its own. To do that, the app has to process information about you. This page says which, why, with whom, and how you can erase it.
1. What we collect
| Data | Why | When |
|---|---|---|
| E-mail address | Create your account and send you the sign-in code (no password) | At sign-in |
| Messages with your coach and coach settings (name, voice, insistence, quiet hours, truce) | Run the conversation and decide when it comes back | When you write |
| Missions (title, deadline, status) | Show them to you and track what you proved | Created by the coach or by you |
| Proof photos and the result of their analysis (verdict, markers, advice) | Validate or refuse a mission | When you send a photo |
| What the coach remembers about you (e.g. "knee injury") | Talk to you accurately; you can see it all and make it forget | During the conversation |
| Calendar events (title, times) | Schedule a follow-up after an appointment | Only if you allow calendar access |
| Notification token and device name (e.g. "Android") | Send you your coach's notifications | If you allow notifications |
| IP address and e-mail of code requests | Limit abuse (brute-force protection) | Each code request |
| Preferences (notifications, lock-screen content, sound) | Respect your choices | When you change them |
We do not collect your location, your contacts or an advertising ID. We use no third-party advertising or analytics tools.
2. Who processes your data
- Our server (OVHcloud, dedicated server in Gravelines, France): account, messages, missions, coach memory.
- S3-compatible object storage (Garage, on the same OVHcloud server in France): your proof photos.
- DeepSeek (
api.deepseek.comAPI): the text of your messages, missions, what the coach remembers and, if you allowed calendar access, event titles, to write replies, follow-ups and the daily summary. DeepSeek is a company established in China: this text therefore leaves the European Economic Area. China has no adequacy decision from the European Commission: this transfer relies on its necessity to provide the service you ask for (Article 49(1)(b) GDPR). - OpenAI (gpt-4o "vision" API): the photo you send as proof, with the mission title, to produce the verdict. Only proof photos are sent to it.
- Expo (Expo Push Service) and Google (Firebase Cloud Messaging): deliver notifications. They contain the coach's name and, unless you choose to hide it in Settings, the beginning of the message.
- Zoho Mail (Zoho Corporation), e-mail sending: the sign-in code.
We do not sell your data and do not share it for advertising. AI models are used to produce replies and verdicts. OpenAI does not use data received through its API to train its models; for DeepSeek, the terms of its API platform apply.
3. How long
- Account, conversations, missions, photos, coach memory: until you delete your account or the coach concerned.
- Sign-in codes: expire after 10 minutes; deleted after 7 days.
- IP address and e-mail of code requests: deleted after 30 days, and immediately when the account is deleted.
- Session tokens: 1 hour (access) and 30 days (renewal); deleted at sign-out.
4. Deleting your data
- A coach: coach page → "Delete": its conversation, missions, proofs, memory and planned returns are erased.
- Your whole account: Settings → My account → "Delete my account", by typing your e-mail. Your coaches, conversations, missions, memory, devices and photos are erased. Photos are removed from storage; if storage is briefly unavailable, deletion is retried until it completes.
- What the coach remembers: coach page → "What it keeps in mind" → forget, item by item.
- By e-mail if you can no longer open the app: contact@leandre.io.
No backups are kept at this time. If we set some up, they will be erased within 30 days.
5. Your rights
Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time (for example by refusing calendar or notifications in your phone settings). Write to contact@leandre.io. You may also lodge a complaint with your data-protection authority.
6. Security
Exchanges with the server are encrypted (HTTPS). Sign-in codes are stored hashed with limited attempts; session tokens are stored only as fingerprints. Your photos are stored under an address containing a random identifier; only people who have the exact address can view them (they are not listed or indexed).
7. Minors
Captaine is intended for people aged 16 and over. It is not intended for anyone under 16: if we learn that an account belongs to someone under 16, we delete it, with all its data.
8. What Captaine is not
Captaine is not a medical service or psychological care. The coach's answers are generated by an AI and may be inaccurate.
9. Changes
We will tell you in the app about any significant change to this policy.