Last updated: 26 October 2026
Privacy Policy
1. Data Gems may process
Depending on the features you use, Gems may process the following categories of data:
- Onboarding answers, content preferences, and selected themes or categories.
- Favorite gems, reading history, custom gems and app settings.
- Information voluntarily provided in the app, such as your first name, email address, a personal goal or the text of a custom gem. Your first name, email address and free text may be associated with a technical Gems identifier and stored in PostHog. Your first name and email address may also be associated with your RevenueCat subscription profile.
- Basic technical data: app version, language, device type, performance events, crashes and diagnostics.
- Purchase and subscription data processed by Apple and RevenueCat, such as subscription status, trials, renewals, restorations and purchase receipts needed for premium access.
- Messages sent to support, including your email address if you contact us.
Gems does not require you to create an account to use the features planned for launch.
2. Use of data
Data is used to:
- Provide the reading, personalization, favorites and history experience.
- Send reminders or notifications if you enable them in iOS.
- Manage access to premium features, free trials, purchases and purchase restoration.
- Understand onboarding, paywall and product usage steps to improve the app.
- Send you the Gems communications offered on the email collection screen when you voluntarily choose to provide your email address.
- Measure the source of installations and conversion events to evaluate and optimize advertising campaigns.
- Respond to support requests and fix bugs.
3. Third-party services and SDKs
Gems may integrate third-party services to provide or improve the app:
- Apple App Store: processing of in-app purchases, subscriptions, refunds, cancellations and Apple account management.
- RevenueCat: technical management of subscriptions, premium entitlements, receipts and purchase restoration. If you voluntarily provide your first name or email address, this information may be added to your RevenueCat subscription profile.
- PostHog: product analytics, such as onboarding, activation, paywall and general usage events. Your voluntarily provided first name, email address, personal goal and custom gems may be stored there and associated with a technical identifier. Input fields are masked in session replay, but information explicitly sent as analytics properties is still processed.
- AppsFlyer and TikTok: AppsFlyer handles install attribution, campaign measurement, conversion events and SKAdNetwork measurement. AppsFlyer's TikTok Advanced SRN/SAN integration may send configured advertising events to TikTok to measure and optimize campaigns, including through mechanisms without IDFA when ATT tracking is declined. Gems does not send AppsFlyer or TikTok your first name, email address, free text, PostHog identifier or RevenueCat subscriber identifier.
- Diagnostic tools: crashes, errors, performance and limited technical logs when needed for stability.
If a new analytics, attribution, advertising, deep-linking or growth SDK is added, its data practices must be checked before publication.
4. Tracking, advertising and App Tracking Transparency
Apple makes a strict distinction between internal product analytics and tracking. If Gems uses an SDK or shares identifiers to track users across apps or websites owned by other companies for advertising targeting, attribution or advertising measurement, Gems must request App Tracking Transparency permission through the native iOS prompt.
In that case:
- The IDFA advertising identifier and tracking across apps or websites must not be used before the user grants permission.
- The app must include a clear `NSUserTrackingUsageDescription` description.
- The user's refusal must be respected.
- Gems must not use fingerprinting or identifier workarounds.
If you decline ATT, Gems does not use an authorized IDFA. Attribution measurement without IDFA may nevertheless continue through limited events, permitted modeling and Apple's aggregated mechanisms such as SKAdNetwork. ATT refusal is not bypassed through fingerprinting.
If analytics remains strictly limited to internal product measurement without tracking across third-party apps or websites, Gems will document why ATT is not required.
Audience measurement on this website
With your agreement, this website uses PostHog to count page views and clicks to the App Store. You can accept or decline measurement, then change your choice using “My measurement choices” at the bottom of each page. Declining does not prevent you from browsing the website or downloading the app.
Your choice is stored in your browser for 180 days. After you agree, a random identifier specific to your browsing session links the visits and clicks in that session; it is renewed after 30 minutes of inactivity. The information sent includes the page viewed, link placement, Apple campaign and a source category such as Google or ChatGPT when provided by the browser. We do not send your search text, input fields, email address or the full referring URL. This system does not perform session recording, create a personal profile or link your activity to your identity in the app.
Events are sent through our server to the PostHog project hosted in the United States, without sending the visitor's IP address or user agent in the events; geolocation is disabled. Events are retained according to the provider's settings and for the measurement described here. Withdrawing your agreement stops new events from being sent; you can contact support with data-related requests. Apple campaign links are separate: Apple applies its own measurement and privacy rules.
5. Retention and deletion
Local data may remain on your device while the app is installed. Support-related data is retained for as long as needed to respond to your request. Purchase data is retained according to Apple's and RevenueCat's rules and applicable legal obligations. Analytics, attribution and profile data is retained for the periods configured with each provider and only as long as needed for the purposes described above, subject to legal obligations.
Some providers may process data outside the European Economic Area. Where applicable, these transfers are governed by the appropriate legal mechanisms and safeguards required by applicable law.
You can request access to, correction or deletion of data associated with your use of Gems by contacting us. For subscriptions, some information remains managed directly by Apple.
6. Security
We apply reasonable measures to protect the data processed by Gems. No system is perfect, but we limit collection to useful data and avoid requesting unnecessary sensitive information.
7. Your choices
- You can disable notifications in iOS Settings.
- You can decline ATT tracking if a permission request appears.
- You can cancel a subscription in your Apple account settings.
- You can delete the app to remove data stored locally on your device.
- You can withdraw your consent to Gems communications or ATT tracking at any time.
- You can email us to exercise, depending on your situation, your rights of access, rectification, erasure, restriction, objection and portability.
- You can lodge a complaint with the CNIL if you believe your rights are not being respected.
8. Changes
This policy may be updated as Gems evolves, particularly if new SDKs, features, subscriptions or data processing activities are added. The update date at the top of this page will change.
9. Contact
For any privacy questions or a deletion request, contact us at support@mespepites.app.