Privacy
Privacy policy
Last updated: 30 September 2026
This policy explains what personal data the Goddess Vamp app and the goddessvamp.com website collect, why, and what rights you have. We keep it short and specific: we collect what the service needs, nothing for advertising, and we never sell your data.
1. Who is responsible
The data controller is Benjamin Taieb, 11 Rue Jacques Duchesne, 75019 Paris, France (SIRET 528 074 370 00032), publisher of the Goddess Vamp app. Contact for anything related to your data: contact@goddessvamp.com.
2. What we collect
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Email address and password (stored hashed) | Create and secure your account, let you sign in | Contract | Until you delete your account |
| First name (optional) | Greet you in the app | Contract | Until you delete your account or remove it |
| Favourites, listening progress, completed rituals, listening history (which ritual, when) | Resume sessions, show your practice streak, recommend rituals, understand which rituals are used so we can improve the library | Contract; legitimate interest for aggregated statistics | Until you delete your account |
| Membership status (Free, Premium, VIP) and its expiry | Give you access to the content you pay for | Contract | Until you delete your account; purchase records as required by law |
| Store purchase identifiers (never your card details) | Confirm and restore purchases made through Apple or Google | Contract; legal obligation | As required by accounting law (up to 10 years) |
| Push notification token and device type | Send the notifications you allowed (new rituals, practice reminders) | Consent (you can refuse or switch off at any time) | Until you switch notifications off, uninstall or delete your account |
| Preferences (sound on/off, reminders) | Remember your settings | Contract | Until you delete your account |
| Messages you send us by email | Answer you | Legitimate interest | 3 years after our last exchange |
We do not collect your location, contacts, photos, microphone, advertising identifier or browsing activity in other apps. We do not use advertising or tracking tools, and we do not sell or rent any data.
Payment is handled entirely by Apple (App Store) or Google (Google Play). We never see or store your payment card.
3. Who receives your data
Only the service providers that run the app, each bound by a data-processing agreement:
- Supabase — database, accounts and file storage, hosted in the European Union (Ireland).
- RevenueCat (United States) — manages subscriptions bought through Apple and Google. Receives your account identifier and purchase information, not your email.
- Apple and Google — app distribution, payments and push notifications, under their own privacy policies.
- Vercel — hosting of this website.
- Gandi — domain name and email for goddessvamp.com.
Access inside our team is limited to the people who operate the service. We may disclose data if the law requires it.
4. Transfers outside the European Union
Some providers (RevenueCat, Apple, Google, Vercel) may process data in the United States. These transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.
5. Your rights
Under the GDPR you can access, correct, delete or export your data, object to processing based on legitimate interest, restrict processing, and withdraw consent at any time. Write to contact@goddessvamp.com; we answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL.
6. Deleting your account
In the app: You → Delete my account. Your account, profile, favourites, progress, listening history and notification tokens are erased immediately and permanently. You can also ask by email from the address linked to your account. An active membership must be cancelled separately in your App Store or Google Play settings. See how to delete your account.
7. Security
Data travels encrypted (HTTPS). Passwords are hashed. Each member can only read their own data; audio and video files are served through short-lived private links, and membership levels can only be changed by our server.
8. Age
Goddess Vamp is for adults. The app is not intended for anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has created an account, tell us and we will delete it.
9. Cookies
This website uses no tracking or advertising cookies and no analytics. Fonts are loaded from Google Fonts, which receives your IP address to deliver them. The app stores your settings on your device only to make it work.
10. Future features
Some features planned for the future will involve sharing information with another person. None of them will be switched on by default: each will require your explicit consent, will show exactly what is shared, and can be turned off at any time. This policy will be updated before any such feature is released.
11. Changes
We will update this page when our practices change and tell you in the app if the change is significant.