Privacy Policy
Viviane · viviane.app · Effective October 15, 2026
Covers the Viviane app (iPhone, iPad, Android) and viviane.app.
1. Who we are
Preffo ApS, Åbakken 9, 4100 Ringsted, Denmark · CVR 46543505 · support@viviane.app
Preffo ApS is the controller of your personal data. Viviane is for adults 18 and over.
2. What we collect
| Data | Source |
|---|---|
| Email address, password (stored as a hash) | You |
| First name, last name (optional), topics you pick | You |
| Everything you write or dictate to Viviane | You |
| Your readings, what Viviane remembers, reading notes, daily card and log | Created in the app |
| Markers on messages about health, legal or money matters, death, other people, or risk of harm | Created in the app |
| Plan, renewals, single readings bought and used | Apple or Google, via RevenueCat |
| Whether you are 18 or over, how it was checked and when (never your age or year of birth) | Apple or Google, or the year of birth you type |
| Whether the device has used the free reading | Apple on iPhone and iPad; on Android, a one-way code of the device’s app ID, kept by us |
| IP address, device type, app version, sign-in times | Your device |
| Usage events (for example “reading finished”), never what you wrote | Your device |
| Crash and error reports, personal details removed | Your device |
| Time zone, notification token (if you allow notifications) | Your device |
| Support emails; waitlist email and news consent | You |
| What you choose to share: the reading or card as you saw it; your question and first name only if you switch them on | You |
| Reports about a shared page; counts of page opens and store taps, with nothing about the reader | People who read a shared page on viviane.app |
We do not collect voice recordings, precise location, contacts, photos, browsing history or advertising IDs. Dictation is turned into text on your phone.
3. Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Account and sign-in | Contract |
| Readings, replies and memory | Your explicit consent (consent screen) and contract |
| Crisis handling | Your explicit consent; vital interests |
| Plans and single readings | Contract |
| One free reading per person and device | Legitimate interest (preventing abuse) |
| Security | Legitimate interest |
| Fixing errors | Legitimate interest |
| Improving the app (usage events only) | Legitimate interest |
| Bookkeeping | Legal obligation (Danish bookkeeping law) |
| Support | Contract; legitimate interest |
| News emails | Consent |
| Daily card notifications | Consent |
You can object to processing based on legitimate interest (section 10).
4. Sensitive information
What you tell Viviane may include sensitive personal information, such as information about your health, sex life or relationships, religious or philosophical beliefs, or other matters the law treats as sensitive. You decide whether to share it; Viviane never requires it.
- Consent. We process sensitive personal information only with your explicit consent, given on the consent screen before your first reading.
- One purpose. We store it and use it solely to personalize your readings and Viviane’s replies to you, and for no other purpose.
- Never used for advertising, never sold, never shared for targeted advertising, and never used to train AI models, by us or by our AI providers.
- Who receives it. Only the AI providers in section 5, to write your readings, and the providers in section 7 that store or carry it for us. Each is bound by contract to process it only on our instructions.
- Withdrawal. You can withdraw consent at any time by deleting your account in the app or by emailing support@viviane.app. Withdrawal does not affect processing that took place before it. Without this consent, we cannot provide readings.
5. AI providers
Viviane’s readings and replies are written by AI models from third-party AI providers. The providers we currently use are listed below.
| Provider | What it does | Location | Keeps your data | Trains on your data |
|---|---|---|---|---|
| Anthropic, PBC | Writes readings and replies | United States | Up to 30 days (up to 2 years if its safety systems flag a message) | No |
- Sent to an AI provider: your messages, your cards, what Viviane remembers, reading notes, your local time.
- Never sent: your email, profile name, password, payment details, IP address.
- Terms every AI provider is bound by. It acts as our processor, uses your data only to answer our request, may not train its models on it, and deletes it within its stated retention period. We never opt in to a provider’s data sharing or model improvement programs.
- Changes to this list. We may add or replace an AI provider. A new provider is added to this list, on the same terms, before it receives any of your data. If a change materially affects how your data is handled, we tell you in advance as section 16 describes.
- We do not train AI models on your data.
6. Where your data is stored
- Database: OVHcloud, Beauharnois, Quebec, Canada (EU adequacy decision).
- Encrypted backups: Cloudflare. Cloudflare has no key.
- Waiting list (email address, consent, your country, and the site or app that sent you, such as TikTok): Cloudflare D1, Western Europe.
- Support mail: Proton AG, Switzerland (EU adequacy decision).
- Transfers to US providers: EU–U.S. Data Privacy Framework or Standard Contractual Clauses.
7. Who handles your data for us
| Company | Role | Data | Location |
|---|---|---|---|
| Anthropic, PBC | AI model | Messages, cards, memory, reading notes | US |
| OVHcloud (OVH Hébergement Inc.) | Servers and database | All account data | Canada |
| Cloudflare, Inc. | Network, bot protection, encrypted backups, the waiting list | IP address, encrypted backups, waiting-list email | US / worldwide |
| RevenueCat, Inc. | Purchases | Account number, purchase history | US |
| Functional Software, Inc. (Sentry) | Crash reports | Technical data | US |
| Grafana Labs | Server monitoring | Server figures, no content | US |
| Resend | Email address, email content | US | |
| 650 Industries, Inc. (Expo) | Notifications | Notification token, notification text | US |
| Proton AG | Support mailbox | Your emails to us | Switzerland |
Apple and Google handle payments and app store data under their own privacy policies.
We share data with no one else, except when the law requires it, to protect someone’s life or safety, or in a sale or merger of Preffo ApS (with notice to you first).
8. How long we keep it
| Data | Kept |
|---|---|
| Account, readings, conversations, memory, reading notes, daily card and log, usage events | Until you delete your account |
| Inactive accounts (no sign-in for 3 years, no active plan) | Deleted 30 days after an email warning |
| Sign-in records | Until the sign-in ends, then up to 30 days |
| Encrypted backups | Up to 180 days |
| Crash reports | 90 days |
| Server error logs | 30 days |
| Purchase records | 5 years after the financial year ends; after account deletion, only a random account number |
| Free-reading checks and AI cost records | 3 years; after account deletion, only a random account number |
| Android free-reading mark (a one-way code of the device’s app ID, not linked to your account) | 12 months |
| Crisis messages shown | A yearly count only, not linked to you |
| Support emails | 3 years after your last message |
| Waitlist and news email | Until you unsubscribe |
| Shared pages | Until you take them down or delete your account; after that, only a record that the link existed, with nothing of what it showed |
| Reports about shared pages | 12 months |
9. Download and delete
- Download: Account → Privacy & data → Download my data. Holds your readings, conversations, what Viviane remembers and the reading notes.
- Delete: Account → Privacy & data → Delete account. Immediate and permanent. Removed from backups within 180 days. Also possible at viviane.app/account-delete or by email.
- Deleting your account does not cancel a subscription. Cancel it in your Apple or Google account.
- Deleting your account does not reset the device’s free-reading mark: Apple keeps it on iPhone and iPad, and we keep it on Android for 12 months.
10. Your rights
Everyone has these rights, wherever they live:
- access and a copy of your data
- data portability
- correction (your name can be changed in the app)
- deletion
- withdrawal of consent
- objection to processing based on legitimate interest
- restriction of processing
- unsubscribing from news emails (link in every email)
Email support@viviane.app from your account’s address. We may verify your identity. An authorised agent may act for you with your written permission. We answer within one month (up to two more months for complex requests, with notice). Free of charge. Using your rights never affects your service or price.
US residents. These rights cover those given by US state privacy laws. We do not sell or share personal data for targeted advertising and do not profile with legal or similar effects. We honour Global Privacy Control signals. To appeal a decision, reply “Appeal” to our answer; we respond within 45 days. You can then contact your state attorney general. Washington and Nevada residents: see viviane.app/health-data-privacy.
EU/EEA residents. You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, or to the authority where you live or work.
11. What we do not do
- Sell personal data (none sold in the past 12 months)
- Show ads or use data for targeted advertising
- Track you across other apps or websites
- Train AI models on your data
- Make automated decisions with legal or similar effects
12. Sharing
A reading or card is shared only when you tap Share. It becomes a page and images on viviane.app that anyone with the link can see, without an account. The page shows the cards and what Viviane wrote. Your question and your first name go with it only if you switch them on. Nothing else about you leaves: not your conversations, your follow-up questions, or anything Viviane remembers.
Take a shared page down in the app at any time (Account, “What you have shared”); the link then stops working. Deleting your account takes all of them down first.
Anyone reading a shared page can report it. We keep the report for 12 months and use it only to review the page. We count how often shared pages are opened and how often their store links are tapped, without recording who the reader is.
13. Notifications
One notification a day when your daily card is ready, if you allow it. Notifications never contain what you wrote or what a reading said. Turn them off in the app or in your phone’s settings.
14. Security
- Encrypted connections (HTTPS)
- Passwords stored as hashes
- Backups encrypted before leaving our server
- Server access limited to Preffo ApS, with personal keys
- Providers bound by contract
If a breach puts your data at risk, we notify the authorities as required and tell you without undue delay when the risk to you is high.
15. Adults only
Viviane is for people 18 and over. We check age at sign-up. If we learn an account belongs to someone under 18, we close it and delete its data. Report a suspected minor to support@viviane.app.
16. Changes
The date at the top shows the current version. We notify you in the app or by email before a material change takes effect, and ask for consent where the law requires it. Adding an AI provider on the terms in section 5 is announced by updating the list there before the provider receives any data.
17. Contact
Preffo ApS, Åbakken 9, 4100 Ringsted, Denmark · support@viviane.app