Privacy Policy

1. Data controller

The data controller is IRYT (Yakini Traore, sole trader), 8 villa du Combat, 93800 Épinay-sur-Seine, France, publisher of Lavni. Data protection contact: privacy@lavni.fr or dpo@lavni.fr.

Capsules and their files are hosted in the European Union (Ireland).

2. Data processed, purposes and legal bases

• Your e-mail address (as a capsule's creator): to send you the confirmation, the link, the opening notice and the reminders before deletion. Basis: performance of the contract.
• The e-mail addresses of the recipients you enter: to tell them the capsule has opened. Basis: performance of the contract with you and the recipients' legitimate interest in receiving what was meant for them. They are told so in that e-mail and can ask for their address to be deleted.
• The capsule's content: title, message, names, dedication, photos, videos, audio recordings. Basis: performance of the contract.
• Guest contributions (collaborative capsules): display name, message, photo, video or voice message, given voluntarily. Basis: the guest's consent, withdrawn by asking for the contribution to be deleted.
• The secret code: only a salted hash is kept, never the code itself.
• Purchase data: plan, amount, Stripe or in-app purchase transaction identifier. Basis: performance of the contract and accounting obligations.
• Security: a hash (HMAC) of your IP address, to limit abuse; the address itself is never stored. Basis: legitimate interest.
• Reports: the content concerned, the reason and a hash of the reporting person's IP address. Basis: legal obligation (EU Digital Services Act) and legitimate interest.
• Your exchanges with support. Basis: legitimate interest, to answer you.

The creator's e-mail address is required: without it we cannot send the link or announce the opening.

3. What Lavni does not do

No account or profile. No advertising, no audience measurement, no trackers, no crash-reporting tools. No selling or renting of data, no profiling, no automated decisions with legal effects. Your content is not used to train artificial intelligence systems. We do not look at the content of capsules, except after a report or at the request of an authority.

4. Recipients and processors

Your data is only shared with the people you choose (recipients, participants) and with the following providers, bound by a data processing agreement (Article 28 GDPR):

• Supabase, Inc.: database, file storage and servers, hosted in the European Union (Ireland).
• Resend, Inc. (United States): sending e-mails.
• Vercel Inc. (United States): hosting the lavni.fr website.
• RevenueCat, Inc. (United States): checking in-app purchases; it only receives the capsule's random identifier and the purchase.
• Stripe Payments Europe, Ltd. (Ireland): payment on lavni.fr, as an independent controller for payment data.
• Apple and Google: in-app purchases, as independent controllers, under their own policies.

We share data with authorities when the law requires it.

5. Transfers outside the European Union

Resend, Vercel and RevenueCat are based in the United States. These transfers are covered by the European Commission's standard contractual clauses and, where the provider participates, by the EU–US Data Privacy Framework.

6. Retention periods

• Unpaid capsule: deleted with its files 7 days after its payment session expires on lavni.fr, 30 days after it was created in the app.
• Sealed capsule: kept until its opening date.
• Opened capsule: 30 days after its opening date, then all its content is permanently deleted, contributions and addresses included. E-mail reminders 7 days and 1 day before. Capsules opened before 26 September 2026 keep 90 days.
• After deletion, only the certificate reference and its dates (sealing, opening, deletion) remain, with no content or address, so that the printed certificate can still be verified.
• IP address hashes: 2 hours. Reports: deleted with the capsule concerned.
• Billing data: 10 years with our payment providers, for accounting obligations.
• Our hosts' technical logs and backup copies: a few days.
• Exchanges with support: 3 years after the last message.

7. Security

• Encrypted connections (HTTPS/TLS).
• Titles, messages, names, dedications and e-mail addresses encrypted with AES-256 by our servers before they are stored.
• Photos, videos and audio kept in private storage, encrypted at rest, reachable only through signed links valid for a few minutes.
• Secret code stored as a salted hash; number of attempts limited.
• Opening dates checked by our servers; direct database access blocked by security rules (RLS).

Lavni is not end-to-end encrypted: our servers decrypt the content to deliver it on the planned date. A link, a secret code or a certificate gives access to the capsule: only share them with the right people.

8. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw your consent at any time and, in France, the right to give instructions on what happens to your data after your death.

To exercise them, write to privacy@lavni.fr with the capsule reference (printed on the certificate) or its link. As there is no account, we may ask you to prove that you control the e-mail address linked to the capsule. We answer within one month; a capsule you ask us to delete is erased within 30 days.

You can also lodge a complaint with the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or with the data protection authority of your country.

9. United States residents

Lavni does not sell your personal information and does not share it for targeted advertising. In the past 12 months we collected the following categories: identifiers (e-mail address), audio and visual information (photos, videos, recordings), commercial information (purchases) and a hash of the IP address. They come from you, your guests and our payment providers, and are used only to provide the service, for the periods stated above.

Depending on your state (California under the CCPA/CPRA, and other states), you can ask to know, correct or delete your information, without being treated differently, by writing to privacy@lavni.fr yourself or through an authorised agent. As we track no one across sites, "Do Not Track" and Global Privacy Control signals have nothing to switch off with us.

10. Children

Lavni is not directed at children under 13 and does not knowingly collect their data (COPPA). In the European Union, a minor below the age required in their country needs a parent's or guardian's consent. If you believe a child has sent us data, write to privacy@lavni.fr and it will be deleted.

11. Device permissions

The app only asks for a permission when you use the feature concerned, and you can withdraw it in the device settings:

• Camera: to scan the QR code on a Lavni invitation card or certificate.
• Microphone: to record a voice message.
• Photos and files: to add the photos, videos and audio files you choose.

Lavni never accesses your location or your contacts, and sends no push notifications.

12. Cookies and local storage

The lavni.fr website uses no advertising or audience-measurement cookies. It only stores in your browser what it needs to work: your language, the capsule you are creating and your return from payment. These strictly necessary items need no consent and stay on your device. In the app, the list of your capsules (their links) and your language are kept on the device, in its secure storage; they are not sent to us. Payment takes place on Stripe's secure page, which uses its own cookies needed for payment security.

13. Changes

We may update this policy; the date is shown at the top. If a significant change occurs, we tell you by e-mail when one of your capsules is in progress.

14. Contact

privacy@lavni.fr · dpo@lavni.fr · support@lavni.fr

If the language versions differ, the French version prevails.