Privacy Policy

In brief

Retia is designed to minimise data. The app has no user account. The content of the articles or searches you analyse is never written to disk or logged by our server: it is only used to produce the analysis.

What we process

When you start an analysis, the article text (or your search term) is sent to our server, in France (OVH). It is processed in memory, without being written to disk, for as long as it takes to produce the result. The result is returned to you and kept on your device; our server keeps it in memory for 24 hours at most, so that the app can retrieve it if it was closed in the meantime, then erases it.

The text is sent to our inference provider Nebius (language processing), which keeps neither the text nor the responses (“Zero Data Retention” option). The Wikipedia APIs only receive search terms: the keywords drawn from the article, or your term. We send these providers no identifier about you (neither your IP address nor a device identifier).

Device identifier and usage limits

As there is no account, the app authenticates with our server using an Apple App Attest key, created on your device the first time you use the app: it proves that requests really come from the Retia app. We keep this key's pseudonymous identifier, its public key, a technical counter and its creation and last-use dates, as well as the number of analyses started each month, to enforce usage limits. No automatic deletion is in place at this time.

Retia+ subscription

Payment for a Retia+ subscription is handled by Apple: we receive neither your Apple ID nor your payment details. The app sends our server the proof of purchase signed by Apple; we keep its transaction identifier, the plan chosen, the period and expiry dates and the environment (real or test purchase), linked to your device identifier. They are used to unlock Retia+ and to share its quota across your devices. No automatic deletion is in place at this time.

Daily news

The daily news is written every morning by our server (news searches, Wikipedia, language processing by Nebius), without any data about you. The app downloads it with your device identifier, which is only used to know which cards to unlock (free plan or Retia+).

Notifications

During an analysis, the app sends our server the token of its live activity (Lock Screen, Dynamic Island), the device's notification token and a short title (the article's, or your term, 60 characters at most). The server uses them to update the live activity and, if you allowed notifications, to tell you when the analysis is done through Apple's notification service (APNs): the title then passes through Apple. These items stay in memory with the analysis (24 hours at most), without being written to disk or logged.

If you turn on the morning brief (in the app's Settings), we keep your device's notification token, with its pseudonymous identifier (App Attest) and the date you last signed up, to send you a notification each morning. It is deleted as soon as you turn the option off (or, the next time you open the app, if you turned its notifications off in iOS Settings), after 60 days without opening the app, or as soon as Apple tells us it is no longer valid.

Connection data

For the security of the service and our legal obligations, our server logs every request: timestamp, IP address, requested address, response code and duration; for an analysis, the size of the text and its outcome (success, error code, verdict of the automated checks). The web server also records the software used (browser or app) and, for the website, the page you came from. Never the content of your articles or searches. The IP address is also used, in memory, to limit the number of requests per hour. Restricted access. These logs are capped in size (automatic rotation: the oldest lines are deleted as new ones come in); no maximum retention period has been set yet.

On your device

Your readings, their results and the text of shared articles are stored on your device, in the app's storage (and therefore in its backups); they are removed if you delete the app. The app contains no audience measurement, advertising or tracking tool.

The retia.fr website

The website sets no audience measurement or advertising cookie. It remembers your language choice (“lang” cookie, one year) and theme (browser local storage). Its fonts are hosted on our own server: visiting it sends no request to any third-party service. Our web server logs visits like any other request (see “Connection data”).

Providers and processing locations

Our server is hosted in France by OVH. Our providers: Nebius (Netherlands), for language processing — with the endpoints we use, the processing location is not guaranteed and may be outside the European Union; the Wikimedia Foundation (United States), which receives the terms sent to Wikipedia; Apple, for app attestation, purchases and notifications; o2switch (France), which hosts our email (contact@retia.fr).

Your rights

Under the GDPR, you have rights of access, rectification and erasure. As there is no account, these rights cover the data described above: device identifier, usage counters, subscription and connection logs. Contact: contact@retia.fr.