Legal

Privacy Policy

Last updated: August 13, 2026

Bodycount is a private dating diary. Privacy is not a feature of the app — it is the app. This policy explains what data we handle, why, and the rights you have over it.

Who we are

Bodycount is published by Arnaud Duboust. For anything related to your data, contact us at contact@dubou.st.

What we collect

• Account data — your email address and authentication identifiers (when you sign in with Apple or Google, we receive the identifier they provide).
• Profile data — the name you want to be called, your birth date, and optionally your gender and orientation. All of it except the account email is optional.
• Journal content — the entries you create: people, encounters, dates, places, ratings, notes, tags and photos. This is your content; we store it solely to provide the service.
• Subscription status — whether you have an active Premium subscription and its expiration date, provided by RevenueCat. We never see or store your payment card details; payments are processed entirely by Apple (and Google on Android).
• Basic usage data — last sign-in date. We do not use analytics trackers, advertising identifiers, or fingerprinting.

What we never do

• We never sell your data.
• We never show your content to other users — there is no social layer, no feed, no sharing.
• We never use your journal content for advertising or profiling.

Where your data lives and how it is protected

• Data is stored with Supabase on servers located in the European Union (Paris region).
• All traffic is encrypted in transit (TLS).
• Every record is protected by row-level security: your data is technically accessible by your account only.
• Photos are stored in a private bucket and served through short-lived signed URLs.
• On your device, the app can be locked with a PIN and Face ID, and its app-switcher preview is obscured.

Third parties we rely on

• Supabase — database, authentication and file storage (EU).
• RevenueCat — subscription management. Receives your account identifier and store transaction data.
• Apple / Google — sign-in and payment processing, governed by their own policies.
• Photon (OpenStreetMap) — place-name autocomplete. Your search text is sent to the service; no account data is attached to it.

Data retention and deletion

You can delete any entry at any time from the app. You can delete your entire account from Settings — your content is immediately removed from your account and permanently erased from our systems within 30 days. You can also request deletion by email.

Your rights (GDPR)

You have the right to access, rectify, delete and receive a copy of your personal data, and to object to or restrict its processing. Write to contact@dubou.st and we will respond within 30 days. You may also lodge a complaint with your local data protection authority (in France, the CNIL).

Age requirement

Bodycount is intended for adults. You must be at least 17 years old (or the age of digital consent in your country) to use the app.

Changes to this policy

If we make material changes, we will update the date above and inform you in the app before the changes take effect.