Contractions Privacy Policy

1. What stays on your phone

Contractions works without an account, without ads and without an advertising ID. What you enter is stored only on your phone, in the app's storage:

• your contractions: when each one started and ended, and the one in progress;
• your answer to the question of whether this is your first baby, and the moment you mark the baby as born;
• your settings and the app's state (welcome screens seen, rating request, what's-new messages).

Your contractions themselves never leave the phone. Some usage events (section 2) do carry your first-baby answer, though, and their time tells when a session started, when the guide was reached and when you marked the birth. "Erase data", in Settings, erases from this phone the contractions, the birth date and the rating-request history, and gives the following events a new identifier; your first-baby answer, your settings and what PostHog has already received stay. The History screen also lets you delete one contraction or the whole history. Uninstalling the app deletes all of this data from the phone. It is not part of Android's automatic backup and, on iPhone, the app excludes it from iCloud backup.

2. Usage analytics and error reports

To improve the app and fix its errors, Contractions sends usage events and error reports to PostHog, in its EU cloud (eu.i.posthog.com). They carry a pseudonymous identifier, a random ID created by the app, and cover:

• the app being installed, its updates (with the previous version), every launch, its return to the foreground and its move to the background;
• the end of the welcome screens and the start of a contraction session (the first contraction after at least three hours without one), with your first-baby answer;
• the guide that shows when to call being reached, once per session, with the app's language and the guide applied, which depends on your first-baby answer;
• the breathing exercise being opened, and the birth you mark, with two yes-or-no answers: had contractions been timed, had the guide been reached;
• the "Discover Doudou" button shown or tapped, with where (Settings, the screen after the birth, the home screen after the birth);
• the rating request (made or not, why, and whether the window could open), the store page opened from "Rate the app", and the what's-new messages when the app shows any (shown, and your answer);
• errors and crashes: the error's name, its message and its stack trace (where in the code it happened), whether it crashed the app, how many times it repeated, where in the app it came from, the version of the app's update, whether the app was in the foreground and, if the display crashed, the elements of the screen shown;
• technical checks, such as error reporting starting up, saved data that could not be read at launch (which, and why) or a phone language that could not be read.

These events never contain your contractions: not their number, nor their duration, nor their time. But each one is dated: the time of the one that opens a session is that of its first contraction, and those of the guide being reached and of the birth being marked tell when they happened. They are pseudonymous: their identifier links them together until you erase the data. PostHog also receives the app's name and version, your phone's make and model, its system and version, the screen size, the phone's language and time zone, and whether it is an emulator; your IP address reaches its server, which derives an approximate location from it (country, region, city). The events are kept for 12 months. There is no account and no email address. Usage data sharing is on by default; you can turn it off in Settings (section 7).

3. Connections at launch

Two more connections happen when the app starts. They carry nothing you enter:

• PostHog (eu-assets.i.posthog.com, eu.i.posthog.com) — when usage data sharing is on, PostHog's SDK reads our project's configuration at every launch, without any identifier; it can also read the project's feature flags, at launch and when you erase the data, sending the pseudonymous identifier from section 2, a device identifier specific to the SDK (the installation's first pseudonymous identifier), which "Erase data" does not change, the app and system versions and the device type; your IP address reaches its server.
• Expo (u.expo.dev) — at every launch, even with usage data sharing off, the app checks whether an update exists, which tells Expo your platform, the version of the app and of its update, a random installation identifier specific to Expo, which "Erase data" does not change, and your IP address.

4. The link to Doudou

The "Discover Doudou" button, in Settings and on the screen shown after the birth, opens our site's address trainrboost.com/go/doudou/contractions in your browser. That address records the click on our server, then sends you to Doudou's page on the App Store or Google Play, depending on your phone. The recorded click contains:

• its time, the app suggested and the name of the link (doudou, contractions);
• the type of device (iPhone, Android or other) and the description your browser gives of itself (its user agent: browser, system and their versions, sometimes the phone model), from which we also work out whether it is a bot;
• the language of the address opened (English, for this link) and the page the click came from, without its parameters, when your browser sends it;
• the country of the connection, which Cloudflare, through which our site's requests pass, derives from your IP address.

Your IP address is not recorded with the click: our site only keeps it in memory, to limit how many clicks are recorded from the same address, and forgets it at the latest when it restarts. Like any request to our site, opening this address is also written to our server's technical logs, with the IP address it comes from; those logs are deleted after 14 days. The link to Google Play carries the name "contractions", which Google Play can pass on to Doudou once it is installed; the link to the App Store can carry it too, for Apple's campaign statistics. The app's other links (this policy, the terms of use) also open our site: its pages are covered by the site's privacy policy.

5. The rating request

After the birth, the app may ask you once to rate it, through Apple's or Google's own rating window; "Rate the app", in Settings, opens its page on the App Store or Google Play. Your rating and review are handled by Apple or Google, under their own privacy policies: the app never sees them. Its usage events (section 2) only say whether the request was made, why not, whether the window could open, and when the store page was opened from Settings.

6. Legal basis, controller, transfers

• Controller: TrainRBoost — contact privacy@trainrboost.com.
• Legal basis: performance of the service for app updates and for the redirect to the store that you ask for by tapping the button (Art. 6(1)(b) GDPR); our legitimate interest in a working app, for usage analytics, error reports and the configuration read that comes with them (Art. 6(1)(f)), which you can object to at any time by turning off "Share usage data" in the app's Settings; our legitimate interest in knowing what Contractions brings to Doudou, for recording the click, and in the security of our server, for its logs (Art. 6(1)(f)).
• PostHog, Expo and Cloudflare process this data on our behalf, as processors; clicks and technical logs are recorded on our own server (trainrboost.com), hosted in the European Union by Contabo. Apple and Google handle what goes through their stores under their own privacy policies. We do not sell, rent or trade your data.
• Transfers outside the EU: PostHog is in the European Union, with its servers in Frankfurt. Expo and Cloudflare are established in the United States; they cover those transfers with the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

7. Your rights

Under the GDPR you can, at any time:

• ask to access your data, or to have it corrected or deleted, by writing to privacy@trainrboost.com;
• object to usage analytics and error reports, by turning off "Share usage data" in the app's Settings (on by default): the app then stops collecting events, from that moment and at every later launch, when it no longer starts PostHog; until the app is closed, an event already waiting to be sent may still go, and PostHog, already started, may still read our project's flags;
• erase your contractions and the birth date from your phone with "Erase data" in Settings, or all of the app's data by uninstalling it;
• lodge a complaint with your data protection authority — in France, the CNIL (cnil.fr).

8. Contact

For any question about this policy or your data:

privacy@trainrboost.com