Privacy Policy
Last updated: 02/08/2026
1. Data Controller
The controller of your personal data is OCEALIA, a French limited liability company (SARL) with share capital of €220,000, registered office at 608 Route de Robion, 84300 Cavaillon, France, registered with the Avignon Trade and Companies Register under number 510 742 406.
For the Advertising purpose only, OCEALIA and Meta Platforms Ireland Limited act as joint controllers for the data collected by the Meta Pixel. You may exercise your rights with either party.
Contact: hello@vitalityarchetype.com
2. Data We Collect
Account data: email address, password (stored hashed, never in plain text), language and preferences.
Test data: your test answers, your archetype and your dimension scores.
Training and wellness data: generated plans, completed sessions, perceived effort (RPE), wellness check-ins (sleep, energy, stress), any injuries you declare, progression history. This data is self-reported: it reflects how you feel and is used exclusively to adapt your plans and tracking.
Payment data: payments are processed by our reseller Paddle, acting as Merchant of Record. We never access or store your banking details.
Usage data: cookieless audience measurement via Plausible; in-app usage analytics via PostHog, only with your consent.
Technical data: error logs (via Sentry) to keep the service reliable.
3. Purposes and Legal Bases
Creating and managing your account, providing the test, plans and tracking, and adapting your plans based on your self-reported data: performance of the contract.
Transactional emails (sign-in, confirmations, recaps): performance of the contract.
Marketing emails and reminders: consent, withdrawable at any time via the unsubscribe link.
Usage analytics (PostHog): consent.
Advertising (Meta Pixel): consent.
Cookieless audience measurement (Plausible) and error logs (Sentry): legitimate interest in operating and securing the service.
Invoicing and accounting obligations: legal obligation.
4. Artificial Intelligence
Your training plans and portraits are generated using artificial intelligence models provided by Anthropic, acting as a processor. Only the data necessary for generation is transmitted. Anthropic does not use this data to train its models. No decision producing legal effects concerning you is made in a fully automated way.
5. Recipients and Processors
Your data is never sold. It is processed by the following providers, each limited to its function:
Supabase (database and authentication, hosted in the European Union, Ireland); Netlify (site hosting, USA); Paddle (payments, Merchant of Record); Twilio SendGrid (transactional emails, USA); Brevo (marketing emails, France); PostHog (usage analytics, European Union); Plausible (audience measurement, European Union); Sentry (error tracking, data hosted in the European Union); Anthropic (AI generation, USA); Meta Platforms Ireland Limited (advertising measurement via the Meta Pixel, Ireland, with possible transfers to the United States, only if you accepted the Advertising purpose).
Sign in with Google. When you choose to sign in using your Google account, we collect your email address and Google account identifier in order to create and manage your account. This processing is based on the performance of the contract (Article 6(1)(b) GDPR). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Learn more: https://policies.google.com/privacy
6. Transfers Outside the European Union
Some providers are located in the United States. These transfers are governed by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
7. Retention Periods
Account and training data: for the lifetime of your account. Upon deletion request, erasure within 30 days.
Prospects (email provided for the 7-day plan without a subscription): 3 years after last contact.
Invoices and accounting data: 10 years (legal obligation), managed by Paddle.
Error logs: 90 days.
Cookie consent choices: 6 months.
Advertising cookies (_fbp, _fbc): 90 days.
8. Your Rights
You have the rights of access, rectification, erasure, portability, restriction and objection, as well as the right to withdraw your consent at any time and to set directives regarding your data after your death. To exercise them: hello@vitalityarchetype.com. We respond within one month. You may also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr), or with your local data protection authority.
9. Security
Your data is encrypted in transit, stored in the European Union (database), protected by strict access rules and accessible only to the people and providers who need it to deliver the service.
10. Minors
The service is reserved for adults (18 and over). We do not knowingly collect data about minors.
11. Cookies
The use of cookies and trackers is described in the Cookie Policy, available on the site.
Two purposes there require your consent: usage analytics (PostHog) and advertising (Meta Pixel). Both are off by default, independent of each other, and your choice can be changed at any time.
12. Changes
This policy may change. In the event of a substantial change, you will be informed by email or in the app.