Who we are
Sevo is provided by PHONEVOX, a French simplified joint-stock company with sole shareholder (SASU), registered at 60 rue François Ier, 75008 Paris, France. Registered with the Paris Trade and Companies Register under number 995 051 638. Intra-community VAT number FR05 995 051 638.
For the purposes of the EU General Data Protection Regulation (GDPR) and the French Data Protection Act, PHONEVOX is the data controller for the personal data described below.
You can reach us at contact@phonevox.xyz or by post at the address above.
What this policy covers
This policy applies to the Sevo mobile application (iOS and Android) and to the landing page at sevo.phonevox.xyz.
What we collect
- Account data — when you create an account with an email and password, we store your email address, a hashed version of your password, and the display name you choose. If you sign in with Apple or Google, we receive only the identifier and optional name/email the provider shares with us.
- Usage data — which lessons you have completed, your current streak, the time you last used the app, and approximate total time spent learning.
- Device and crash data — your operating system version, device model, app version, and crash stack traces. This is delivered by Apple and Google through their built-in crash reporting, never by us.
- Subscription metadata — your subscription tier (free or Sevo Plus), renewal status, and the receipt identifier Apple or Google issues for your purchase. We never see or store your payment card — Apple and Google handle all payment processing.
- Transactional email events — a record that we sent you password resets or email verifications, without the content of those emails.
We do not collect anything else. No location data beyond country-level inferred from IP when signing in. No contacts. No microphone. No camera. No advertising identifier.
Why we collect it, and the legal basis
- Account and usage data — to provide the service you signed up for (GDPR Art. 6(1)(b), performance of a contract) and, for limited analysis of which lessons are working, our legitimate interest in improving Sevo (Art. 6(1)(f)).
- Device and crash data — our legitimate interest in keeping the app reliable (Art. 6(1)(f)).
- Subscription metadata — to run your subscription (Art. 6(1)(b)) and to meet our accounting obligations (Art. 6(1)(c)).
- Transactional emails — to provide the service (Art. 6(1)(b)).
Who we share it with
We rely on a small number of processors, listed here in full:
| Processor | What they do for us | Where | | ------------- | ----------------------------------------------------------------------------- | --------------------- | | Apple Inc. | Sign in with Apple, App Store payments and renewal, iOS crash reporting | USA | | Google LLC | Sign in with Google, Google Play Billing and renewal, Android crash reporting | USA | | Vercel Inc. | Hosting for sevo.phonevox.xyz | EU (Frankfurt region) | | Supabase Inc. | App backend: authentication, database, password-reset and verification emails | EU (Frankfurt region) |
We do not use third-party analytics, advertising networks, or marketing-email services. We do not sell or rent your data to anyone. Sevo's lessons are written by PHONEVOX and are not produced by any external AI service.
International transfers
Apple and Google process some of your data in the United States. For transfers from the EU to the US, we rely on the Standard Contractual Clauses approved by the European Commission, supplemented by Apple's and Google's data-protection addenda. Vercel and Supabase store EU-user data in their EU regions.
Retention
- Account and usage data — kept while your account exists. After a deletion request, removed from live systems within 30 days; backup copies roll off within a further 30 days.
- Subscription and billing records — kept 10 years, as required by French Commerce Code Art. L123-22.
- Authentication and security logs — 12 months.
- Crash reports — 90 days.
- Transactional email events — 30 days.
Your rights under GDPR
You can at any time:
- Access the personal data we hold on you.
- Rectify any of it that is wrong.
- Delete your account and the data tied to it (see Delete Account).
- Restrict how we process your data.
- Receive a copy of your data in a portable format.
- Object to processing based on our legitimate interests.
- Withdraw consent where you previously gave it.
To exercise any of these rights, email contact@phonevox.xyz from the address on your account. We respond within 30 days.
You also have the right to lodge a complaint with the CNIL, France's data-protection authority, at cnil.fr/en/plaintes.
If you live in California (CCPA)
California residents have additional rights: the right to know what personal information we hold, to correct or delete it, to limit its use, and to opt out of sale or sharing.
We do not sell personal information and we do not share it for cross-context behavioural advertising. To exercise your rights, email contact@phonevox.xyz. We do not discriminate against users who exercise these rights.
Children
Sevo is for users aged 13 and over. If you are under 18, please use Sevo with a parent or guardian. If we learn that we have collected personal data from a user under 13, we delete it promptly. If you are a parent and believe your child under 13 has created an account, contact us at contact@phonevox.xyz and we will remove the account.
Cookies and similar technologies
The landing page uses only strictly-necessary storage: the Nunito font is loaded from Google Fonts via Next.js's built-in font system (no cookie is set). No analytics cookies, no advertising cookies.
The app does not use web cookies. It stores authentication tokens and your preferences on-device using the platform's standard secure storage.
Security
Passwords are stored as salted hashes managed by Supabase Auth. All communication between the app and our servers uses TLS 1.2 or above. At-rest encryption is handled by Supabase, Vercel, Apple, and Google on their respective infrastructure.
Changes to this policy
We may update this Privacy Policy. The "Last updated" date at the top of this page will change. For any material change that broadens what we collect or how we use it, we will email registered users at least 30 days before the change takes effect, so you can object or close your account first.
Contact us
Email: contact@phonevox.xyz Post: PHONEVOX, 60 rue François Ier, 75008 Paris, France