Plain-English summary. We collect the minimum needed to run your study planner: your email, a securely handled password, and the study data you create. Your data lives on EU servers, is never sold, and there are no ads and no third-party analytics. Delete your account and your synced data goes with it.
1. Who we are
aim2futur is operated by Aim2Futur, a French sole proprietorship (entreprise individuelle) of Alexandre Doumergue, registered under SIREN 951 422 740, Lyon, France (“we”, “us”). We are the data controller for the processing described here.
Account data — your email address and a password. The password is handled by our authentication provider and stored only in hashed form; we never see or store it in plain text.
Study data — the subjects, topics, schedules, calendar entries and review history you create. It is stored as a single data record tied to your account so it can sync between your devices.
Waitlist — if you join the waitlist on this site, we store the email you provide, for the sole purpose of contacting you about early access and launch.
Technical logs — our hosting providers keep standard, short-lived server logs (IP address, request metadata) for security and reliability.
We use no advertising, no third-party analytics, and we never sell or rent your data.
3. Why we process it (legal bases)
To provide the service (contract) — accounts, sync, planning features.
To keep the service secure (legitimate interest) — abuse prevention, logs, breach-resistant passwords.
To contact the waitlist (consent) — you can withdraw at any time by replying to any email or writing to us.
To meet legal obligations where applicable.
4. Where your data lives
Your account and study data are hosted in the European Union (Supabase, AWS eu-west-1, Ireland). This website is delivered by Vercel's global network; where any transfer outside the EU occurs for site delivery, it is covered by recognised safeguards such as Standard Contractual Clauses. App distribution is handled by Apple.
5. How long we keep it
Account & study data — for as long as your account exists. Deleting your account erases your synced study record.
Waitlist emails — until launch communications are over, or immediately upon your request.
Technical logs — short retention periods set by our hosting providers.
6. Your rights
Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to certain processing. We honour these rights for all users worldwide, not only in the EU. Write to dpo@aim2futur.fr — we answer within one month. You may also lodge a complaint with your local supervisory authority (in France, the CNIL).
7. Security
All traffic is encrypted in transit (TLS).
Your study record is isolated per account with database row-level security — only your authenticated session can read or write it.
At signup, passwords are checked against known breach databases using a privacy-preserving method (k-anonymity) — leaked passwords are refused.
8. Children
aim2futur is not directed at children under 13. If you are under the age of digital consent in your country (15 in France, up to 16 elsewhere in the EU), you may only use the service with the permission of a parent or guardian.
9. Changes
We will update this page when our practices change and flag any material change in the app. This document is an AI-assisted draft reviewed by the publisher; it is written to reflect exactly what the product does.