This English text is a courtesy translation. The French version prevails.

Provisional version, under review

Privacy policy

In force from 6 November 2026

Data controller

The company that publishes Aure, whose identity is given in the legal notice (text under review). For any question about your data: support@nikaa.app.

Data protection officer

Text under review. In the meantime, write to support@nikaa.app.

The data Aure processes

• Your account: your e-mail address and your password. The password is never stored in plain text, only as a hash.
• Your profile: your gender, your date of birth, your first name, your country and city of residence, your religious practice (level of practice, hijab or beard), your education, your work situation, your languages, your values, your interests, your family situation, your marriage plans (children, view on polygamy, timeframe, city after the marriage) and the texts you write.
• Your exchanges: the interest you show in other members, your connections with other members, your messages, the members you block and your reports.
• The profiles you view: each visit is recorded, except when you have turned on incognito mode.
• Your subscription, once subscriptions open: the plan, the store you took it in (App Store or Google Play), the end of the current period, its automatic renewal and the subscription events sent by RevenueCat. Aure never receives your payment details.
• Your consents: the date and version of each consent you give or refuse.
• Technical data: the IP address of each connection, the token that lets us send notifications to your phone, app usage events, recorded in our own database with no outside audience-measurement tool, and error reports.
• During the beta, the app does not ask you for any photo. Nor does it ask for your origin.

Sensitive data

Your Muslim faith and your religious practice are sensitive data. Aure processes them only with your explicit consent, given before you start. They appear on your profile, which other members can read, and are used to suggest profiles to you. They are neither sold nor used for advertising.

You can withdraw this consent from Me, ‘My consents’. Aure cannot work without it: withdrawing it amounts to asking for your account to be deleted.

Purposes and legal bases

• Creating your account, signing you in and protecting your account (codes sent by e-mail): performance of the contract, that is, of the terms of use.
• Showing your profile, suggesting profiles to you and making exchanges possible: performance of the contract; for your faith and your religious practice, your explicit consent.
• Moderating and protecting members (reports, blocks, automatic checking of messages): legitimate interest.
• Managing your subscription, once subscriptions open: performance of the contract, that is, of the terms of sale.
• Refusing for 1 year a new sign-up with the e-mail address of a banned account: legitimate interest (text under review).
• Fixing errors and understanding how the app is used: legitimate interest.
• Answering the requests of an authority: legal obligation.

The detail of each processing operation is under review.

Compatibility calculation

Aure automatically calculates a compatibility between profiles from the answers in your profile, and uses it to choose the profiles suggested to you. This calculation does not decide for you: you are the one who chooses to show interest. The detail of its logic is under review.

Recipients

Other members see your profile. The Aure team handles reports. The processors below process the data needed for their service. Aure does not sell your data.

Processors and transfers outside the European Union

• OVH Hosting Inc. (Hébergement OVH Inc., Montréal): hosting of the API, the database and the files, in Canada (Beauharnois, Québec). This transfer relies on the European Commission's adequacy decision for Canada (Decision 2002/2/EC of 20 December 2001, kept in place by the Commission's review of January 2024), which covers organisations subject to the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA). Encrypted backup copies are kept away from this server, at OVH in France; their exact location is under review.
• Resend: sending the e-mails that contain your codes (confirming your e-mail address, changing your password). Processing region: under review.
• Sentry: error tracking for the API and the app, European Union region. The error reports of the API do not contain the content of your requests.
• Expo: sending notifications to Apple and Google, United States. Notifications have generic content, such as ‘New message’: never a name or the text of a message. Whether they show on the lock screen follows your phone's settings: the app cannot hide them there.
• RevenueCat: managing subscriptions taken in the App Store or Google Play. The app connects to it as soon as it opens, even during the beta when nothing is sold, with the internal identifier of your account: never your e-mail address or your name. Processing region: under review.
• OpenAI: help with writing your profile, switched off during the beta. No data is sent to it.

Once subscriptions open, Apple (App Store) and Google (Google Play) will collect their payment: Aure never receives your payment details. The role of Apple and Google with regard to your data is under review.

The safeguards for transfers to the United States (EU-US Data Privacy Framework or standard contractual clauses) are under review. You can ask for a copy at support@nikaa.app.

Retention periods

Your data is kept for as long as your account exists. Codes sent by e-mail expire after 15 minutes, and so does the link to your data export.

When you delete your account (see Delete your Aure account):

• At once: your profile is no longer shown to anyone. The interest you showed and received, your exchanges and their messages, for you and for the other member alike, and the profile visits you made and received are deleted. All your sessions are closed.
• For 30 days after your request: the rest is kept in your account, closed, where no one can sign in: your hidden profile, your photos and your voice recording if there are any, the reports made by you or about you, your blocks, the proof of your consents, your usage events and the security log. This period serves to finish reviewing open reports and to retry an erasure that failed. This period is under review.
• 30 days after your request: your account and this data are erased, together with the files of your photos and your voice and your record at RevenueCat. An erasure that fails is retried every day until it succeeds.
• After the erasure, with no link to you: reports remain, without your identifier, as a record of moderation; security log events remain, emptied of their content, without your identifier or your IP address. How long they are kept is under review.
• Backup copies: the database is backed up every day, encrypted, and each copy is kept for 30 days. Your account is therefore gone from the backups no later than 60 days after your request. Text under review.
• Banned account: if the Aure team decided to ban your account, a digest computed with a secret key of your verified e-mail address is kept for 1 year after the erasure, to refuse a new sign-up with it. The address is not kept. An automatic suspension after reports, with no decision by the team, does not lead to this retention. Text under review.

What the law would require us to keep for longer: text under review.

Your rights

You can access your data and get a copy of it, correct it, erase it, restrict its processing, receive it in a machine-readable format (portability) and object to processing based on legitimate interest. You can withdraw your consent at any time, without affecting the processing already carried out.

You get a copy of your data in the app: Me, ‘Download my data’. If your session is more than 15 minutes old, the app first asks for your password. The file, machine-readable (JSON), holds what Aure keeps about you, photos and voice recording included if there are any. Other members appear in it as ‘personne-1’, ‘personne-2’…, without their identifier, and their messages are never copied into it: only how many there are. Its link works for 15 minutes, for 3 downloads at most, and stops working if your account is deleted. You can make 3 requests per 24 hours at most.

Reports made about you are not in this file, to protect the people who made them: only the decisions taken and their date are. Text under review.

You delete your account in the app: see Delete your Aure account.

To exercise another right, or if your export is too heavy for a link, write to support@nikaa.app from the e-mail address of your account: the team handles your request by hand and replies no later than one month after your request. This period may be extended by two months if the request is complex; we will then tell you so within the first month.

Complaints

You can lodge a complaint with the CNIL, in France, or with the data protection authority of the European Union country where you live.

Security

Your messages are encrypted when they are stored on our servers (AES-256-GCM, one key per conversation). Aure holds the key to this encryption: it protects your messages if the database is copied, but it is not an encryption that only you and the person you are writing to could unlock. The current moderation tools give no access to the content of messages.

A message that contains a phone number, a link or the name of a social network is refused automatically.

Panic mode closes all the sessions of your account, on all your devices, and the app forgets your account on this phone. It deletes neither your account nor your data.

Account deletion

In the app: Me, then ‘Delete my account’. The procedure, what is deleted at once and what is kept until the erasure are described on the Delete your Aure account page.

Changes to this policy

In the event of a significant change, a new version applies and you are asked for your consent again in the app.