Privacy policy
Last updated: 29 September 2026. The French version prevails; this English version is provided for information only.
1. Data controller
Guillaume Lopez, publisher of Apogée. Contact for any question about your data: contact@apogeefrancais.fr.
2. Data processed and purposes
| Data | Why | Legal basis |
|---|---|---|
| Email address, password (encrypted), account creation date | Create and secure your account, send confirmation and security emails | Performance of the contract (terms of use) |
| First name, if you provide one | Greet you by your first name on your home page, and nothing else | Consent: the field is optional, and clearing it withdraws that consent |
| Type of access (free or full) and its dates | Apply the limits of free access and the rights of full access | Performance of the contract |
| Target level, exam date, chosen session days and duration, interface language | Build and adapt your study plan | Performance of the contract |
| Learning data: exercise answers, cards reviewed, lessons read, progress within lessons, notes and pinned passages, placement test results, sessions completed | Track your progress, schedule reviews, adapt the content offered | Performance of the contract |
| Written productions submitted for correction, and the corrections produced | Provide you with a correction and feedback | Performance of the contract |
| Conversation lessons: the sentences you spoke, transcribed by the teacher during the lesson, and their correction | Give you a summary sheet of the session | Performance of the contract |
| Oral production assessments written by the teacher: level, date, optional mark out of 25, remarks for each criterion of the DELF grid, comment, originating conversation session | Give you the assessment of your speaking practice and show it in your DELF papers table | Performance of the contract |
| Registration on the full access waiting list: your account and the date of the request | Notify you by email when full access opens | Consent: registration is optional, and you can withdraw it at any time by writing to contact@apogeefrancais.fr |
| Technical logs (timestamp, action type, account identifier, errors) | Security, abuse detection, fault fixing | Legitimate interest (proper functioning and security of the service) |
| Emails exchanged with the contact address | Answer your requests | Legitimate interest |
Problem reports. When you report a problem on a page or on a piece of content, we record the reason you selected, your comment if you wrote one, the content or page concerned, the interface language and, if you are signed in, your account. This data is used only to fix errors and malfunctions on the site. Your IP address is not recorded. A technical cookie (sig_quota) limits how many reports can be sent from the same browser, to prevent abuse. If you delete your account, your reports are kept without any link to you, so that a correction already underway can be completed. A report is kept until the problem has been dealt with, and for no more than 24 months after that, whether it is still linked to an account or already unlinked.
No banking or payment card data is collected or stored by the site. No data is used for advertising, sold or transferred to third parties. No decision with legal effects is taken about you by automated means: the automatic correction of exercises and of the placement test is an aid, not a decision. The site uses no artificial intelligence system.
3. Recipients and providers
Your data is accessible only to the publisher and to the following technical providers, who act on instruction and do not use your data for their own purposes:
- Supabase (database hosting and authentication), European Union (Frankfurt) region.
- Vercel (site hosting and code execution), United States, with processing regions in the European Union.
- ElevenLabs (speech synthesis of lesson content), United States. No user data is sent, only lesson texts.
- Resend (sending emails related to written productions and homework), United States. It receives the recipient's email address and the content of the message.
Conversation lessons and assigned homework involve a teacher, who sees the sentences recorded during the lesson and the homework answers of their students. As of today, the publisher is the site's only teacher: no other person accesses this data.
Some of these providers are located outside the European Union. Transfers are governed by the European Commission's standard contractual clauses and, for providers that participate in it, by the EU-US Data Privacy Framework. You may request a copy of the applicable safeguards at contact@apogeefrancais.fr.
4. Retention periods
- Account and learning data: as long as the account is active. An account with no login for 24 months may be deleted by the publisher, after a warning email sent one month before.
- Written productions and their corrections: as long as the account exists, or until you delete them.
- Oral production assessments: as long as the account exists.
- Waiting list registration: until the notice that full access has opened is sent, then erased; earlier if you ask to be removed or delete your account.
- Technical logs: 12 months.
- Contact emails: 12 months after the last exchange.
When an account is deleted, all data linked to it is erased, subject to technical backups, which are themselves overwritten within 30 days. The only exception is the problem reports you have sent: they are kept without any link to you, for the period stated in section 2.
5. Cookies and local storage
The site uses no audience measurement tool and no advertising cookie. It only stores:
- a session cookie required for authentication (Supabase), without which you cannot stay logged in;
- an interface language cookie, which remembers for one year the language in which the site is served to you;
- a technical cookie (sig_quota) that limits how many reports can be sent from the same browser, to prevent abuse;
- display preferences stored in your browser (lesson reader font size, help panels already seen), which are never transmitted to the publisher;
- the level and exam date you choose on the home page before signing up, kept in your browser for as long as it takes to create your account, then deleted;
- the level test in progress, kept in your browser for the lifetime of the tab so that you can pick up where you left off; your answers are encrypted there and cannot be read from your browser, and everything is deleted as soon as the test is finished, restarted, or you close the tab;
- the result of the placement test taken before registering, kept in your browser for the time it takes to create the account, then transmitted to the site to initialise your study plan and erased from your browser as soon as it has been transmitted.
These are strictly necessary for the service and exempt from consent. You may clear them from your browser settings; you will then be logged out.
6. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection provided by Regulation (EU) 2016/679 (GDPR), as well as the right to set directives on what happens to your data after your death. You can delete your account from the My account page or by writing to contact@apogeefrancais.fr. Every request is answered within one month. If you believe your rights are not respected, you may lodge a complaint with the CNIL (cnil.fr) or the data protection authority of your country of residence.
7. Security
Passwords are stored encrypted and are never readable by the publisher. Exchanges with the site are encrypted (HTTPS). Database access is restricted by rules that prevent any user from reading another user's data. In the event of a data breach presenting a risk to you, you will be informed within the time limits set by the GDPR.
8. Minors
The site is reserved for people aged 15 or over, the age from which French law allows a person to consent alone to the processing of their data. If you believe an account has been created by a younger person, write to contact@apogeefrancais.fr; it will be deleted.
9. Changes
This policy may change, in particular if new providers or features are added. The update date appears at the top. Any substantial change will be announced on the site or by email.