Privacy Policy
Last updated: 22 September 2026
This policy explains how Deepiks collects and uses personal data when you visit deepiks.io or use the mobile applications we publish, and the rights you have over that data. It applies the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the French Loi Informatique et Libertés of 6 January 1978.
1. Who is responsible for your data
The data controller is DEEPIKS, a société par actions simplifiée with a share capital of €50,000.00, registered under number 433 531 431 R.C.S. Evry, whose registered office is at 21 Rue Jean Rostand, 91400 Orsay, France.
For any question about your data or to exercise your rights, write to contact@deepiks.io or to the postal address above, marked “Data protection”. Deepiks has not appointed a data protection officer, as it is not required to; these requests are handled directly by the company’s management.
2. The website
deepiks.io is a static website. It uses no cookies, no analytics and no advertising trackers, so no consent banner is needed.
Like any web host, our host (Firebase Hosting) records technical data for each request, such as your IP address, the page requested, the date and time and your browser type, to deliver the site and keep it secure. If you write to us, we use your email address and message to answer you.
3. Data we process in our applications
We collect only the data a feature needs, and we tell you in the application why we need it.
- Account data: name, email address, sign-in identifier and language, to create and secure your account.
- Your requests and conversations: what you ask the assistant, by text or voice, its answers, and the actions it carried out, so that it can do what you ask and so that you can review and undo those actions.
- Voice: when you talk to the assistant, your voice is recorded and turned into text. Voice features only work after you grant microphone access, and the microphone is only active when you ask it to listen.
- Memory and preferences: the preferences, routines and context the assistant remembers so you don’t have to repeat yourself. You can view, edit and delete them in the application.
- Data from your device and other apps: calendar, contacts, reminders, location or notifications, only if you grant the corresponding permission and only for the tasks you ask for. You can withdraw a permission at any time in your device settings.
- Purchase data: the plan you chose, transaction identifiers and payment status. We never see or store your full card number: payments are handled by Apple, Google or Stripe.
- Technical data: device model, operating system, application version, diagnostic logs and crash reports, to keep the application working and secure.
We do not use your data to train AI models, we do not sell it, and we do not use it for advertising.
4. Why we use your data, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Providing the application and the assistant’s features you ask for | Performance of the contract |
| Managing your account, subscriptions and purchases | Performance of the contract |
| Accessing your microphone, calendar, contacts, location or notifications | Your consent, given through the device permission, which you can withdraw at any time |
| Security, fraud prevention, diagnostics and service improvement | Our legitimate interest in providing a reliable and secure service |
| Answering your messages and support requests | Our legitimate interest, or pre-contractual measures |
| Keeping invoices and accounting records | Legal obligation |
The assistant does not take decisions that have legal effects on you or that significantly affect you in a similar way, within the meaning of article 22 of the GDPR. It acts on your requests, and asks for your confirmation before important actions.
5. Where your data is stored
The back end of our applications is hosted on Google Cloud Platform in the Paris region (europe-west9), France. Your account data, conversations and memory are stored there.
6. Who receives your data
Your data is accessible only to the Deepiks staff who need it for their work, and to the following processors, which act on our instructions under a data processing agreement (GDPR art. 28):
- Google Cloud Platform and Firebase (Google Ireland Limited): hosting, database, authentication and website hosting;
- Apple (Apple Distribution International Ltd., Ireland) and Google Play (Google Ireland Limited): distribution of the applications, and billing for purchases made through their stores;
- Stripe (Stripe Payments Europe, Limited, Ireland): payments made directly with Deepiks;
- AI model providers: the text of your requests, and the context needed to answer them, is sent to the AI models that generate the assistant’s answers. We use providers that process this data on our instructions only, without keeping it beyond what processing requires and without using it to train their models, and we choose European processing locations where they are available.
We may also disclose data when the law requires it, for example at the request of a judicial authority.
7. Transfers outside the European Union
We favour processing within the European Union. Some processors, or their subprocessors, may process data outside the EU, in particular in the United States. Such transfers are covered by a European Commission adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or by the European Commission’s standard contractual clauses, with additional measures where needed. You can ask us for a copy of these safeguards.
8. How long we keep your data
- Account, conversations and memory: as long as your account is active. When you delete your account, they are deleted within 30 days, except backups, which are overwritten within the following 90 days.
- Voice recordings: deleted once they have been turned into text, unless you choose to keep them.
- Technical logs: 12 months at most.
- Messages sent to us: 3 years after our last exchange.
- Invoices and accounting records: 10 years, as required by the French Commercial Code.
9. Your rights
Under the GDPR you have the right to:
- access your data and obtain a copy;
- rectify inaccurate data;
- erase your data;
- restrict processing in certain cases;
- data portability, to receive the data you provided in a machine-readable format;
- object at any time to processing based on our legitimate interest;
- withdraw your consent at any time, without affecting processing carried out before;
- set instructions on what happens to your data after your death, as provided by French law.
To exercise these rights, write to contact@deepiks.io. We answer within one month. We may ask you to prove your identity if we have reasonable doubt about it. Many of these actions are also available directly in the application’s settings, including deleting your account.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr), or with the authority of your country of residence in the EU.
10. Children
Our applications are not intended for children under 15. In France, a child under 15 may only use services that process their data with the joint consent of the child and a parent or guardian. If you think a child has given us data without that consent, contact us and we will delete it.
11. Security
We protect your data with appropriate technical and organizational measures: encryption in transit and at rest, restricted and logged access, separation of environments and regular updates. If a data breach is likely to put your rights at risk, we notify the CNIL and, where required, inform you.
12. Changes to this policy
We may update this policy, for example when we publish a new application or add a feature. The date at the top shows the latest version. We tell you about important changes by email or in the application before they apply.
13. Contact
DEEPIKS, Data protection, 21 Rue Jean Rostand, 91400 Orsay, France · contact@deepiks.io