ERGONOMIA › Privacy policy
Privacy policy
Last updated: October 11, 2026. Applies to the ergonomia.re website and to the “Assistant” iPhone app.
1. Who is responsible for what
ERGONOMIA (single-shareholder limited company, trade register Saint-Denis de La Réunion no. 935 284 448, 129 avenue Marcel Hoarau, 97490 Saint-Denis, La Réunion, France), represented by its managing director Julien Talbot. Contact for personal data: contact@ergonomia.re.
- For the data of your account, the pairing of your iPhone, notifications and billing, ERGONOMIA is the data controller.
- For the content you entrust to your assistant (your emails, calendar, documents, messages, and information about your contacts), you are the data controller and ERGONOMIA acts on your behalf as a processor. The data processing agreement (GDPR Article 28) is provided with your offer.
2. The ergonomia.re website
The site sets no cookies and has no forms, no analytics tool and no advertising. Its host (Vercel, United States) temporarily records technical connection data (IP address, date, requested page) to keep the site secure. If you write to us, we use your email address and your message to reply, and keep them as long as needed to follow up your request. The julientalbot.com site has its own policy: julientalbot.com/confidentialite (in French).
3. The “Assistant” iPhone app
What the app is. A free app to talk to your assistant: text, voice, photos, documents. Your assistant runs on a dedicated server that we host for you in Europe; the app displays what this server sends it.
What the app does not do. No advertising. No tracking across apps or websites. No sale of your data. The app reads neither your contacts nor your location.
Data concerned
| Data | Where it is | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Your messages to the assistant, its replies, conversation history | Dedicated server (Hetzner, Finland); display copy on the iPhone | Operate the service | Performance of the contract (Art. 6.1.b) |
| Attached photos and documents (photos converted to JPEG, at most 2,048 pixels, before sending) | Sent to the dedicated server; the assistant may pass them to the AI model (xAI) for analysis | Handle your request | Art. 6.1.b |
| Your voice: dictation, voice calls with the assistant | Dictation is transcribed by the server, or directly by xAI with a temporary key; a voice call is a direct link between the iPhone and xAI (United States), with a secret valid for 5 minutes issued by your server | Transcribe and reply aloud | Art. 6.1.b; your consent, given by allowing the microphone |
| Technical call log (times, durations, errors) | Dedicated server | Fix a call problem | Legitimate interest (Art. 6.1.f) |
| Pairing credentials: your server address, access token, profile identifier | iPhone Keychain, on this device only | Recognise you at each opening, without a password | Art. 6.1.b |
| Notification token provided by Apple and encrypted notification content | Our notification relay, on our server in Europe. It only sees fixed-size encrypted content that it cannot read, and the token | Notify you when the assistant needs you | Art. 6.1.b; your consent, given by accepting notifications |
| Queued sends, drafts, call settings (voice, speed, language) | iPhone storage | Not lose a message when offline | Art. 6.1.b |
| IP address and app version, during over-the-air updates | Update server (Europe) | Deliver fixes without going through the App Store | Legitimate interest (Art. 6.1.f) |
| Account deletion requests, reports of an assistant message | Dedicated server and our mailbox | Handle your request | Legal obligation or legitimate interest |
| Billing: company name, email, SIRET, VAT number, payment history | Stripe (payment) and our accounting. We never see your card number | Invoice, comply with accounting law | Art. 6.1.b and 6.1.c |
Permissions requested by the iPhone
Each permission is requested at the moment you use the feature, and you can withdraw it in Settings › Assistant. Refusing a permission only blocks the feature concerned.
- Camera: take a photo to attach, or scan your assistant’s connection code.
- Microphone: dictating your messages and voice calls with your assistant.
- Photos: attach images to your messages; save to your photos the images you choose to keep.
- Face ID: protect your secrets before sending them (a password or sensitive value passed to the assistant). Recognition stays in the iPhone; we receive nothing.
- Notifications: tell you when the assistant is waiting for your reply. The app works without them.
4. Artificial intelligence
Your assistant is an artificial intelligence: you are interacting with an AI, not with a person, and it can be wrong. The requests you make to it (text, photos, documents, voice) are processed by AI models provided by xAI (United States). This is the core of the service: without this transfer, the assistant cannot reply. Anything sent outside (emails, messages) waits for your approval.
You give your agreement to this sharing on the screen shown at first launch, and you can withdraw it at any time in Settings › Partage avec l’IA (Sharing with AI) (see Help and contact). The terms of use are at /en/terms.
5. Who receives your data (processors)
| Recipient | Role | Country | What it receives |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the dedicated server, the notification relay and updates | Germany, Finland (EU) | All the content of your service, in stored form |
| xAI | AI models: replies, transcription, real-time voice | United States | The text, photos, documents and audio needed for each request |
| Composio | Secure connections to your tools (Gmail, Calendar, etc.) | See the processing agreement | Connection tokens and tool data exchanged during an action |
| Apple | App distribution and notifications | United States, Ireland | The notification token. Data you give Apple when downloading the app is governed by Apple |
| Stripe | Invoicing and payment for the service (outside the app) | EU, United States | Your billing data. No conversation data |
| Twilio, Resend | Telephony (if you enable a line); service emails | United States | Phone number and call audio; email address |
| Telegram, Google, Microsoft | Only if you choose these channels or link your accounts | Varies | As you choose. Each is responsible for its own processing |
| Vercel | Hosting of the ergonomia.re website | United States | Technical connection data for the site |
The full, up-to-date list is annexed to the data processing agreement. We notify you 30 days before any new processor.
6. Transfers outside the European Union
Data sent to xAI (United States), and to Twilio, Resend, Stripe and Vercel, may leave the European Union. These transfers are covered by the European Commission’s standard contractual clauses or by the EU–US Data Privacy Framework adequacy decision, depending on the provider. xAI commits not to train its models on API data. A copy of the applicable documents can be requested from contact@ergonomia.re.
7. How long we keep your data
- Service content (conversations, files, assistant memory): for the duration of the contract. Erased within 30 days after the contract ends or after your deletion request, unless the law requires otherwise.
- Credentials on the iPhone: until you sign out of the app or uninstall it.
- Notification token: deleted when you sign out of the app, or when Apple declares it invalid.
- Technical call log: as long as needed for troubleshooting.
- At xAI: xAI keeps requests and replies for 30 days to detect abuse, without using them to train its models. We have asked xAI to remove this retention; we will update this page as soon as it takes effect.
- Invoices and accounting records: 10 years, as required by law.
- Support requests: 3 years after the last request.
8. Your rights
You may request access, rectification, erasure, restriction, objection and portability of your data (GDPR Articles 15 to 22), and withdraw any consent at any time (microphone, photos, notifications: in the iPhone’s Settings). Write to contact@ergonomia.re. We reply within one month at the latest. You may also lodge a complaint with the CNIL, the French data protection authority: cnil.fr.
Delete your account. In the app: Settings › “Supprimer mon compte” (Delete my account). As a last resort, by email to contact@ergonomia.re (see Help and contact). Deletion is carried out within 30 days at the latest. It does not end the contract concluded with ERGONOMIA: to end it, write to us.
9. Security
Encrypted connection (HTTPS, secure WebSocket) between the app and your server. Credentials stored in the iPhone Keychain. Notifications encrypted between your server and the app. Face ID before a sensitive value is sent. Detection of secrets pasted into a message before sending. One dedicated server per customer.
10. Minors
The app is intended for ERGONOMIA’s business customers (access by contract). It is not designed for children.
11. Changes
Any significant change is announced in the app and by email. The date of the last update is shown at the top of this page.
Cette page en français · Terms of use · Legal notice · Help and contact