Legal

Privacy Policy

Version 2026-10-01 · published 30 September 2026

This Privacy Policy describes how Objectif Thunes (an Australian sole trader based in New South Wales, "we", "us", "our") collects, uses, stores, and discloses personal information when you use the Legende mobile application (the "App") and the marketing website at legende.app (the "Site"). We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

The short version. You sign in with your email, or with Apple or Google. You may give a first name so the App can greet you, and that's the whole profile. While you read, we keep where you are in each book and which pages and endings you have found, so you can pick up where you left off. That's it. There are no advertising trackers, no third-party analytics, no cookies on this Site, and nothing we collect is ever sold or used to train AI. The App does send crash reports so we can fix what breaks; they carry no name, no email and nothing you read (§1).

By using the App or the Site you confirm you have read this Policy. If you do not agree, please do not use them.

1. Information we collect

We collect the minimum needed to run the App, and nothing more. There is no password to invent, no demographic question, and no profile to fill out.

Email address (required, for sign-in). If you sign in with your email, we use it to send you a one-time-password (OTP) code each time you sign in. We do not store or set a password. We do not send marketing emails by default.

Sign in with Apple or Google (optional). If you choose one of these instead, we receive from Apple or Google an identifier for your account with them and the email address they share with us. With Apple you may choose to share a private relay address instead of your real one. We never receive your Apple or Google password.

First name (optional). The App may ask what to call you, so it can greet you. It can be anything you like, and you can change or remove it at any time.

Reading progress (functional). For each book you read, we keep the version you read, the choices you took on your way through it, the other routes you explored, and the pages and endings you have found. We also keep the books you save to your library. These records exist so the App can open a book where you left it, draw your story map, and count the endings you have found. They are not analytics, they are not sold, and they are not shared. You can reset a book at any time, which deletes its reading.

Subscription state. If you subscribe, the purchase is processed exclusively by Apple App Store or Google Play, and reconciled through our subscription processor RevenueCat. We receive a status flag (active / trial / cancelled / expired) and a customer identifier. We never receive, see, or store payment card numbers, bank details, or CVVs.

Network metadata. When the App or Site makes a request to our servers, we observe the source IP address. IPs are used strictly to: enforce rate limits (e.g. on OTP requests, to prevent abuse), detect and block automated attacks, and produce aggregate operational metrics. We do not derive location below country level from IPs, and we do not store IP-to-account joins beyond the rate-limit windows defined in §6. The books' pictures, sounds and recordings are delivered through Cloudflare's network, which sees the IP address a request comes from in order to deliver the file.

Device-local data. Your sign-in session, your language choice, your sound levels, the books you download to read offline, a copy of your reading for those books, and the reading you do while offline (until it reaches our servers) are stored on your device using the operating system's on-device storage. Downloads and sound levels never reach our servers. Downloaded books and their offline copy of your reading are deleted from the device when the account signed in has no active subscription.

Crash reports. When the App crashes or hits an unexpected error, it sends a crash report to our crash-reporting processor Sentry so we can find and fix the fault. A report contains technical details only: the error and where in the App it happened, the device model, operating system and App version, a random identifier for the installation, and the App's most recent requests to our servers, which include internal identifiers of books and pages but no names. It never contains your email, your first name, or your reading. Sentry does not store your IP address.

Support correspondence. If you email us we keep the message, our reply, and any attachments for as long as needed to resolve the request and to maintain a record of the interaction (typically 24 months).

2. Information we do NOT collect

  • We never ask for your last name, full name, date of birth, gender, or any other identity attribute. A first name is optional.
  • We never ask for your phone number, postal address, or any government identifier.
  • We do not collect precise geolocation (no GPS, no Bluetooth scanning, no Wi-Fi triangulation).
  • We do not collect contacts, photo library, camera, microphone audio, calendar, or any other on-device source.
  • We do not record who is reading. A book read on your account is part of your account's reading, whoever turns the pages.
  • We do not embed advertising trackers, third-party analytics, or social-media pixels in the App. There is no Google Analytics, no Meta Pixel, no Mixpanel, no Amplitude, nothing of that kind, anywhere. Crash reports (§1) are the only telemetry the App sends, and they describe faults, not behaviour.
  • The Site uses no third-party analytics, no cookies for tracking, and no cookies that require consent under EU/UK rules. The only browser storage we use is functional (e.g. remembering your selected mode).
  • We do not sell, rent, or trade personal information to third parties. Ever.
  • We do not use your data to train machine-learning or AI models.

3. How we use information

We process the information described in §1 for the following purposes only:

  • To provide the core functions of the App (authentication, reading, saving your place and your library, offline downloads, subscription gating).
  • To deliver transactional emails (OTP codes, account-related notices).
  • To protect the service against fraud and abuse (rate limiting, anomaly detection).
  • To find and fix faults in the App from crash reports.
  • To respond to your support, privacy, or legal requests.
  • To meet our legal obligations (e.g. responding to a lawful demand from an Australian authority).

Under GDPR / UK GDPR, our lawful bases are: (a) performance of the contract for account, reading, library and subscription functions; (b) legitimate interest for fraud prevention, security, and fixing faults from crash reports; (c) consent where you explicitly opt in to something; (d) legal obligation when required by law.

4. Service providers (processors)

We use the following processors. Each is bound by a written agreement to handle your data only on our instructions, to maintain security safeguards at least equivalent to ours, and to notify us promptly of any incident.

  • Supabase — database hosting.
  • Cloudflare — private storage and delivery of the books' pictures, sounds and recordings (R2 and Cloudflare's network). It stores no personal information; it sees IP addresses only to deliver files.
  • Railway — backend application hosting.
  • Resend — transactional email delivery (OTP codes).
  • RevenueCat — subscription state management.
  • Upstash — short-lived rate-limit counters and caches.
  • Sentry — crash reporting (§1). Crash reports are stored in the United States.
  • Apple and Google — Sign in with Apple and Google Sign-In if you use them, and the App Store and Google Play for payment and distribution. These are independent controllers under their own privacy policies; we only receive the sign-in identifiers and subscription state described in §1.

5. International transfers

Some processors named in §4 store or process data outside Australia (in Japan, Singapore, the United States or the European Union). Where personal data of EU/UK residents is transferred out of the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses approved by the European Commission (and the UK addendum where relevant). Where personal data of Australian residents is transferred overseas, we comply with APP 8 and take reasonable steps to ensure the recipient handles the data consistently with the Australian Privacy Principles.

6. Retention

  • Account data and reading progress — for as long as your account exists. When you delete your account (in the App: Settings → Delete Account), it is deleted from our database at once, and from our backups within 30 days.
  • A book's reading — until you reset that book or delete your account.
  • OTP codes — stored as a one-way hash; expire and become unusable within 10 minutes; purged within 24 hours.
  • Sign-in sessions — deleted once they expire, 30 days after they were last used, or with the account.
  • Rate-limit counters — purged within 1 hour (per-IP send window), 15 minutes (after too many wrong codes) or 60 seconds (per-email cooldown).
  • Crash reports — deleted by Sentry within 90 days.
  • Server access logs — purged within 30 days unless we are required to retain them longer to investigate a specific incident.
  • Backups — copies of our database kept for recovery are deleted within 30 days.
  • Subscription receipts — retained for 7 years to meet Australian tax and accounting obligations (Income Tax Assessment Act 1936 s.262A).
  • Support correspondence — 24 months from last contact.

7. Your rights

Regardless of where you live, you can:

  • Request a copy of the personal information we hold about you.
  • Ask us to correct information that is inaccurate or out-of-date.
  • Delete your account and all associated personal information, in the App (Settings → Delete Account) or by asking us.
  • Withdraw any consent you have given (this does not affect prior lawful processing).
  • Lodge a complaint with us in the first instance — if unresolved, with your local supervisory authority (in Australia, the Office of the Australian Information Commissioner; in the EU/UK, your national data-protection authority).

Email contact@objectifthunes.com with the subject line "Privacy request". We respond within 30 days. We may ask you to verify control of the account email before acting on a request.

8. Security

Account credentials use OTP or Apple and Google sign-in only (no passwords to leak). All client–server traffic is TLS-encrypted. The books' files are private: they are only served through links our servers sign, which expire within an hour. Database access is restricted to least-privileged service accounts. Despite reasonable measures, no system is perfectly secure — we cannot guarantee absolute security of information transmitted over the internet.

9. Data breach notification

If we become aware of a personal-information breach likely to result in a risk of harm to affected individuals, we will notify the Office of the Australian Information Commissioner and the affected individuals as soon as practicable, and in any case within the timelines required by the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988). For affected EU/UK residents we will additionally notify the relevant supervisory authority within 72 hours where required by Article 33 GDPR.

10. Children

The App includes books written for children, to be read with them or given to them by a parent or guardian, but the App itself is intended for parents, guardians, and adult users to operate: accounts are created and held by them. We do not knowingly collect personal information from children under 13 (or, in the EU/UK, under 16 where local law sets a higher digital-consent age), and the App asks nothing about who is reading. If you believe a child has provided personal information to us, contact us and we will delete it.

11. Changes

We may update this Policy from time to time. The "Last updated" date above always reflects the current version. Material changes that broaden the use of personal information will be announced in-app and via email at least 14 days before they take effect.

12. Contact

Objectif Thunes New South Wales, Australia contact@objectifthunes.com