Your body, your data, your phone.
This is an English translation of the French terms, provided for information. In case of any difference, the French version at https://endoqueen.fr/confidentialite.html prevails.
The essentials
- Your journal (pain, cycles, symptoms, sleep, food, medicines, notes) is stored only on your phone. EndoQueen receives no copy of it.
- There is no online account, no advertising, no advertising tracker and no audience measurement in the app.
- We do not sell, rent or pass on any data.
- If you link your phone to your partner’s, what passes between them is end-to-end encrypted: our server cannot read it.
Who is responsible
The data controller is EasyIDEL (SASU, a French simplified joint-stock company with a single shareholder, with share capital of €100, RCS (Trade and Companies Register) Arras 106 350 325, 7 rue de Miraumont, 62450 Ligny-Thilloy), represented by Paul Fontaine. Contact: contact@endoqueen.fr.
In the app
| Data | Where it is | Who has access |
|---|---|---|
| Daily journal, calendar, summaries, questions for the doctor | Local database on your phone | You alone |
| Pill reminders | Notifications scheduled on the phone | You alone |
| PDF summary | Created on the phone, sent by you (email, AirDrop, printing) | The people you choose to send it to |
| Camera | Used only to read an EndoQueen QR code; no image is saved | No one |
| Microphone and voice (daily check-in by voice) | Your voice is transcribed into text on your phone, by the device’s speech recognition. No recording is kept; only your answers are stored in your journal. If your phone does not support on-device transcription, voice is not used and you answer by tapping the screen | You alone |
| Steps and sleep (optional, off by default) | If you turn it on, the app reads your step count, how long you slept and your night wakings from Apple Health (iPhone) or Health Connect (Android), and stores them in your journal on your phone. Read-only: nothing is written to these services, nothing is sent. You can withdraw access at any time in the app’s or the phone’s settings | You alone |
| Trends and the “Your plate” (“Ton assiette”) gauge | Calculated on your phone from your journal, with no external service and no online artificial intelligence | You alone |
| “A bug, a question?” message | An email that you write and send yourself from your own email app. It only states the app version and the type of phone; nothing from your journal is attached | EndoQueen, to reply to you |
If your phone’s backup (iCloud or Google) is turned on, your journal is part of it, like your photos or your messages: if you lose your phone, you get it back on the new one. This backup is managed by Apple or Google, on your account, and EndoQueen has no access to it. The passcode and the code linking your phones, however, are not part of it. You can also create an encrypted EndoQueen backup, protected by your password, which you store wherever you like.
Deleting the app, or using “Erase all my data” in the settings, erases your journal from your phone. A phone backup made earlier may still contain a copy, which you manage from your phone’s settings. Remember to export your summary first.
Subscription
The subscription and its free trial go solely through Apple (App Store) or Google (Google Play). EndoQueen receives neither your name, nor your email address, nor your bank details, and has no purchase server. The app simply reads, on your phone, the status of your subscription provided by the store, and keeps it in memory on the phone so that it works offline. The subscription terms are in the terms of use.
The link with your partner (“Côté Lui”, His side)
You choose what he sees (the day’s pain, periods, areas, calendar) and you can pause sharing at any time. Never shared: intimacy, mood, sleep, notes, questions for the doctor. On his side, his feelings and his load stay on his phone; only his observations and his words are sent to you, if he chooses.
The exchange happens in two ways:
- By QR code, face to face: nothing goes over the internet.
- By automatic sync, switched on as soon as your two phones are linked (you can turn it off in the settings): the phones leave messages encrypted before they leave on our relay
endoqueen.fr/pont, hosted in France by OVHcloud. The encryption key is created when your two phones are linked and is never sent to EndoQueen. It is stored in the phone’s secure keychain, outside its backup. The relay only sees unreadable content and a technical mailbox identifier. Like any website, our host records the IP address of connections in its technical logs. Each message is deleted as soon as it is received, and an automatic clean-up removes any older than 14 days. To let you know when your partner sends you a message, the relay also keeps the technical notification identifier of each linked phone. It uses it to send a generic alert with a fixed text, passed on via Expo’s notification service, then Apple or Google, without any content from the message. This identifier is never recorded in a log; it is deleted when you turn off sync, when the link is revoked, and at the latest after 90 days without use. - App updates (from version 1.4): at launch, the app asks our server
endoqueen.fr, hosted in France by OVHcloud, whether there is a fix to install. This request contains no data from your journal: it states the app version, the type of phone and a technical installation identifier, which we do not record. Each fix is signed, and the app refuses any update that does not carry our signature.
News and studies. The app’s Tips tab reads a public file, endoqueen.fr/actus.json, at most once every 6 hours. This read sends nothing from your journal and no identifier: it is the same request for everyone.
Like any website, the host keeps technical connection logs (IP address, date and time) for security, for the period it sets within legal limits. Our relay, for its part, records no IP address.
On the endoqueen.fr website
This section describes the French website endoqueen.fr. The endoqueen.eu website has no audience measurement and no waiting list.
- No cookies, no advertising tracker, no third-party service, no fonts loaded from another site.
- Audience measurement: we count visits anonymously, without cookies (details below).
- Waiting list: if you sign up, we keep your email address and the date of your consent, solely to let you know about the launch. Legal basis: your consent. Retention period: until six months after the launch, or until you unsubscribe.
Audience measurement
To find out whether the website is useful and how people discover it, we count visits with a small in-house tool, hosted on our server in France. It works without cookies.
- What is counted: pages viewed, where the visit came from (the name of the site that brought you here, for example “google.com”, never the full address of the page, or the short name of a share link such as “insta-bio”), clicks on a few buttons (such as “Être prévenue” (“Notify me”) or the sample summary), a number of visitors per day, and per broad family of device (iPhone, Android, tablet or computer, nothing more precise), a number of waiting-list sign-ups per source, and the length and number of pages of each visit, in bands (for example “1 to 3 minutes, 2 pages”) added up into totals.
- What never is: your IP address, your browser, your name, your email, what you type, your location, your path through the website. Nothing is linked to you as a person: the sign-up counter receives neither your email address nor any identifier, only “one more sign-up from such-and-such a source”.
- During your visit: where your visit came from, the number of pages viewed, the time spent and a randomly drawn visit number are kept in your browser tab (session storage), deleted as soon as you close it, and are only sent to this counter. The number is used only to avoid counting the same visit twice: the server keeps it only as an unreadable fingerprint, until the next day at the latest, after which only totals remain.
- How we count visitors without tracking you: your visit is turned into an unreadable fingerprint, calculated with a secret key drawn at random each day. The next day, the key is destroyed: it becomes impossible to know whether you have been here before. At the end of the day, only totals remain.
- No third parties: no Google Analytics or any other external service. The figures stay with us and are neither sold nor shared.
- Retention period: the counters are deleted automatically after 13 months.
- “Do not track me”: if your browser sends the “Do Not Track” or “Global Privacy Control” signal, nothing is counted and nothing is kept in the tab.
This measurement, limited to anonymous statistics, does not require your consent under the rules of the CNIL (the French data protection authority). You can still block it with your browser or a content blocker: the website works just the same.
Your rights
You can request access to, rectification of or erasure of the data we hold (in practice: your address on the waiting list), withdraw your consent or object to its use, by writing to contact@endoqueen.fr. We reply within one month. You can also lodge a complaint with the CNIL (cnil.fr).
As the data in your journal is never transmitted to EndoQueen, we can neither view it, nor recover it, nor erase it on your behalf: it is entirely in your hands.
Health
EndoQueen is a tracking tool. It does not diagnose and does not replace medical advice. In an emergency: 15 [UK: 999] or 112. Dark thoughts: 3114 [UK: Samaritans 116 123].