Privacy policy

The data controller is Peyrat Clément (Sole trader (entrepreneur individuel, EI) - French micro-enterprise), publisher of Figurative. For any question relating to your data, you can write to contact@nyters.com.

We only collect the data necessary to operate the service:

• Account: email address, username, display name, and where applicable profile picture and biography.
• Content: recipes, layers, annotations and miniature photos that you create and choose to save or publish.
• Social relationships: follows (the accounts you follow).
• Pro offering: the status of your account (free or Pro), the plan taken out, the transaction identifier and, for the annual subscription, the next renewal date. Payment data (bank card) never passes through our servers: it is processed by our payment providers.
• Technical data: information strictly necessary for operation and security (connection logs, device type).
• Diagnostics: when the application errors or crashes, we record the error message, the application version and the operating system, in order to fix the defect. This data is stored on our own database (Supabase (Supabase Inc.)) and is not sent to any third-party analytics service.

• Providing the service (account creation, recipes, sharing) - performance of the contract.
• Managing the Pro offering, payments and, where applicable, subscription renewal - performance of the contract.
• Ensuring security and preventing abuse - legitimate interest.
• Responding to your requests - legitimate interest.

We do not sell your data. It is shared only with the providers required to run the service:

• Supabase (Supabase Inc.) - hosting, database, authentication and image storage (Data hosted in the European Union).
• Vercel Inc. - website hosting and cookieless audience measurement (see section 9).
• Cloudflare - bot protection on the sign-up and sign-in forms (Turnstile). Your IP address and technical signals from your browser are sent to verify you are not an automated agent; this service sets no advertising cookie and cannot track you across sites.
• OVH - hosting of our mailbox, through which the emails we send you transit (sign-up confirmation, password reset, subscription renewal reminder).
• RevenueCat, Google Play and the App Store - handling of mobile purchases.
• Stripe - payment for purchases made on the web.

Some providers may be located outside the European Union; in that case, transfers are covered by appropriate safeguards (standard contractual clauses).

When you set a recipe to public, its content (title, photos, annotations) and your public profile become visible to other users. A private recipe is visible only to you.

Your data is kept for as long as your account is active. When your account is deleted, your personal data and content are deleted within a reasonable time, unless there is a legal retention obligation (for example, billing data).

In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, objection and portability of your data. To exercise them, write to contact@nyters.com. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

To delete your account yourself, follow the procedure described on the Delete my account page.

We implement technical and organisational measures to protect your data: encryption of communications (HTTPS), secure authentication, and restricted access to images via time-limited signed links.

Figurative only uses cookies that are strictly necessary for the operation of the service: mainly the session cookie that keeps you signed in. These cookies are exempt from consent within the meaning of the CNIL’s recommendations, so no consent banner is required. We do not use advertising cookies or audience measurement trackers for tracking purposes. You can configure your browser to block cookies, but the service may then no longer work properly (you would be unable to stay signed in).

To measure the website’s audience and performance, we use two cookieless solutions that collect no personal data (Vercel Web Analytics and Vercel Speed Insights). They cannot identify you or track you across sites: the first counts page views, the second measures real loading times so that we can fix pages that are too slow. As such, they require no consent.

Figurative is not intended for people under 15. We do not knowingly collect data concerning minors without the consent of the holder of parental authority.

This policy may be updated. In the event of a significant change, we will inform you by appropriate means. The date of the last update appears at the top of this page.