1. What is this page for?
This page explains what data Mediblation processes, why it is processed, how long it is kept, and the choices you retain.
2. Data controller
Lionel Blavy is the controller for data related to Mediblation. For any question or request about your personal data, write to contact@blavy.eu.
3. Local use by default
Mediblation can be used without an account. In this mode, sessions, saved sessions, history, and local motion data remain on your phone, unless you explicitly export or share them locally.
4. Local data during sessions
During a session, Mediblation may record locally:
- information about the session;
- raw phone motion data from the accelerometer and gyroscope;
- technical events related to the session;
- visual feedback at the end of the session.
5. Data used with online services
If you sign in and then enable online synchronization, Mediblation may send:
- a technical account identifier;
- your sign-in email address;
- session data used for tracking;
- raw motion data associated with sessions;
- minimal technical logs useful for troubleshooting, if you enable that separate option.
6. Where the data comes from
Session, motion, and diagnostic data comes from your use of the app. Account information is provided when you sign in. If you choose Google sign-in, Google provides the account information needed for authentication, including your email address and an account identifier.
7. Why the data may be used
- to operate the online account and synchronization you requested;
- to retrieve your session and motion data through online services;
- to improve the app using minimal technical logs, if you enable that option;
- to improve future meditation guidance features still in development, if you enable online synchronization.
8. Legal basis
- account and online service management: performance of the service you requested;
- online synchronization of session and motion data: your explicit choice;
- online technical logs: your explicit choice, separate from the main synchronization.
9. Recipients and service providers
Data is not sold. It is accessible only when needed to operate, support, or maintain Mediblation.
- Supabase provides authentication, database, storage, and functions used by online services;
- Google is involved only if you choose Google sign-in;
- Infomaniak hosts the public website, domain name, and public email addresses.
10. International transfers
Depending on the service selected, some providers may process data from a country outside the European Economic Area. When such a transfer is necessary, it must be covered by the safeguards provided by the service provider and applicable regulations.
11. How long data is kept
- local data: until you delete it locally;
- synchronized session and motion data: while your online account exists, unless deletion is requested;
- synchronized technical logs: kept briefly for troubleshooting, with a target maximum of 30 days.
12. Your choices and rights
- use the app without an account;
- sign in without enabling online synchronization;
- enable or disable session and motion data synchronization later;
- enable or disable technical log sharing separately;
- request an export of your online data by email in a structured, machine-readable format;
- delete your online account and associated data from the app or the Account deletion page.
You may also request access, correction, deletion, restriction, or portability of your data, withdraw your agreement to optional processing, and object to processing where that right applies.
To exercise these rights, write to contact@blavy.eu. Reasonable identity verification may be requested when necessary. You will receive a response as soon as possible and no later than one month. This period may be extended by two months for a complex request or a high number of requests; you will then be informed within the first month.
You may also lodge a complaint with the French Data Protection Authority (CNIL).
13. Contact
For any privacy question, online data export request, or other rights request, write to contact@blavy.eu or use the Contact page.