Privacy Policy for Mouture

1. In short

Mouture is designed to keep your data on your device. We do not require an account, we do not build a profile of you, and by default we collect no analytics or usage data about you.

A small number of clearly listed features connect to the internet — the weather forecast, the one-time download of the on-device AI model, purchases and subscription status, remote configuration, email if you connect an account, and (only if you opt in) anonymous diagnostics. Everything else — your app usage, calendar, contacts, notes, and every AI conversation — is processed locally and never leaves your phone.

Two of those calls are not optional and we would rather say so plainly: the subscription check runs on every launch for every user, and remote configuration is fetched when the app checks the AI model catalogue. Neither carries anything personal, but neither is covered by the diagnostics opt-in either.

You can verify these claims in the app’s Privacy Center (Settings → Privacy), which shows a live view of what Mouture accesses and lets you delete on-device data at any time. For the network side, Every connection Mouture makes lists each host and shows you how to capture the traffic yourself.

2. Who is responsible for your data

The data controller for any personal data processed through Mouture is:

Advisely

35 rue Pouchet, 75017 Paris, France

hello@doppio-lab.com

For most of what Mouture does, there is no controller relationship at all, because the data is processed entirely on your device and is never transmitted to us or anyone else.

3. Data processed only on your device (never transmitted)

The following are read and used exclusively on your device. They are not sent to us, and we have no ability to access them:

The AI assistant runs a language model locally using Google AI Edge LiteRT-LM. Your prompts and the assistant’s answers are processed on the device’s own hardware and are not sent to any server for inference.

4. Data that may leave your device

Mouture connects to the internet only for the specific purposes below. Each one is limited to what the feature strictly needs. A plain-language version of this section, with the exact hosts, when each one fires, and how to verify the traffic yourself, is on Every connection Mouture makes.

4.1 Weather (approximate location)

To show local weather, Mouture sends your approximate (coarse) location to Open-Meteo (api.open-meteo.com), a free, key-less weather API. No account or precise GPS location is used, and the request contains no identifier that ties it to you.

4.2 On-device AI model download

When you tap Download for the AI assistant — which only happens after you subscribe to Mouture Pro, never on install — Mouture downloads the model file (~557 MB) from Hugging Face (huggingface.co). This is a standard file download; nothing about you is sent beyond the request metadata any download carries, and once downloaded the model runs fully offline. The download location is read from remote configuration (see 4.4) so a model can be corrected without an app update.

4.3 Optional diagnostics — off by default

If — and only if — you turn on “Usage analytics & crash diagnostics” (Settings → Privacy Center), Mouture shares anonymous feature-usage events and crash reports through Google Firebase Analytics and Firebase Crashlytics to help us fix bugs and improve the app. This setting is disabled by default and can be turned off at any time. We never include your notes, messages, contacts, calendar content, or anything that identifies you.

4.4 Remote configuration

Mouture uses Firebase Remote Config to fetch non-personal configuration — specifically the AI model catalogue (the model’s URL, version, size and checksum). This fetch happens when you tap Download for the model, not at launch. It is not covered by the diagnostics consent in 4.3: it is a functional call, and it involves a Firebase installation identifier managed by Google’s SDK. That identifier does not identify you personally.

4.5 Purchases and subscriptions

The RevenueCat SDK is initialised when Mouture starts and asks whether this installation has an active Pro entitlement. This happens on every launch, for every user, including users who have never purchased anything, because the app has to know which features to unlock. RevenueCat receives a pseudonymous app-user identifier and, if you have purchased, purchase metadata. It is not covered by the diagnostics consent in 4.3.

The purchase itself is handled by Google Play Billing. Payment card details are handled by Google and are never seen by us.

4.6 Email (opt-in)

If you connect an email account, Mouture acts as a plain IMAP client: it connects directly to the mail server you specify (for example imap.gmail.com) to fetch your messages, and syncs periodically — roughly every 30 minutes — while an account is connected. Your credentials are stored on the device, encrypted with the Android Keystore, and your messages are stored on the device.

This traffic goes to your mail provider, chosen by you. It does not pass through any server operated by us, and we never see your credentials or your mail. The email module is off by default; removing the account stops the syncing and deletes the locally stored messages.

4.7 Alpha waitlist (this website, not the app)

The form on the home page is the one place this site collects anything. If you submit it, we store your email address, the fixed string landing and a timestamp, in a Firestore database inside our own Firebase project. There is no mailing-list provider, no embedded third-party form and no tracking pixel; the page posts directly to our project. We do not store your IP address, and the site sets no cookies.

We use the address for one thing: sending you the alpha invite and install instructions. It is not added to a newsletter and is never shared. The legal basis is your consent (Art. 6(1)(a)), given by submitting the form; email hello@doppio-lab.com at any time to have it removed, and we delete the whole list once the alpha closes.

5. Permissions we request and why

You can grant or revoke each permission at any time in Android system settings. Denying a permission disables only the feature that needs it.

6. Legal bases (GDPR / UK GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Consent (Art. 6(1)(a)) — optional diagnostics, contacts search, calendar-usage correlation, and any feature you explicitly opt into. You may withdraw consent at any time.
• Performance of a contract (Art. 6(1)(b)) — processing needed to provide a paid subscription you requested.
• Legitimate interests (Art. 6(1)(f)) — keeping the app secure and functioning (e.g. crash diagnostics you enabled, fetching remote configuration).

7. Third-party services (sub-processors)

We do not sell your personal data. We do not share it with third parties except through the services strictly required to run the features above:

8. Data retention

• On-device data is kept until you delete it. You control the raw-activity retention window in the Privacy Center, and older events are pruned automatically. “Delete my data” wipes all activity, predictions, and learned patterns from the device.
• Opt-in diagnostics are retained by Google/Firebase according to their standard retention settings.
• Purchase records are retained by Google and RevenueCat for as long as needed to manage your entitlement and meet legal/accounting obligations.
• Alpha waitlist addresses (§4.7) are kept until the alpha closes, then deleted in full. Ask us sooner and we remove yours on request.

Uninstalling Mouture removes all on-device data.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability.

• Most of your data never reaches us — you can exercise these rights directly, on the device, via the Privacy Center (view, restrict retention, and delete).
• For any personal data a third party above holds, you may contact that provider directly or contact us at hello@doppio-lab.com and we will assist.

For EEA/UK users (GDPR): you also have the right to lodge a complaint with your local data protection authority.

For California users (CCPA/CPRA): we do not sell or “share” your personal information, and we do not use it for cross-context behavioral advertising. You may exercise your rights by contacting us at hello@doppio-lab.com. We will not discriminate against you for exercising them.

10. Children’s privacy

Mouture is not directed to children under the age of 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

Your data is stored in the app’s private storage on your device and protected by Android’s application sandbox and the device’s own security (lock screen, encryption). Network requests use HTTPS. Because most processing is local, the primary safeguard for your data is the security of your device itself. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. International data transfers

The optional third-party services above (Google, RevenueCat, Hugging Face, Open-Meteo) may process data on servers located outside your country, including the United States. Where required, these transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses, as described in the providers’ respective privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Effective date” and, where appropriate, announced in the app or on our store listing. Continued use of Mouture after an update constitutes acceptance of the revised policy.

14. Contact

Questions or requests about this policy or your data:

Advisely

35 rue Pouchet, 75017 Paris, France

hello@doppio-lab.com