Privacy Policy — Captaine
Last updated: 22 October 2026.
Data controller: YOM AKAKPO EI (trading as Leandre), sole proprietorship, SIREN 988 336 905, 60 rue François 1er, 75008 Paris, France — publisher of Captaine. Contact: contact@leandre.io.
Captaine is an artificial-intelligence coach: it talks to you, gives you missions, looks at the photos that prove them and comes back on its own. To do that, the app has to process information about you. This page says which, why, with whom, and how you can erase it.
1. What we collect
| Data | Why | When |
|---|---|---|
| E-mail address | Create your account and send you the sign-in code (no password) | At sign-in |
| Messages with your coach and coach settings (name, voice, insistence, quiet hours, truce) | Run the conversation and decide when it comes back | When you write |
| Missions (title, deadline, status) | Show them to you and track what you proved | Created by the coach or by you |
| Proof photos and the result of their analysis (verdict, markers, advice) | Validate or refuse a mission | When you send a photo |
| Proof videos: 5 images extracted on your phone from a video of 5 seconds or less (the video itself never leaves your phone) | Validate or refuse a mission | When you send a video |
| Media information: date and device it was taken with, duration, in-app camera or gallery, software written in the file (e.g. an image editor) | Spot an old, edited or internet-sourced proof | When you send a photo or video |
| Your location, once, only for a mission tied to a place (e.g. a gym): your phone's position when you take the proof, or the one the file carries | Check that the proof was taken at the mission's place | Only if you allow location; refusing blocks nothing |
| What the coach remembers about you (e.g. "knee injury") | Talk to you accurately; you can see it all and make it forget | During the conversation |
| Calendar events (title, times) | Schedule a follow-up after an appointment | Only if you allow calendar access |
| Slots set by your coach (title, times) | Add to your calendar, on your phone only, a time you agreed on; you can undo it in one tap | Only if you allow writing to the calendar |
| Notification token and device name (e.g. "Android") | Send you your coach's notifications | If you allow notifications |
| IP address and e-mail of code requests | Limit abuse (brute-force protection) | Each code request |
| Preferences (notifications, lock-screen content, sound) | Respect your choices | When you change them |
We do not collect your contacts or an advertising ID, and we read your location only in the single case described above: it is never stored (neither in the database nor in logs) and never sent to the AI. We use no third-party advertising or analytics tools.
2. Who processes your data
- Our server (OVHcloud, dedicated server in Gravelines, France): account, messages, missions, coach memory.
- S3-compatible object storage (Garage, on the same OVHcloud server in France): your proof photos.
- DeepSeek (
api.deepseek.comAPI): the text of your messages, missions, what the coach remembers and, if you allowed calendar access, event titles, to write replies, follow-ups and the daily summary; and the photo you send as proof (or the 5 images of your video), with the mission title and the media information described above, to produce the verdict (only proofs are sent). For a mission tied to a place it also receives the names of places listed nearby (for example "gym", "home"), never your coordinates. DeepSeek is a company established in China: this text and these photos therefore leave the European Economic Area. China has no adequacy decision from the European Commission: this transfer relies on its necessity to provide the service you ask for (Article 49(1)(b) GDPR). - OpenStreetMap (Overpass service, public instances) and, when enabled, Google (Google Places): for a mission tied to a place, our server asks them which places are listed around your position. They receive the position rounded to about ten metres, sent from our server, without your e-mail or any identifier, and return names of public places.
- Google (Google Cloud Vision, reverse image search): when a photo or video comes from your gallery and has no capture date, no device, or carries the trace of an editing program, that image is sent to Google to find out whether it already exists on the Internet. A photo or video taken with Captaine's own camera is never sent to Google. According to Google's documentation (https://docs.cloud.google.com/vision/docs/data-usage, updated 20 October 2026), the image of an online request is processed in memory and not persisted, Google does not use it to train its products and does not share it; it temporarily logs request metadata (time, size). That documentation does not state the processing country: assume it may take place outside the European Economic Area.
- Expo (Expo Push Service) and Google (Firebase Cloud Messaging): deliver notifications. They contain the coach's name and, unless you choose to hide it in Settings, the beginning of the message.
- Zoho Mail (Zoho Corporation), e-mail sending: the sign-in code.
We do not sell your data and do not share it for advertising. AI models are used to produce replies and verdicts.
What DeepSeek says itself (privacy policy last updated 10 February 2026, https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html): it collects, processes and stores data in China; it may use the content you enter to train and improve its models, with a right to object by writing to privacy@deepseek.com; it sets no specific retention period. That policy does not clearly say how these rules apply to API calls, and we have no written guarantee to the contrary from DeepSeek: assume your messages and proof photos may be retained there and used to train its models.
3. How long
- Account, conversations, missions, photos, coach memory: until you delete your account or the coach concerned. For a proof video, only the 5 extracted images are kept.
- Your location: not stored. It is used for the time of the check, then disappears; only the verdict remains.
- Sign-in codes: expire after 10 minutes; deleted after 7 days.
- IP address and e-mail of code requests: deleted after 30 days, and immediately when the account is deleted.
- Session tokens: 1 hour (access) and 30 days (renewal); deleted at sign-out.
4. Deleting your data
- A coach: coach page → "Delete": its conversation, missions, proofs, memory and planned returns are erased.
- Your whole account: Settings → My account → "Delete my account", by typing your e-mail. Your coaches, conversations, missions, memory, devices and photos are erased. Photos are removed from storage; if storage is briefly unavailable, deletion is retried until it completes.
- What the coach remembers: coach page → "What it keeps in mind" → forget, item by item.
- By e-mail if you can no longer open the app: contact@leandre.io. The full step-by-step is on the account deletion page.
No backups are kept at this time. If we set some up, they will be erased within 30 days.
5. Your rights
Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time (for example by refusing calendar, location or notifications in your phone settings). Write to contact@leandre.io. You may also lodge a complaint with your data-protection authority.
6. Security
Exchanges with the server are encrypted (HTTPS). Sign-in codes are stored hashed with limited attempts; session tokens are stored only as fingerprints. Your photos are stored under an address containing a random identifier; only people who have the exact address can view them (they are not listed or indexed).
7. Minors
Captaine is intended for people aged 16 and over. It is not intended for anyone under 16: if we learn that an account belongs to someone under 16, we delete it, with all its data.
8. What Captaine is not
Captaine is not a medical service or psychological care. The coach's answers are generated by an AI and may be inaccurate.
9. Changes
We will tell you in the app about any significant change to this policy.