Privacy Policy

1 · Data controller

Muuse — Anne Vergnol (sole proprietor) is the data controller of your personal data under the GDPR.

Contact: support@muusewellness.com

2 · Data collected

• Identity: first name, email address (via Google Sign-in or Sign in with Apple).
• Health: period dates, symptoms, mood, sleep, HRT protocol, declared pathologies.
• Usage: content read, conversations with Éllia, preferences.
• Apple Health (optional): cycle, sleep, steps, weight — read only with your explicit consent, never sent to our servers.

3 · Purposes

• Personalize your cycle phases and advice.
• Operate Éllia (the AI receives a summarized profile, never your past messages in clear text sent to third parties).
• Improve the Application (anonymized statistics).

4 · Legal basis

Explicit consent at onboarding. You may withdraw it at any time by deleting your account from Profile → “delete my account”.

5 · Sub-processors

• Anthropic (Claude Sonnet 4.5): Éllia conversation processing. See section 5-bis for the details of what is transmitted.
• MongoDB Atlas: encrypted data hosting (EU).
• Adapty: subscription management — no health data transmitted.
• Google / Apple: authentication (no health data transmitted).

5-bis · Sharing with a third-party AI service (Anthropic)

What is sent to Anthropic Claude on every exchange:

• The text of the message you send in Éllia.
• An anonymized summary of your context to personalize the answer: tracking mode (cycle, perimenopause, menopause), cycle phase, declared pathologies, contraception, diet, HRT scheme if applicable, and your mood, energy, sleep and symptoms from the past 7 days.
• The previous messages of the same conversation (to keep context).

What is NEVER sent: your first name, email address, birth year, or the free-text notes from your journal.

Who receives it: Anthropic PBC (headquartered in San Francisco, USA), the publisher of the Claude model. Requests are routed through Emergent Integrations, a technical sub-processor of Muuse.

Retention at Anthropic: up to 30 days for API requests (no model training on this data as per their Data Usage Policy — see anthropic.com/legal/privacy).

Your consent: the app asks for your explicit permission before the first exchange with Éllia (blocking dialog). You can revoke this consent at any time from Profile → My data → “Disable AI”.

6 · Retention

Your data is retained as long as your account is active. If you delete it, data is erased within 30 days (barring legal obligations).

7 · Your rights

Access, rectification, deletion, portability, objection, restriction. Write to support@muusewellness.com with the mention “GDPR”. Response within 30 days.

8 · Security

Encryption in transit (TLS 1.3) and at rest. No data is sold or shared for advertising purposes. Muuse does not use third-party trackers.

9 · Data protection authority

In case of persistent disagreement: cnil.fr → “file a complaint”.