1. Who is responsible for your data
Nelynn is published by JBoxConsulting, a French simplified joint-stock company (société par actions simplifiée) registered with the Paris Trade and Companies Register (RCS Paris) under number 940 427 479 (SIRET 940 427 479 00016), with its registered office at 60 rue François Ier, 75008 Paris, France.
JBoxConsulting is the data controller within the meaning of the General Data Protection Regulation (GDPR).
For any question about your data, you can write to us at contact@nelynn.com.
2. The data we process
To work, Nelynn processes the information you explicitly entrust to it:
- Your account — email, login identifier.
- The members of your household — first name, role, date of birth if provided, photo if you add one.
- Your documents — invoices, insurance papers, prescriptions, receipts, and the information Nely extracts from them (amount, date, category, summary).
- Your calendar — events, due dates, reminders.
- Your groceries and pantry — tracked products, lists.
- The things in your household — vehicles, home, pets, if you enter them.
Location (your phone's position) — only if you turn on family location sharing. This feature is optional and off by default. If you turn it on (or accept a sharing request), Nelynn collects your phone's precise (GPS) location, including when the app is closed or not in use (background location access, shown by a permanent notification on Android). This location is used only to: (1) show it on the map to the other authorised adults in the household, or to your parents if you are a minor; (2) detect when you arrive at or leave a place saved by the household (home, school, etc.) and send the matching alerts. Only your last known position is kept: no movement history is recorded. It is never sold, never used for advertising and never sent to the artificial intelligence platform. You can pause or stop sharing at any time in the app (or remove the permission in your phone settings); the last position is then deleted.
App and device check (Android), when an account is created. To prevent accounts from being created automatically by programs (bots), when you create your account on Android, Google Play gives the app an integrity token: proof, signed by Google, that the app really is Nelynn, installed from Google Play, on a certified Android device (and not an emulator or a modified device). Our server has Google decrypt it (Play Integrity service), attaching to it a code derived, in unreadable form, from your account identifier. We keep only the result: certified device or not, recognised app or not, Google Play licence status, any error code reported by the device, and the date of the check. No serial number, IMEI or advertising identifier is received or kept. To limit mass attempts, your IP address is counted in memory for one hour, without being saved with the result. This check is made only when the account is created, never afterwards, and applies only to the Android app. If it fails, account creation may be refused automatically: you can write to contact@nelynn.com to contest this decision and ask for a person to look at your situation. This processing is based on our legitimate interest in protecting Nelynn and its members against abuse.
We collect nothing else without your knowledge: no reading of your other apps, no advertising tracking.
3. Artificial intelligence: exactly what happens
Nely relies on a partner artificial intelligence platform to read your documents and build her suggestions. Here is the real mechanism, as it works in the app:
| When | What is sent to the AI | What happens to it |
|---|---|---|
| A document is imported | The content of the document, and the list of people/vehicles/property/pets in your household (so the document is attached to the right one) — never the full history of your previous documents. | Processed to produce the extraction (amount, date, category), then kept in a short-lived technical cache. |
| A suggestion from Nely | The relevant facts already known about your household (e.g. two events on the same day), rebuilt by our own rules — never your entire history. | Processed to word the piece of advice, then kept in a short-lived technical cache. |
| A question asked to Nely | The household context needed to answer (relevant documents, events, due dates), with the most sensitive documents already stripped down — see section 4. | Processed to generate the answer, then kept in a short-lived technical cache. |
The most important point: it is a cache, never a database.
Technically, what we send to the AI platform is placed in a short-lived cache with a technical lifetime of one hour at most, which is then erased automatically. It is in no way a permanent record: the partner AI platform does not keep your documents or your household information in a lasting database of its own.
The contractual terms of our technology partner also guarantee that nothing that goes through its programming interface (API) is used to train or improve its artificial intelligence models — your data never feeds a system used by other users.
In addition, Nelynn keeps in its own systems (not the AI partner's) a technical history of the answers already obtained, to avoid asking the AI a second time for the same request — a standard optimisation mechanism, hosted and controlled by Nelynn, and subject to the same retention and deletion rules as the rest of your data (see section 7).
4. Your most sensitive documents
Some documents deserve stronger protection, including against artificial intelligence: medical documents, identity documents, any document involving a minor.
For these documents, Nely never sends their detailed content to the AI platform when you ask a question or when she makes a suggestion: only the fact that such a document exists, its general type, and the person it concerns are visible. Nely can thus tell you “your child’s prescription exists, dated 12 May” without ever having sent the AI the diagnosis, the treatment or the dosage it contains.
5. Who has access to your data
- The members of your household whom you invite yourself — never an uninvited third party.
- The partner artificial intelligence platform, only for the time needed to process each request (see section 3).
- Our authentication service, to manage the secure login to your account.
- Our technical hosting provider, which hosts the application’s infrastructure.
- Our subscription management provider (RevenueCat): receives your household identifier and the purchase information needed to manage the subscription; never the content of your documents.
- Google (Firebase): handles sign-in to your account (email address, protected password) and delivers notifications to your phone.
- Google Play: collects payment and manages subscriptions. Nelynn receives no banking data.
- Google (Play Integrity): when an account is created on Android, gives the app proof that the app and the device are genuine and decrypts it for our server; receives nothing from your documents, your household or your conversations with Nely (see section 2).
We never sell, rent or share your data for advertising or commercial purposes.
6. Isolation between households
Each Nelynn household is strictly partitioned: no information from one household is ever visible, even partially, to another household. This partitioning is checked at every level of the application, not just assumed at the interface level.
7. Retention period
Your data is kept for as long as your household remains active. If you delete a document, an event or your whole household, the deletion is cascading: everything that depends on it (linked due dates, reminders, related entries) is erased with it, not left orphaned.
Two years of inactivity. A household is considered inactive when none of its members has used Nelynn for 2 years. It is then permanently deleted, together with its documents, its photos and its members' account information (email address, first name, notification settings). Accounts that are not attached to any household are deleted the same way after 2 years without signing in. Where possible, we warn you with an in-app notification about 30 days, then 7 days, before deletion; simply opening Nelynn starts a new 2-year period.
What is not deleted automatically. A household with a subscription in progress, or that still holds unused purchased credits, is kept for as long as that situation lasts, because Nelynn is then providing the service you paid for. A cancelled subscription does not have this effect: read-only access remains available with no time limit, but the 2-year inactivity rule applies.
You can ask for the complete deletion of your account and your household at any time (see section 8).
Deletion on request. You can delete your account and your data at any time, from the app (Profile and settings, Account section, "Delete my account") or by following the procedure on the account deletion page. Deletion is immediate on our servers; backup copies, which are used only to restore the service after an incident, disappear within 30 days at most.
Your location (if you turn sharing on) is kept only as the last known position, replaced with every new reading; it is deleted as soon as you stop sharing, leave the household or delete your account.
App and device check. The result (see section 2) is kept for as long as your account exists and is deleted with it; counters with no personal identifier (number of checks per day and per result) are kept for 90 days.
8. Your rights
Under the GDPR, you have the following rights over your data:
- Right of access — obtain a copy of the data we hold about you.
- Right to rectification — correct inaccurate information.
- Right to erasure — ask for your account and your data to be deleted.
- Right to data portability — get your data back in a reusable format.
- Right to object and to restriction — object to a processing or ask for it to be restricted.
To exercise any of these rights, write to us at contact@nelynn.com. You also have the right to lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
The simplest way to exercise your right to erasure is from the app, or by following the account deletion page.
9. Security
Exchanges between the app and our servers are encrypted. Access to your data is strictly limited to the members of your household whom you have invited, checked on every request rather than assumed once and for all. Account creation is protected against bots by a check of the app and the device (section 2).
11. Contact and updates to this policy
This policy may change, in particular as Nelynn prepares for its public launch. The date of the last update is shown at the top of this page. For any question: contact@nelynn.com.