Privacy policy

1. Introduction

Ignis is published by ALTUS, "we". We are committed to protecting your privacy. This policy explains what information we collect when you use our website and mobile app (the "Services"), why, with whom it is shared and how you stay in control of it.

Creating an account does not mean you agree to receive marketing. The audience measurement setting is at the top of this page: you can change it at any time.

2. Data we collect

2.1 What you give us

• Account: last name, first name, email address and password (never stored in clear text: only an irreversible fingerprint is kept).
• Profile: photo, biography, spiritual preferences and privacy settings.
• What you write: forum messages, private messages, reactions, spiritual combat journals, prayer intentions and messages sent to the team (feedback on an article, opinion about the app).
• Prayer: your flame on the prayer map. The exact spot where you click is never recorded: we only keep a point moved a few kilometres and rounded, and the nearest town of more than 15,000 inhabitants. We also keep the time of your reminder and your prayer minutes.
• Payments: handled by our provider Stripe; we never see or keep your bank details.

2.2 What is collected automatically

• Use: progress in the training, modules followed, minutes of prayer and points. Pages viewed, clicks and site speed are only measured with your consent (audience measurement).
• Technical data: device type, operating system, app version, language and time zone.
• Sign-in: IP address and browser of each signed-in session, with the date and time.
• Cookies and browser storage: described in section 8.

2.3 Signing in with another service

If you sign in with a Google account (or Apple, when this option is offered), we receive what you allow it to share: name, email address and photo.

3. What your data is used for

We use it to:

• Run the Services: your account, the course, prayer and the community
• Personalise your journey (progress, recommendations, language)
• Send you the notifications and emails your account needs
• Protect the Services and the members, moderate content and prevent abuse
• Translate messages automatically, so that everyone reads in their own language
• Measure site traffic, speed and errors to improve the site, only with your consent
• Meet our legal obligations, including accounting
• Any marketing communications require separate consent, which you can withdraw at any time. Non-commercial news about the mission is subject to the right to object described below.

4. Sharing your data

We never sell your data. It is shared only with:

4.1 Our providers

• Hosting: Vercel (United States), which runs the website and the app.
• Database: Neon (Europe), which stores the data.
• Payments: Stripe (PCI-DSS certified), for donations and purchases.
• Emails: account emails are sent through a mail service (SMTP), our campaigns through Resend. If you have agreed to receive our communications, your address, your first name and labels (interests, support for the mission) are also passed on to Systeme.io.
• Audience measurement: PostHog (United States), only if you accept: pages viewed, time spent and scrolling, referring site, clicks without any text, page speed, technical errors, major milestones, device and browser, languages (page, browser, account), time zone and display theme, as well as your IP address, from which PostHog derives your country, your region and your city. Never the content of your messages or your prayers, nor your email address, nor your name: your account is only identified by an internal number.
• Real time: Ably, which tells your screen that a new message has arrived; it does not carry the text of messages.
• Translation and moderation: OpenAI (United States), see section 4.2.
• Phone notifications: Expo, Apple and Google deliver the app’s notifications; they never contain the text of a private message.
• Videos: Vimeo streams the course and testimony videos, without tracking cookies; the few YouTube videos are loaded in privacy-enhanced mode.
• Map backgrounds: some backgrounds of the prayer map come from OpenStreetMap or NASA: your browser then downloads their images directly, as with any online map.

4.2 Automatic translation and moderation

So that everyone can read in their own language and to keep out abusive messages, the text of forum messages, private messages and biographies is sent to OpenAI, which translates it and checks its content. No name or address is sent with the text. We ask OpenAI not to store its responses; according to its terms, these texts are not used to train its models and may be kept for up to 30 days to detect abuse.

4.3 What other members see

Depending on your privacy settings, other members can see:

• Your name, your photo and your biography
• Your forum messages, according to the rights of each category: a restricted space never becomes public, not even through a notification. Your private messages are read only by the two participants in the conversation; administrators and moderators do not read them, except a message that a participant reports to them.
• Your place in the rankings, unless you choose to leave them (invisible mode). Your donations appear in the donors’ ranking as long as you do not turn this off in your settings.

4.4 Legal obligations

We may disclose your information if the law requires it, or to protect our rights, your safety or the safety of others.

5. How long we keep data

We keep your data as long as your account exists, and as long as necessary to:

• Run the Services
• Meet our legal obligations
• Settle any disputes
• Enforce our terms

When you delete your account, we immediately erase your account and everything linked to it: profile, forum messages, private messages (the conversations they belong to disappear for both participants), reactions, flame and prayer minutes, prayer intentions and their entrustments, course progress, points, preferences, contact for our mailings and the measurement of your journey. Only the accounting records of your donations remain, which the law requires us to keep (and which Stripe keeps on its side), reports made about you, detached from your account, and messages sent to the team, without your name or address. Statistics already measured by PostHog remain there under a number that no longer matches any account, and your address may be held by Systeme.io if you had agreed to our communications: on simple request, we erase both.

6. Data security

We take appropriate technical and organisational measures to protect your data:

• Passwords protected by an irreversible fingerprint (scrypt algorithm)
• Encrypted exchanges (HTTPS/TLS)
• Access to data restricted to authorised people
• Regular monitoring and security checks
• Regular data backups
• Technical logs without full email addresses, sign-in tokens or message content

No transmission over the Internet is one hundred percent safe: we cannot guarantee absolute security.

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: get a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: have your data deleted; you can delete your account yourself from your profile
• Right to restriction: limit how your data is used
• Right to portability: receive your data in a structured, commonly used format
• Right to object: object to the use of your data
• Right to withdraw your consent: at any time, without affecting what was done before; for audience measurement, at the top of this page
• Right to complain: to the CNIL (the French data protection authority)

To exercise these rights, write to us at: contact@ignismission.com

8. Cookies and browser storage

We use no advertising cookies. Here is what is stored in your browser:

• Essential: your sign-in session, security, the language you chose, and how you signed up, kept for one day so that we welcome you in the right place.
• Preferences: the theme and display you choose; your device time zone, to write today's date in your time; and your audience measurement choice, kept for six months before you are asked again. Two cookies also keep the same welcome image and the same version of the signup pages from one visit to the next; they are not used for any measurement without your consent.
• Audience measurement, only with your consent: PostHog cookies, kept for one year at most. Without consent, nothing is stored and nothing is sent to PostHog.

You can accept or refuse audience measurement at any time, at the top of this page or in the privacy settings of your profile. Refusing does not change your access.

9. Transfers outside the European Union

Some providers process your data outside the European Economic Area, in particular in the United States (Vercel, OpenAI, PostHog, Stripe, Resend, Expo, Vimeo). These transfers rely on the standard contractual clauses adopted by the European Commission or on the provider’s participation in the EU-US Data Privacy Framework.

10. Protecting minors

Our Services are intended for people aged 16 and over. We do not knowingly collect data about younger people. If you are a parent and think your child has given us information, please write to us.

11. Changes to this policy

We may update this policy. We will tell you about any important change by publishing the new version on this page, with its update date.

We invite you to read it again from time to time to know how your information is protected.

12. Contact us

For any question about this policy or your data, you can write to us:

13. Data controller

The mission is run by the company ALTUS, SIREN number 991 521 659, whose registered office is at 10 cours Maréchal Juin, 33000 Bordeaux, France.