Last updated : July 12, 2026

Aria Coach is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller is LuDoMaTiQuE SASU, SIRET 992 243 857 00016, VAT FR45992243857, headquartered at 19 rue Saint Jean, 52 000 Chaumont, France, contactable at: contact@aria-coach.chat

2. Data Collected

We collect the following data:

• Identification data: Email address (for authenticated accounts)
• Navigation data: Technical cookies, user preferences
• Interaction data: Messages exchanged with the chatbot
• Progress data: Metrics related to your smoking cessation journey
• Technical data: IP address, browser type, session data
• Assessment data: your state of mind (motivation, craving, confidence) inferred from your messages to adapt the coaching
• Coaching memory: end-of-session notes (summary, topic to pick back up), exact quotes of your own words and recurring themes, used to personalise your follow-up over time

3. Processing Purposes

Your data is used to:

• Provide the anti-smoking coaching service
• Personalize your interactions with Aria
• Save your preferences and progress
• Manage your user account (if created)
• Ensure security and proper functioning of the service
• Comply with our legal obligations

4. Legal Basis

The processing of your data is based on your consent (voluntary use of the service) and on the execution of the service contract (provision of coaching). Technical data is processed on the basis of our legitimate interest in ensuring the proper functioning of the service.

5. Data Retention

• Anonymous users: Data deleted after 90 days of inactivity
• User accounts: Data retained for the duration of the account + 3 years
• Technical data: Retained maximum 12 months
• Chat messages: Retained maximum 2 years
• State-of-mind assessments: kept for a maximum of 12 months, then automatically deleted
• Coaching memory (session summaries, quotes, themes): kept for the lifetime of the account, deleted with it

6. Data Recipients

We never sell your data and never share it with any third party for commercial purposes. It is only processed by the subprocessors needed to run the service:

• Hosting and infrastructure: Vercel, Supabase
• Conversational artificial intelligence: OpenAI, Anthropic
• Payment: Stripe
• Bot protection: Cloudflare (Turnstile)
• Legal authorities: only where legally required

7. Your Rights (GDPR)

You have the following rights:

• Right of access: Know what data we have about you
• Right to rectification: Correct your personal data
• Right to erasure: Request deletion of your data
• Right to restriction: Limit the processing of your data
• Right to portability: Retrieve your data in a readable format
• Right to object: Object to processing (except for legal obligation)
• Right to lodge a complaint: File a complaint with the data protection authority

To exercise your rights: Contact us at contact@aria-coach.chat with proof of identity.

8. International Transfers

Some of your data is processed by providers located outside the European Union, in particular in the United States: OpenAI and Anthropic (conversational AI), Stripe (payments) and Vercel (application hosting). These transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, by the EU–US Data Privacy Framework. Data stored in our database (Supabase) is hosted within the European Union.

9. Security

We implement appropriate technical and organizational measures: restricted data access and strict access controls.

10. Cookies

We use technical cookies necessary for the operation of the service. For more information, see our Cookie Policy.

11. Modifications

This policy may be updated. Important changes will be notified to you by email or on the site. The date of last update is indicated at the top of this page.

12. Contact

For any questions regarding this privacy policy:

Email : contact@aria-coach.chat
Subject : "Data Protection - GDPR"