Privacy Policy
Effective date: October 1, 2026
This policy explains what personal data the Gulpes mobile app (iOS and Android), the Gulpes content sites (self.gulpes.com and courses.gulpes.com) and this website process, why, for how long, and the choices you have. Gulpes ("we", "us") is the controller of this data. Contact: contact@gulpes.com.
Gulpes is built to work without an account. Most of what the app knows about you (your reading history, progress, streaks, daily goal, journal, saved quotes and settings) is stored only on your device and never sent to us.
1. Data that stays on your device
Reading history and progress, saved articles, daily activity, streaks and badges, your 7-day path, your journal (reflections and saved quotes), your nickname, interests, language, theme, reminder time and other settings are kept in the app's private storage on your phone. They may be included in the backups your operating system makes (iCloud or Google backup) under the terms of Apple or Google. Reminders are scheduled locally by your phone. Deleting the app deletes this data.
2. Data we process, and why
Account (optional)
If you sign in with Apple or Google, Firebase Authentication (Google) receives your account identifier, name, email address and profile picture as shared by Apple or Google. We use them to keep you signed in, to attach your likes and comments to you and to restore your account on a new device. Legal basis: performance of the service you request.
Likes
When a signed-in user likes an article, your account identifier is stored with that article in Firebase Realtime Database so that the like count is correct and you see your own likes. Legal basis: performance of the service.
Comments
When you post a comment, your display name, email address and the text of the comment are sent to our content site (WordPress, hosted by Hostinger). Comments are moderated before publication; only your display name, the date and the text are published. You can report a comment or hide an author from the app. Legal basis: performance of the service and our legitimate interest in moderating the discussion.
Subscriptions
Purchases are processed entirely by Apple (App Store) or Google (Google Play). We never see your payment details; the app only receives from the store whether a subscription is active, which product it is and its renewal status. When your subscription is active, the app downloads premium articles from our content site. Legal basis: performance of the contract.
Notifications
If you allow notifications, OneSignal receives a push token for your device and a OneSignal identifier, together with a few tags that help us send relevant messages: app language, free or premium, subscription product, current streak length, date of last activity, daily goal and, on Android, the campaign that brought you to the app. Legal basis: your consent (the system permission), which you can withdraw at any time in your phone's settings. Daily reminders, streak alerts and weekly recaps are local notifications created on your phone.
Crash reports
Firebase Crashlytics receives technical reports when the app crashes: stack trace, device model, operating system and app version, and an installation identifier. They never contain your journal, your comments or your searches. You can turn crash reports off in You > Settings > Privacy. Legal basis: our legitimate interest in fixing faults. Reports are kept for 90 days.
Usage statistics (only with your consent)
On first launch the app asks whether you agree to share anonymous usage statistics; refusing is as easy as accepting and you can change your mind in You > Settings > Privacy. Only if you accept, Google Analytics for Firebase records a small set of events (for example: onboarding completed, article opened or finished, audio started, idea of the day viewed, path started, paywall viewed, purchase started, share, reminder opened) with an app instance identifier. We do not use it for advertising and we do not sell data. Legal basis: your consent. Retention: 14 months.
Content and media requests
To show articles, images and audio, the app contacts self.gulpes.com, courses.gulpes.com and the image service i0.wp.com; like any web request, these servers see your IP address and technical headers for the time needed to answer and to keep them secure.
This website
gulpes.com uses no cookies and no analytics. It loads its fonts from Google Fonts, which receives your IP address when you visit.
3. Processors and transfers
We rely on Google (Firebase Authentication, Realtime Database, Crashlytics, Analytics), OneSignal, Apple and Google for purchases and backups, and Hostinger for the content sites. Some of these providers process data in the United States; transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We never sell personal data or share it for advertising.
4. How long we keep data
Account data and likes: until you delete your account. Comments: until they are removed, by you on request or by moderation. Notification data: until you disable notifications or uninstall the app, then as long as OneSignal keeps inactive devices. Crash reports: 90 days. Usage statistics: 14 months.
5. Your rights and choices
You can use the app without an account, refuse usage statistics, turn crash reports off, disable notifications and read offline. To delete your account, go to You > Account > Delete my account in the app: this deletes your Firebase account and your likes; you can also email us. Depending on where you live (for example under the GDPR, Quebec's Law 25 or the data protection laws of Senegal, Côte d'Ivoire, Cameroon or Morocco), you have the right to access, correct, delete and receive a copy of your data, to object to processing based on legitimate interest and to withdraw your consent at any time. Write to contact@gulpes.com; we answer within one month. You can also complain to your data protection authority, such as the CNIL in France.
6. Children
Gulpes is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
7. Security
Data is encrypted in transit (HTTPS) and access to our back-office tools is restricted. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of any breach as the law requires.
8. Changes
We will update this page when our practices change and show the new effective date at the top. Significant changes will also be announced in the app.
Contact us
Questions about this policy or your data: contact@gulpes.com.