Cliché: Privacy Policy

Last updated: July 28, 2026 · Effective: July 28, 2026

Cliché's privacy posture isn't a paragraph in a policy, it's the shape of the product. There is no public feed. There is no map. The only thing another person ever sees about you is your profile and what you shared on the moments you had with them. Everything below is a more careful version of that promise.

1. Who is responsible

Disket France, the company behind Cliché.

The data controller for the personal information described in this policy is Disket France, a French simplified joint-stock company (société par actions simplifiée) with share capital of €1,000, registered with the Paris Trade and Companies Register (RCS Paris) under number 944 134 329, with registered office at 67 rue d'Aboukir, 75002 Paris, France. Disket France is the controller under the EU and UK General Data Protection Regulation. You can reach us at hello@disket.app.

2. The data model

Exactly the fields Cliché has, what each one is for, and who can see it.

This is everything Cliché stores about you. If a category isn't on this list, we don't have it.

Field	What it is	Visible to
Phone number or Apple ID	Used to sign you in and let your friends find you if they have it.	You and us
First name	How friends recognise you.	Your friends
Username	Your unique handle.	Your friends
Profile picture (optional)	One image of your choosing.	Your friends
Bio (optional)	A short line about you.	Your friends
Friend list	The set of users you have mutually accepted as friends.	You only
In-person moments	Bluetooth-detected meets between you and a friend. Stored as start time, friend identifier, and a bucketed duration (15 min / 30 min / 1 h / N h).	The friends in the moment
In-app call moments	Start time, friend identifier, call duration. No audio.	The friends in the call
Comments (optional)	Text either friend can add to a moment you shared. Stored in your account so they survive reinstalls.	The friends in the moment
Photos attached to a moment (optional)	Images either friend attaches to a moment you shared, stored on our servers. (Photos matched from your own library by time are shown only on your device and never uploaded.)	The friends in the moment
Likes on shared moments	A binary signal: liked or not.	The friends in the moment
Monthly goal	The number of monthly moments you set for yourself.	You only
Snooze-when-together preferences	Which friends trigger Focus Mode when nearby.	You only
Device + diagnostics	Device model, OS version, app version, language, crash logs.	Us, in aggregate
Usage events	Which screens you open and which actions you take in the app (a photo was taken, a friend was added), with no photo, no message and no name attached. Section 8.1 describes them in full.	Us, in aggregate

3. How a moment gets recorded

Two paths: Bluetooth proximity, and in-app calls.

3.1 Bluetooth proximity

While Cliché is running (including in the background, if you have granted Bluetooth permission), your device advertises a rotating Cliché identifier and listens for the identifiers of others. When two devices belonging to mutual friends detect each other for long enough to count as a meet, each device records a moment locally and syncs it to our server. We store: the two user identifiers involved, the start time, and an approximate, bucketed duration ("15 min", "30 min", "1 h", "N h"). We do not store the latitude, longitude, address, venue name or any other location data. Bluetooth proximity tells us "these two phones were close to each other"; it tells us nothing about where.

3.2 In-app calls

When you place or receive an audio call to a Cliché friend inside the app, we record a moment with the participants, start time and call duration. The audio of the call is never recorded, never transcribed, and never transmitted to our servers. Call audio flows peer-to-peer (or through a transient relay when peer-to-peer fails) and is discarded the moment the call ends.

4. What we never collect

A short list of things people often assume social apps collect. We don't.

• Your precise GPS location. Cliché does not request the iOS location permission and does not read your coordinates.
• The content of phone calls. No audio, no transcript.
• Your address book, unless you explicitly grant Contacts access from the friend-finder. If you do, we match contact phone numbers against Cliché accounts and discard the unmatched data.
• Your camera roll beyond the photos you choose to attach to a profile, comment or moment.
• Your biometric data. No faceprint, no voiceprint.
• Your location inferred from your IP address. Analytics tools normally turn an IP into a city and a pair of coordinates by default. Ours is explicitly instructed not to, on every single event, and the raw IP is discarded rather than stored. An app built on physical proximity is the last place that should quietly accumulate a location history.
• Your activity in other apps. We do not run cross-app SDKs or read your iOS advertising identifier.
• Your browsing on other websites. We run no advertising pixel, no retargeting tag and no cross-site tracker, so nothing of ours follows you off our own pages. Our website counts visits to its own pages, without a cookie and without identifying you — section 8.2 says exactly how.

5. How we use the data

Only to make Cliché work, keep it safe, and improve it.

• Operate the Service: build your private timeline, detect meets, deliver mutual-like signals, render your profile and statistics, send the notifications you opted into.
• Authenticate you and protect your account.
• Prevent abuse, fraud and harm to you, to other users, and to the Service.
• Diagnose bugs using crash reports and aggregated, non-identifying performance metrics.
• Understand which features work, from the usage events and masked session recordings described in 8.1 — never to profile you or to sell anything.
• Comply with the law when we have a valid legal obligation.

We do not profile you, score you, or use your data to nudge your behaviour inside the app.

6. Legal bases (EEA / UK users)

For each kind of processing, the legal basis we rely on.

• Performance of a contract for everything required to deliver Cliché to you (account, moment recording, mutual likes, comments, calls).
• Legitimate interests for security, anti-abuse, diagnostics and product improvement — including the usage events and masked session recordings of 8.1, kept pseudonymous, location-free and inside the EEA precisely so that the balance against your rights holds. You can object at any time by writing to us, and we will exclude your account.
• Consent for optional device permissions (Bluetooth, Contacts, Photos, Microphone, Notifications) and for any future opt-in feature. You can withdraw consent at any time in iOS Settings or in the app.
• Legal obligation when we have to retain or disclose information in response to a valid legal request.

7. What other Cliché users can see about you

A short list, and all of it is pairwise: only the friend who was in the moment with you.

1. Your profile fields (first name, username, optional bio, optional profile picture), visible to users you have accepted as friends.
2. The fact, time and bucketed duration of a moment you shared with others, visible to its participants only.
3. Photos you attach to a shared moment, visible to the friend in that moment only.
4. Comments on a shared moment, visible to the friend in that moment only.
5. Whether you have liked a specific shared moment, visible to the friend in that moment only.

That is the complete list, and every item is limited to the one friend you shared the moment with. Your full timeline, your monthly goal, your heatmap, your snooze preferences, and your moments with other friends are not exposed to any other user, ever. There is no public feed and no friends-of-friends visibility.

8. The infrastructure we use

A small number of providers, each bound by a data-processing agreement.

Provider	What they do	Region
Supabase	Hosts our database, authentication and file storage.	EU
Cloudflare	Edge networking and DDoS protection.	Global edge
Apple Inc.	App Store distribution, push notifications (APNs), Sign in with Apple.	USA / global
PostHog	Product analytics: which features are used, where people get stuck. See 8.1.	EU (Frankfurt)

If we ever add another provider that handles personal data, we will update this list before we start using them.

8.1 Product analytics and session replay

We measure how the app is used, in Europe, without your location, and with your photos and your camera blacked out of every recording.

Cliché is a small team's product and we need to know which parts of it work. The app therefore sends usage events to PostHog: a fixed list of named actions ("the camera was opened", "a friend was added", "the album was viewed"), each attached to a random identifier, your app version, your device model and your language. They never carry a photo, a comment, a friend's name, a phone number or an email address.

Three choices matter more than the list itself:

• The data stays in Europe. PostHog processes it in its Frankfurt region, under a data-processing agreement. It never leaves the EEA.
• No location, at all. Every event we send explicitly disables the IP-to-location lookup that analytics tools perform by default, and IP addresses are anonymised before storage. We hold no city, no coordinates, no country derived from your network — the only geographic hint we keep is the region setting of your own device ("en_FR"), which you control in iOS Settings.
• Session replay, with the sensitive parts blacked out. A sample of app sessions is recorded as a sequence of screenshots so we can see where an interface fails. Two surfaces are masked before anything leaves your phone: the live camera viewfinder, and the full-screen photo viewer behind the stories player, the album and the lightbox. Every image and every text field is masked as well, and network traffic is excluded from recordings so that the temporary links to your photos can never appear in one. Recordings are deleted after 30 days.

If you would rather not be measured at all, write to hello@disket.app and we will exclude your account and delete the events already collected.

8.2 This website

We count visits to cliche.camera. No cookie, no identifier that survives the tab, nothing that follows you elsewhere — which is also why you are not reading this above a consent banner.

The pages of cliche.camera — this one, the home page, the events page and the invitation cards — send the same European PostHog installation a page view when they open, plus loading-speed measurements. We also count the moment someone leaves for the App Store, and which button they used, so we can tell whether the site does its job.

What makes this different from ordinary web analytics:

• No cookie and no persistent storage. Nothing is written to your browser. The identifier attached to a visit lives in memory and disappears when you close the tab, so returning tomorrow makes you a new, unrecognised visitor. That is a deliberate loss of precision on our side. It is also why this site does not ask for your consent to store anything: it stores nothing.
• You never become a profile. Web visits are counted, not attributed to a person, and they are never joined to an app account.
• No location, here either. As in the app, the IP-to-location lookup is explicitly disabled on every event and the IP is anonymised.
• No behavioural recording. No session replay, no heatmap, no automatic capture of everything you click — only the named measurements above.
• In Europe. Same Frankfurt installation, same data-processing agreement.

One consequence worth stating plainly: because a visit is attached to no identity, there is nothing for us to look up if you ask us to delete your browsing data — and nothing we could hand over if you asked to see it. That is not a refusal, it is the design. The rights in section 13 apply in full to your account and to the app events of 8.1.

If your browser sends a "Do Not Track" or "Global Privacy Control" signal, or if you use a content blocker, nothing here will fight it.

9. What we do not do with the data

The non-negotiables.

• We do not sell or rent your personal information to anyone.
• We do not share your data with advertising networks. Cliché has no ads.
• We do not embed advertising or attribution SDKs, we do not track you across other apps or websites, and we do not build an advertising profile of you. The product analytics described in 8.1 exist to fix the app, not to target you.
• We do not use your content (moments, comments, photos, call metadata, profile) to train artificial-intelligence models, ours or anyone else's.
• We do not let other users see anything about you that section 7 does not list.

10. International transfers

Your data is stored in the EU. The only transfers out happen via sub-processors with standard EU safeguards.

Disket France is a French company and your personal data is stored in the European Union (Supabase and PostHog, EU regions — Frankfurt for the analytics). The only transfers outside the EEA occur through the sub-processors listed in section 8: Apple Inc. processes a limited amount of metadata in the United States to deliver push notifications and operate the App Store, and Cloudflare's global edge network may route traffic through the data centre nearest to you, which can be outside the EEA. Each of these transfers is covered by the Standard Contractual Clauses approved by the European Commission, complemented by additional technical safeguards (encryption in transit and at rest, scoped access controls, least-privilege engineering).

11. Retention and deletion

We keep your data while your account is active. Delete the account, and the data goes with it.

We retain your account information and your moments for as long as your account is active. You can delete your account at any time from Settings → More → Delete account inside the app. When you do:

• Your profile, friend list, moments, comments, photos and mutual-like signals are deleted from our live systems within 30 days.
• Encrypted backups containing your data roll over and are overwritten within 90 days.
• Your usage events (8.1) are deleted from our analytics provider within 30 days as well. Independently of any deletion request, session recordings expire after 30 days and usage events after 12 months.
• A minimal record may be retained where we are legally required to do so (e.g. fraud-prevention logs, tax records of any paid transaction). This record is access-controlled and not used for any other purpose.

Friends with whom you shared moments will still see the existence of those moments on their own timeline, attributed to a deleted user. We cannot rewrite their personal record of having met you. Your name, profile photo, comments and any photos you attached are removed.

12. Security

Standard industry safeguards. Nothing is unbreakable.

We protect your data with transport encryption (TLS), encryption at rest, scoped access controls, audit logging, automated dependency scanning and least-privilege engineering practices. We require multi-factor authentication for staff access to production systems. No system is perfectly secure, and you remain responsible for keeping your device and your Apple ID secure. If we ever suffer a data breach affecting your personal information, we will notify you and the competent supervisory authority within the deadlines required by applicable law.

13. Your rights

Access, correct, delete, port, object, complain.

Depending on where you live, you may have some or all of the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your data (you can also do this yourself in the app).
• Restriction — ask us to limit how we use it.
• Objection — object to processing based on our legitimate interests.
• Portability — receive your data in a portable, machine-readable format.
• Withdraw consent — for processing based on consent, at any time, without affecting prior processing.
• Complain to your local data-protection authority. In France that's the CNIL (cnil.fr); in other EEA countries, the equivalent national regulator.

To exercise any of these rights, write to hello@disket.app. We will respond within one month (EEA/UK) or as required by your local law.

13.1 Notice to California residents

Under the California Consumer Privacy Act (CCPA), you have the right to know the categories of personal information we collect, the purposes for which we use it, the categories of third parties with whom we share it, and to request access, deletion and correction. We do not "sell" your personal information and we do not "share" it for cross-context behavioural advertising as those terms are defined under California law. You may exercise your CCPA rights by writing to hello@disket.app.

14. iOS permissions

Each permission Cliché asks for, and why.

Permission	Why we ask for it	What happens if you deny
Bluetooth	Detect when a Cliché friend is physically near you. This is the core function.	In-person moments cannot be recorded.
Notifications	Tell you about friend requests, mutual likes, monthly goal milestones.	You'll only see those events when you open the app.
Microphone	Place and receive in-app audio calls.	You can use the rest of Cliché; in-app calling won't work.
Photos	Attach a photo to a moment, comment or profile, only when you choose to.	You can use the rest of Cliché; no photo attachments.
Contacts	Find which of your phone contacts are on Cliché, only when you tap that option.	You can use the rest of Cliché; you'll add friends via Bluetooth radar only.

You can grant or revoke any of these at any time in iOS Settings.

15. Children

Cliché is for 17 and older.

Cliché is not directed to children under 17 and we do not knowingly collect personal information from anyone under that age. If we learn that we have inadvertently collected data from a child under 17, we will delete it without delay. Parents or guardians who believe their child has provided us with personal information can write to hello@disket.app.

16. Changes to this policy

We publish any material change here before the app version that introduces it reaches you.

We may update this Privacy Policy from time to time. When we make a material change — such as adding a new provider that handles your data, or expanding what we collect — this page is updated before the version of the app that introduces the change is released, so the description is never behind the software. Material changes are also called out in the App Store release notes of that version, and we will notify you inside the app for any change that expands what we collect about you in a way you would not expect from the sections above. The "Last updated" date at the top of this page indicates when the current version was published.

17. Contact

One email for everything.

Disket France
67 rue d'Aboukir
75002 Paris, France
hello@disket.app