amoris secret
Discover the app ↗

AMORIS SECRET · PRIVACY POLICY

Privacy policy

This policy covers the Amoris Secret Android app and its presentation website, for both free and Premium plans.

Updated 12 September 2026

Data controller

FEM Studio, French sole proprietorship, SIREN 827 846 254, 12 rue Raspail, 69600 Oullins, France. Contact: contact@amoris-secret.com.

No account does not mean no data

No email address or password is required to use the app. A technical identifier is nevertheless created to recognise your installation and route exchanges. The service processes public keys, partner links, invitations, delivery and viewing dates and statuses, and data needed for quotas and security. Your nickname and exchange content are protected by encryption.

Photos, messages and local storage

The camera takes the photos you choose to send and reads linking QR codes. Photos and messages are encrypted on your device before transmission. Photo files, the local database and the preview cache are encrypted on the phone. Content is decrypted on authorised devices for display; our servers do not receive readable photos or messages.

Images and messages may contain intimate information or other sensitive data. Only share content you have the right to share, with the agreement of the people concerned. Your chosen partner is the recipient of that sharing.

Android permissions

Camera access enables photo capture and invitation scanning. Notifications alert you to new exchanges if you allow them. Your device lock protects app access; Android verifies biometrics without transmitting them to FEM Studio. The app does not need access to your contacts or location to operate. You can manage permissions in Android settings.

Notifications, integrity and purchases

Google Firebase Cloud Messaging processes a notification token and technical information needed to reach your device. Notifications sent by our backend are generic: they include neither photos nor message text; they may include the sender’s technical identifier.

Firebase App Check with Play Integrity helps prevent unauthorised clients and abuse. These Google services process technical app and device information. If you choose Premium, Google Play handles payment; the backend processes the purchase token and subscription status to verify entitlements. We do not receive your payment card details.

Why we use this data

Routing exchanges, managing access permissions and providing Premium are necessary to perform the service you request. Abuse prevention, security and incident diagnosis support our legitimate interest in protecting the service and its users. Any accounting or legal duties are based on law. You choose camera and notification permissions in Android. We do not use the content of your exchanges to target advertising.

Recipients and providers

Exchanges are sent to the partners you link. FEM Studio and its technical providers access only information needed for their tasks, including OVH for hosting and storage, and Google for notifications, integrity checks and purchases. Information may be disclosed to authorities where legally required; this does not give us access to encrypted content.

Google services may process data outside the European Economic Area under their terms and safeguards. See Firebase’s data information and Google’s privacy policy. Contact us for information about safeguards applicable to the providers used.

Retention and deletion

Local data remains on your device until you delete it in the app or clear app data. The relay temporarily retains encrypted content and access information during its availability period; revocation or expiry ends access. Delivery and withdrawal notification queues are retained as needed for delivery or until expiry.

Device identifiers and partner links remain necessary while they support connections and exchanges. Notification tokens are renewed or expire. Subscription records support entitlement checks and, where necessary, legal duties. Technical logs support security and diagnosis; retention depends on those needs and applicable obligations. Aggregated hourly backend statistics are retained for 30 days; aggregated totals may be kept longer.

Withdraw a photo or delete a conversation in the app to revoke the corresponding access. Uninstalling removes local app data but does not request deletion of all server data. For broader deletion, contact us before uninstalling if possible. An appropriate check of your connection to the data may be needed; never send a private key.

Website and statistics

The presentation website measures the audience of its pages only, to know which ones are viewed. No advertising trackers or third-party audience tools are used. This measurement does not apply to the Android app. The site also stores your French/English choice in browser local storage. Fonts and images are served locally. Hosting may generate technical logs including IP address, date, requested resource and browser information.

The app backend also produces aggregate usage counters: these contain no photo, message, key or user identifier. This does not mean the service’s other technical processing is anonymous.

Your rights and contact

You may request access, correction or deletion of your data, restriction, portability or object to certain processing, subject to the conditions set by applicable law. To exercise your rights, email contact@amoris-secret.com and mention “Amoris Secret”. Do not attach intimate photos or device secrets.

We cannot decrypt your messages to return them to you. You can complain to the French CNIL or your data protection authority.

Audience, security and updates

The service is intended for adults aged 18 and over. Contact us if you believe a minor’s data has been shared. The security page explains safeguards and limitations, including external copies. This policy may change as the app evolves; the date above indicates its latest update.