Privacy Policy

Last updated: November 01, 2025

This Privacy Policy for ARNAUD MALANDA doing business as Noa Dev Studios, the creator and operator of Lycsir (“Lycsir,”“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

  • Visit our website at https://lycsir.com or any website of ours that links to this Privacy Policy

  • Download and use our mobile and desktop application (Lycsir), or any other application of ours that links to this Privacy Policy

  • Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at contact@lycsir.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Policy. You can find more details by using our table of contents.

  • What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on your interactions, choices, and the features you use. See What information do we collect?

  • Do we process any sensitive personal information? We do not process sensitive personal information.

  • Do we collect information from third parties? We do not collect information from third parties.

  • How do we process your information? To provide, improve, and administer the Services; communicate with you; ensure security and fraud prevention; comply with law; and, with consent, for other purposes. See How do we process your information?

  • When and with whom do we share personal information? In specific situations with specific third parties. See When and with whom do we share your personal information?

  • How do we keep your information safe? We use organizational and technical measures, but no method is 100% secure. See How do we keep your information safe?

  • What are your rights? Depending on where you live, you may have rights over your personal information. See What are your privacy rights?

  • How do you exercise your rights? The easiest way is by sending us an email at contact@lycsir.com. We will act in accordance with applicable laws.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, express interest in our products/Services, participate in activities, or contact us.

Personal Information Provided by You. The personal information we collect depends on context and your choices, and may include:

  • name

  • email address

  • password

Sensitive Information. We do not process sensitive information.

Payment Data. We do not store card details. Payments on the website are handled by Paddle; payments on iOS and Android are handled by Apple App Store and Google Play Billing, respectively. See their Privacy Policies:

Social Login Data. If you register via Google Sign-In, we will receive limited profile information (name and profile picture) as described in How do we handle your social logins?.

Application Data. If you use our application(s), we may collect:

  • Mobile Device Access. Microphone, storage and Bluetooth (with your permission). You can change permissions in your device settings.

  • Mobile Device Data. Device information (e.g., device ID, model, manufacturer), OS/version, system configuration, app IDs, browser type/version, hardware model, ISP/carrier, network/platform info, and details about features accessed.

This information is primarily needed to maintain security/operation of our app(s), for troubleshooting, and for internal analytics/reporting.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Minors. Lycsir is not directed to individuals under 16 years of age. We do not knowingly collect personal information from anyone under 16. If we learn that a user is under 16, we will delete associated personal information. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Information automatically collected

In Short: Some technical information — such as browser and device characteristics — is collected automatically to help us operate, secure, and improve the Services.

We automatically collect limited technical information when you use our Services. This data does not include personally identifiable information such as precise location, IP address, or user identity. It is used solely for security monitoring, crash reporting, and aggregated analytics.

This includes:

  • Log and Usage Data. Anonymous, aggregated data such as app performance, feature usage frequency, and error events (collected via internal logging and Sentry for crash diagnostics).

  • Device Data. General device and system information (e.g., operating system version, device type, app version, language settings).

  • Analytics data. (subject to consent)

We use analytics tools (PostHog) to collect anonymous, aggregated analytics about how users interact with Lycsir. This processing only begins after you provide consent through our in-app or website consent interface.

These analytics tools are configured to:

  • not collect IP addresses or geolocation data,

  • not store personally identifiable information, and

  • not track you across other websites or apps, and

  • use only an internal pseudonymous identifier to associate usage data across your sessions and devices within Lycsir only.

The data collected helps us understand app performance and feature usage to improve Lycsir.

In your app settings under Preferences > Analytics, you can enable or disable analytics at any time. You can also withdraw your consent by contacting us at contact@lycsir.com.

Marketing Website Technical and Analytics Data.

When you visit our marketing website (lycsir.com), our hosting providers (such as Vercel or Cloudflare) may process technical data such as your IP address for security, performance, and routing purposes.

With your consent, our analytics tool PostHog may also process your IP address to determine approximate location (e.g., country or city-level) and to provide aggregated usage statistics. This data is used strictly for analytics and performance insights and is not used for advertising, profiling, or cross-site tracking.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: To provide, improve, administer, and secure the Services; communicate with you; comply with law; and, with consent, for other purposes.

We process personal information to:

  • Facilitate account creation, authentication, and manage accounts

  • Deliver and facilitate delivery of Services

  • Respond to inquiries and provide support

  • Send administrative information (e.g., updates to products/terms/policies)

  • Fulfill and manage orders (payments, returns, exchanges)

  • Request feedback and contact you about your use of the Services

  • Send marketing and promotional communications only with your explicit opt-in consent (you can withdraw at any time)

  • Protect the Services (safety, fraud monitoring/prevention)

  • Identify usage trends and improve the Services

  • Measure effectiveness of marketing and promotional campaigns

  • Save or protect an individual’s vital interests

  • Improve and maintain application performance (analyzing anonymized usage and error data)

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: With service providers and in specific situations.

Vendors, Consultants, and Other Third-Party Service Providers. We may share data with third parties performing services for us who require access to do that work. Contracts require them to safeguard your data, act on our instructions, and not share it further.

Third parties we may share personal information with include:

  • Functionality & Infrastructure: Supabase

  • Payments: Paddle, Apple (App Store), Google (Google Play Store)

  • Subscriptions/Entitlements: RevenueCat

  • User Registration & Authentication: Google Sign-In

  • Web & Mobile Analytics: PostHog

  • Hosting/CDN: Vercel, Cloudflare, Hostinger

  • Performance Monitoring/Logging: Sentry

  • Transactional & Marketing Email: Resend

Business Transfers. We may share/transfer information during negotiations of, or in connection with, a merger, sale of assets, financing, or acquisition.

Data Location. All processing is primarily hosted in the European Union via Supabase EU region. A few of our subprocessors may process data in the United States under appropriate safeguards (including Standard Contractual Clauses where applicable).

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you use Google Sign-In, we receive limited profile information from Google.

Lycsir supports Google Sign-In only. When you authenticate with Google, we receive your name and profile picture from your Google profile. We do not receive your friends list or other social data from Google. We use this information as described in this Privacy Policy. Please review your Google account permissions and privacy settings.

We do not use your Google data for any purposes other than authentication and account identification.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: Only as long as necessary, unless longer retention is required/permitted by law.

We retain personal information for the purposes in this Privacy Policy and no longer than users maintain an account with us, unless a longer period is required/permitted (e.g., tax/accounting). When no longer needed, we delete or anonymize it; if immediate deletion is not possible (e.g., backups), we securely store and isolate it until deletion is feasible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We implement appropriate and reasonable technical/organizational measures, but no system is 100% secure.

While we implement strong encryption and security measures, no Internet transmission is entirely risk-free. We encourage you to access the Services within a secure environment.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location (e.g., EEA, UK, Switzerland, Canada, certain U.S. states), you may have rights to access, correct, delete, restrict processing, data portability, object, and not be subject to solely automated decision-making.

Automated decision-making. We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you. If we ever introduce such processing (for example, automated account suspension for suspected fraud), we will inform you and provide a simple way to request human review, to express your point of view, and to contest the decision.

Make requests by contacting us at contact@lycsir.com. We will act per applicable laws.

  • EEA/UK/CH: You may also complain to your local data protection authority.

  • Withdraw consent: You may withdraw at any time (processing prior to withdrawal remains lawful; we may process on other lawful grounds).

  • Marketing consent: We send marketing emails only if you opt in. You can withdraw consent at any time via in-app settings or the unsubscribe link. Service emails may still occur (e.g., account/admin).

Account Information

  • Log in and update your account settings; or

  • Contact us using the details below.

For detailed instructions on deleting your account, visit https://lycsir.com/delete-account.

Upon your request to terminate your account, we will deactivate or delete your account and information from active databases. We may retain some information to prevent fraud, troubleshoot, assist investigations, enforce legal terms, and/or comply with legal requirements.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers and some mobile OS/apps include a Do-Not-Track (DNT) setting. No uniform standard exists, so we do not currently respond to DNT signals. If a standard is adopted requiring us to do so, we will update this Privacy Policy.

We don’t sell or share personal data or run cross-site ad targeting.

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: While Lycsir is operated from France under the European Union’s General Data Protection Regulation (GDPR), users located in the United States may also have certain privacy rights under U.S. state laws such as the California Consumer Privacy Act (CCPA) and similar regulations.

We do not sell personal information or share it for targeted advertising. We only process limited data necessary to provide our Services, such as account information, payment details (through our payment providers), and analytics data, as described in this Privacy Policy.

If you are a resident of a U.S. state that provides specific privacy rights (for example, rights to access, correct, delete, or obtain a copy of your data), you may submit a request by emailing contact@lycsir.com. We will handle such requests in accordance with applicable privacy laws.

You may also contact your state’s Attorney General if you believe your privacy rights have been violated.

11. DO WE MAKE UPDATES TO THIS PRIVACY POLICY?

In Short: Yes. We will update this Privacy Policy as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised date at the top. If we make material changes, we may notify you by prominently posting a notice or by sending a notification. Please review this Privacy Policy periodically.

12. HOW CAN YOU CONTACT US ABOUT THIS PRIVACY POLICY?

If you have questions or comments about this Privacy Policy write to:

ARNAUD MALANDA
Noa Dev Studios
18 rue Adrien Lemoine Pontoise
95300 France

We do not have a Data Protection Officer, but you may contact us at contact@lycsir.com for any privacy inquiry.

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on your location, you may have the right to request access to the personal information we collect from you, details about processing, correct inaccuracies, delete your personal information, or withdraw consent (subject to legal limits).

To submit a request, please contact contact@lycsir.com.