Privacy and data processing

Product identity

The InCurva app is edited by Lenergy Smart SAS. Enerblade is the licensee. These stated capacities do not assign any other legal role that has not been expressly validated.

Data processed

• account: email, display name, language, theme, chosen Google identity, and active sessions;
• preferences: followed clubs and teams, favourites, notifications, and consent choices;
• local history: the functional incurva_recent_clubs_v1 cookie keeps up to 10 viewed clubs on this device for 180 days, with no advertising purpose;
• participation: games, points, opt-in rankings, memories, reservations, and their statuses;
• device: pseudonymous push token and app version when Android notifications are enabled;
• optional measurement: product, sponsor, and marketing events only under the user’s separate choices.

Purposes and control

Required processing authenticates, secures, and provides requested features. Product analytics, sponsor measurement, and marketing are separate, disabled until chosen, and revocable at any time. InCurva does not use third-party adtech or sell personal data.

External services

Google is involved only for a sign-in chosen by the user and for FCM when Android notifications are enabled. The privacy-enhanced YouTube player is contacted only after an explicit action. Infrastructure and email providers receive only data required for the service.

Data received from Google

Google sign-in is optional and requests only the standard openid, email, and profile scopes. InCurva receives a stable Google identifier, verified email address, and display name when available. InCurva does not receive the Google password or access Gmail, Drive, contacts, calendar, or photos. This data is used exclusively to authenticate, create or link the account, and protect the session; it is not sold, published, or used for advertising. The linked identifier is retained with the account and deleted with it.

Retention and deletion

Sessions last 12 hours or 30 days according to the sign-in choice. The functional viewed-clubs cookie lasts no longer than 180 days, can be cleared in browser settings, and does not depend on analytics or marketing consent. Other data remains only as long as required by the feature and documented obligations. Deletion disables the account, revokes sessions, and removes or dissociates non-essential personal data; limited security, audit, operational, or accounting evidence may be retained where a legitimate obligation applies.

Rights and choices

The profile lets users correct preferences, withdraw consent, export data, and delete the account. Deletion is also available on the Web without reinstalling Android.

Security

Sessions are opaque, Android keeps them in SecureStore, and the Web uses protected cookies. APIs isolate data by club, rate-limit sensitive requests, and never accept a client-supplied user identity.

Privacy and support contact

For questions about the service, data, or exercising your rights, contact the publisher Lenergy Smart SAS through the public address below.