Privacy Policy

Editor

• Nebco, SASU au capital de 1 000 euros
• Registered office: 6 Rue d'Armaille, 75017 Paris, France
• SIREN: 900 790 346, RCS Paris
• Director: Nadim El Boustani
• Contact: bobby@leyoshe.com

Hosting

Bobby's data is hosted on Google Cloud Platform in the europe-west1 region (Belgium, European Union). Your data resides within the EU.

Data collected

Bobby collects the minimum data necessary to provide the service:

• Anonymous user identifier (UUID)
• Profile nickname
• Tasks, memos, and completion records
• List memberships and roles
• Device identifier for push notifications
• Subscription status

No email address is collected unless you choose to link a Google or Apple account.

Google Analytics

Bobby's website uses Google Analytics (GA4) to collect anonymized usage statistics such as pages visited, country, and device type. Analytics is activated only after you explicitly consent via the cookie banner. No personal data is sent to Google Analytics.

Cookies

Bobby's website uses the following cookies:

• bobby_lang — stores your language preference (expires after 1 year)
• bobby_consent — stores your analytics consent choice (expires after 1 year)

No third-party cookies are used.

How we use your data

Your data is used exclusively to:

• Provide the Bobby service and its features
• Synchronize your data across your devices
• Send push notifications you have enabled
• Process and manage your subscription

Data sharing

We do not sell your data. Data may be shared with the following third parties strictly to provide the service:

• Google — anonymized website analytics (only with your consent)
• Apple / Google — authentication, only if you link your account
• RevenueCat — subscription management and purchase validation

Data retention

Your data is kept for as long as your account exists. When you delete your account, all associated data is permanently removed from our servers.

Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access — obtain a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to data portability — receive your data in a structured format
• Right to object — object to the processing of your data

To exercise any of these rights, contact us at bobby@leyoshe.com.

Data deletion

You can request the deletion of your account and all associated data by contacting us at bobby@leyoshe.com. Deletion is permanent and irreversible.

Security

All data in transit is encrypted using TLS. Data at rest is encrypted on Google Cloud Platform. No plaintext passwords are stored — Bobby uses anonymous accounts and OAuth providers for authentication.

Changes to this policy

We may update this privacy policy from time to time. Changes will be communicated via the app or this website. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

For any questions about this privacy policy, contact us at bobby@leyoshe.com.