Repartee — Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains what personal data Repartee collects, why we collect it, who we share it with, and the rights you have over it.

Repartee is a newly launched, early-stage service with a limited set of features. We try to collect as little as possible, but because the product is built around voice, some of what we handle is sensitive. Please read the section on voice recordings carefully.

1. Who is responsible for your data

The data controller is:

Thomas Debay, sole trader (entrepreneur individuel), established in France, operating the Repartee service.

Contact for any privacy question or request: repartee@thomasdebay.com

If you are in the European Economic Area (EEA), your data is processed in line with the EU General Data Protection Regulation (GDPR) and the French Loi Informatique et Libertés.

Mentions légales (legal notice)

As required by French law (LCEN, Article 6):

Publisher (éditeur) and director of publication: Thomas Debay, entrepreneur individuel.
SIRET: 88266833800016
Address: 9 rue de la chaumiere Voiron
Contact: repartee@thomasdebay.com
Hosting — backend API and database: Railway
Hosting — voice recording storage: Cloudflare R2

Resend, Google, Expo and Sentry also process data on our behalf as sub-processors — see Section 6.

2. Who can use Repartee

Repartee is intended for users aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has given us their data, contact us and we will delete it.

3. What data we collect

3.1 Data you give us

Data	Examples	When
Account details	Name, email address	When you sign up
Sign-in data	One-time login codes sent to your email	When you log in
Profile details	Native language, English level	During onboarding (optional)
Voice recordings	The audio of vocals and voice messages you record	Each time you record
Text messages	Text you send inside a conversation thread	When you message
Interview / opinion responses	Your agree / disagree answers to our onboarding prompts	During the onboarding interview

3.2 Data we generate or collect automatically

Data	Purpose
Usage / analytics events	Event names and timestamps (e.g. "recording started", "thread opened"), plus a session ID and an anonymous device ID, to understand drop-off and improve the product
Push notification token	A device token (via Expo) so we can notify you of new replies
Technical / log data	IP address, device and app version, and basic request logs, kept for security and debugging

We do not use Repartee to build advertising profiles, and we do not sell your data.

4. About your voice recordings (please read)

Voice is the heart of Repartee, so we want to be explicit:

When you record a vocal, other users of Repartee can listen to it. Once someone replies to your vocal, it becomes the seed of a community conversation thread. That thread, and the messages other people have recorded in it, can continue to exist even if you later stop using Repartee — that surrounding conversation is not yours alone to delete. If you delete your account, we delete your own recordings (see Section 9); what remains of a thread you seeded is the other participants' content and a silent placeholder where your recording used to be, detached from your identity.
Voice messages inside a one-to-one thread are shared with the other participant in that thread.
Your recordings and conversations may be monitored and reviewed by Repartee to operate the service, give you feedback, improve the product, keep users safe, prevent abuse (including unfair or fraudulent use of the service), and enforce our Terms of Use.
Audio files are stored on Cloudflare R2 (see sub-processors below).

If you want a specific recording removed, contact us — see Section 9 (your rights) for what we can and cannot do once a recording has seeded a community thread.

A voice recording can reveal information some laws treat as sensitive (for example, your accent, or opinions you express). Because our prompts deliberately invite you to express opinions, we ask for your explicit consent under GDPR Article 9 to process the views expressed in your recordings and interview answers — requested separately from your acceptance of these documents, and withdrawable at any time. By recording, you understand that the recording will be heard by other users, and may be monitored and reviewed by Repartee, as described above.

5. Why we use your data, and our legal basis

Under the GDPR we must have a legal basis for each use:

What we do	Legal basis
Create and run your account; deliver the core recording / thread / messaging features	Performance of our contract with you (the Terms of Use)
Send login codes and service emails	Performance of contract
Send push notifications about replies	Performance of contract (and your device-level consent)
Store and play your voice recordings to matched users as part of the service	Performance of contract
Process the opinions and views you express in recordings and interview answers (which can be special-category data)	Your explicit consent under GDPR Article 9, requested separately at sign-up — withdrawable at any time
Product analytics to improve the service	Our legitimate interest in building a working product (kept minimal; you can object)
Monitor and review conversations and recordings to keep users safe, prevent abuse (including unfair or fraudulent use), and enforce our Terms	Legitimate interest in the safety, fairness, and integrity of the service
Keep logs to secure the service and prevent abuse	Legitimate interest in security
Meet legal obligations (e.g. responding to lawful requests)	Legal obligation

Where we ever rely on consent (for example, optional features), you can withdraw it at any time.

6. Who we share data with (sub-processors)

We use a small number of trusted service providers to run Repartee. They only process data on our instructions:

Provider	What they handle	Where
Railway	Hosts our backend API and PostgreSQL database	Cloud infrastructure (may be outside the EEA)
Cloudflare R2	Stores voice recording files	Cloud infrastructure (may be outside the EEA)
Resend	Sends login codes and transactional emails	Cloud infrastructure (may be outside the EEA)
Google / Firebase	Firebase Cloud Messaging — delivers Android push notifications	Google Ireland / Google LLC
Expo (Expo Push Notification Service)	Delivers push notifications	Cloud infrastructure (may be outside the EEA)
Sentry	Error and performance monitoring (crash reports and diagnostic logs) to help us keep the service reliable	United States

We may also disclose data if required by law, to protect our rights, or in connection with a future business transfer (we will notify you if that happens).

7. International data transfers

Some of the providers above may process data outside the EEA. Where that happens, we rely on appropriate safeguards under the GDPR — typically the European Commission's Standard Contractual Clauses — to protect your data. You can ask us for more detail at the contact address above.

8. How long we keep data

Account data and voice recordings — kept while your account is active. If your account remains inactive, we permanently delete it and the associated audio after 12 months of inactivity. If you delete your account, we delete your recordings sooner (see Section 9). The conversation threads themselves, and the messages other participants recorded, are kept — with your own recordings removed and your identity detached.
Access and security logs — kept for 6 months.
Analytics events — kept for 12 months, then deleted or aggregated.

When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep something to meet a legal obligation or as described for community threads.

9. Your rights

If you are in the EEA, you have the right to:

Access the personal data we hold about you;
Correct inaccurate data;
Erase your data ("right to be forgotten");
Restrict or object to certain processing (including our analytics);
Data portability — receive your data in a portable format;
Withdraw consent at any time where we rely on it.

To exercise any of these, email repartee@thomasdebay.com. We will respond within the time limits set by the GDPR (normally one month).

Community threads after erasure: When you delete your account, we delete your voice recordings — both your vocals and your voice messages. What we keep is the surrounding conversation that other people are part of: the thread itself, the messages other participants recorded, and a silent placeholder where your seed recording used to be (kept only so their conversation does not break). That placeholder carries no audio and is detached from your name and account. We also remove your name and account link everywhere. In short: your recordings go; other people's recordings and the thread stay, with you anonymised out of them.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or your local supervisory authority.

10. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections and access controls on our systems. No service is perfectly secure, but we take the protection of your recordings seriously. If we ever suffer a data breach affecting your rights, we will notify you and the relevant authority as required by law.

11. Changes to this policy

As Repartee evolves, this policy will change. We will update the "Last updated" date and, for significant changes, notify you in the app or by email.

12. Contact

Questions, requests, or complaints about your privacy:

Thomas Debay — Repartee Email: repartee@thomasdebay.com