Privacy policy
Your progress stays on your iPhone. Here is the little that leaves it, why, and how to erase it.
In force since 26 October 2026.
In short
- No account: no name, no email, no password.
- Your answers, mistakes, mock exams, plan and exam date stay on your iPhone.
- The photo and first name on your card stay on your iPhone: they are never sent and are hidden in session recordings.
- We measure how the app is used with Amplitude, in the European Union, including a recording of the screens of each session.
- The Meta SDK tells us which ads bring installs. The advertising identifier is shared only if you allow it.
- Payments go through Apple. We never see your card.
- “Erase my data”, in Profile, deletes everything from your device.
Who is responsible
Savyo Brenner, an independent developer based in Madrid (Spain), is the controller of the data of the app “Examen Civique 2026 : Réussir”. For any question about this policy or your data, write to contact.ntpco@gmail.com.
The app is not official. It has no link with the French Ministry of the Interior or any other administration.
What the app uses, and why
Your progress, only on your device
Your answers, mock exams, mistakes to review, streak, plan, chosen residence permit, help language, exam date and reminder time are stored in the app's local storage, and in a space shared with its own widgets and Live Activity. None of it is sent to a server: the app has no server. If you delete the app or tap “Erase my data”, it is all gone.
Usage analytics (below) receive a few separate results, such as the score of a mock exam or the theme of an answered question, never the text of your answers.
Your card: photo and first name
If you add a photo or a first name to your card, they stay on your iPhone. The photo is kept in the app's private folder and excluded from iCloud backups. Neither is sent anywhere, and both are hidden in the session recordings described below. The app only accesses the photo you pick, not your photo library.
An anonymous identifier
The first time you open the app, it creates a random identifier (“civique_” followed by letters and numbers) and keeps it in the iCloud Keychain of your Apple account, to recognise you if you reinstall the app or change iPhone. It contains nothing about you. Amplitude and RevenueCat use the same identifier.
Usage analytics with Amplitude
To understand how the app is used and improve it, we send usage events to Amplitude: onboarding steps, answered questions (theme, right or wrong, question identifier), sessions and mock exams started and finished, readiness, plan viewed, language and permit chosen, the purchase screen shown and closed, purchases started and completed, your answers to the notification and tracking prompts, and your exam result if you tell us.
Amplitude also receives the anonymous identifier, technical data (model, iOS version, language, session start and length) and an approximate location (country or city) derived from the IP address. No name, email or phone number. The data is hosted in Amplitude's European data centre.
Amplitude also records a replay of each session in the app (Session Replay): the screens shown and the taps, to find what is confusing or broken. Text fields are masked, so are your photo and first name, and nothing outside the app is recorded. Replays are kept for a limited time, then deleted automatically.
Install attribution with Meta
The app includes the Meta (Facebook) SDK to know whether an install came from one of our ads. It starts only after you answer Apple's tracking prompt (App Tracking Transparency), shown at the end of onboarding. It records the app opening with technical device data and an anonymous Meta identifier.
Your device's advertising identifier (IDFA) is shared only if you accept Apple's prompt. You can change your mind at any time in iOS Settings → Privacy & Security → Tracking.
When you make a purchase, RevenueCat (below) passes that event to Meta from its servers, to measure which ads work. The app sends Meta no payment data.
Purchases with Apple and RevenueCat
Purchases are made with your Apple account, which processes the payment. RevenueCat tells us whether full access is active and lets you restore purchases. RevenueCat receives the anonymous identifier, the purchase history Apple shares with it, technical device identifiers (including the IDFA, only if you allowed it), Meta's anonymous identifier, the Apple Search Ads attribution token and the IP address. We never see your card. RevenueCat processes this data in the United States.
Notifications, widgets and Live Activity
Daily reminders and the reminders before your exam are local notifications: your iPhone schedules them itself, nothing is sent to a server. The widgets (including the question of the day) and the mock exam countdown on the Lock Screen read the app's data on the device.
Visits to this website
On moncivique.app we count visits with Umami, running on our own server. Umami sets no cookies and does not record your name, email or an advertising identifier: only the page viewed, the page you came from, the browser, the device type and an approximate country.
If you write to us
If you write to contact.ntpco@gmail.com, we use your address and message only to reply. The mailbox is run by Google (Gmail).
External services at a glance
| Service | What for | Where |
|---|---|---|
| Amplitude | Usage analytics and session recording | European Union |
| Meta (Facebook) | Attributing installs and purchases to ads | United States and Ireland |
| RevenueCat | Managing purchases, passing purchases to Meta and Apple Search Ads | United States |
| Apple | Payments, App Store, iCloud Keychain, local notifications, tracking prompt | Under Apple's policy |
| Umami | Visits to this website | Our server |
Transfers outside the European Economic Area rely, depending on the provider, on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses. We do not sell your data.
Legal basis
- Providing the service you ask for (the app, your purchases): performance of a contract, art. 6(1)(b) GDPR.
- Sharing the advertising identifier with Meta: your consent in Apple's prompt, art. 6(1)(a) GDPR. You can withdraw it at any time.
- Usage analytics and ad measurement without the advertising identifier: our legitimate interest in improving the app and knowing what makes it known, art. 6(1)(f) GDPR. You can object by writing to us.
How long
Your progress, photo and first name stay on the device until you erase them or delete the app. The anonymous identifier stays in your iCloud Keychain until you remove it. Amplitude, Meta and RevenueCat keep their data according to their settings and their own policies; we can ask them to delete it for you.
Erasing your data
In the app, open Profile and tap “Erase my data”. The app deletes your progress, photo and first name, cancels scheduled reminders and starts from scratch. Your purchases stay with your Apple account.
That button does not erase what Amplitude, Meta and RevenueCat already hold. For that, write to contact.ntpco@gmail.com and we will ask each provider to delete it.
Your rights
The GDPR gives you the right to access your data, have it corrected or erased, object to its processing, restrict its use and receive a copy. Write to contact.ntpco@gmail.com saying what you need. As the app asks for no name or email, we may need some detail to find the data of your device.
You can also complain to the data protection authority of your country: in France the CNIL (cnil.fr), in Spain the AEPD (aepd.es).
Children
The app is for adults preparing the civic exam. It is not meant for children under 15.
Changes
If the app starts using data differently, we will update this page and its date before the new version reaches the App Store.