Skip to main content

Legal

Privacy Policy

Last updated: March 31, 2026

La Sphère is committed to protecting the privacy and personal data of its users. This privacy policy describes how we collect, use and protect your information in compliance with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is La Sphère.

Contact: contact@lasphere.co

2. Data collected

As part of our service, we collect the following data:

  • User profile : name, email address
  • AI conversations : history of exchanges with Iris and specialized agents
  • Auto-coaching scores and results : data from guided journeys
  • Preferences and settings : theme choice, language, notifications

3. Legal basis for processing

The processing of your data is based on:

  • User consent (Art. 6.1.a GDPR): you accept the processing of your data when you sign up
  • Contract performance (Art. 6.1.b GDPR): processing is necessary to provide the AI coaching service

4. Processing purposes

  • Personalization of AI coaching based on your psychological profile
  • Continuous improvement of the service and its algorithms
  • Production of anonymized statistics for research and development

5. Retention period

  • Active data : kept for the entire duration of service use
  • After account deletion : data is kept for a maximum of 3 years, in accordance with legal obligations
  • Technical logs : kept for 12 months

6. Sub-processors

We use the following sub-processors to operate the service:

Sub-processorFunctionLocationSafeguards
Convex Inc.DatabaseUSAStandard contractual clauses
Clerk Inc.AuthenticationUSAStandard contractual clauses
Stripe Inc.PaymentsUSAPCI-DSS certified
Anthropic PBCArtificial intelligenceUSAData not used for training

7. Transfers outside the EU

Some data is transferred to the United States as part of our services. These transfers are governed by standard contractual clauses pursuant to article 46 of the GDPR, ensuring an adequate level of protection for your data.

8. Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access : obtain a copy of your personal data
  • Right of rectification : correct inaccurate data
  • Right of erasure : request the deletion of your data
  • Right to portability : retrieve your data in a structured format
  • Right to object : object to the processing of your data
  • Right to restriction : restrict the processing of your data

To exercise these rights, contact our Data Protection Officer: dpo@lasphere.co

9. Cookies

To learn more about how we use cookies, please see our dedicated cookie policy.

10. Security

We implement technical and organizational measures to ensure the security of your data:

  • Encryption of data in transit and at rest
  • Restricted access to data based on the principle of least privilege
  • Regular security audits

11. DPO contact

For any question regarding the protection of your personal data, you can contact our Data Protection Officer:

dpo@lasphere.co