Privacy Policy

Who controls your data

• Controller/operator: Laurent Lefebvre
• Operating name: Sensium
• Operating location: Montreal, Quebec, Canada
• Support and privacy contact: sensium.wine@hotmail.com

Data we collect

• Account data: email address, authentication provider identifiers, and basic account lifecycle events.
• Product-state data (when enabled): training progress and state snapshots used for cross-device continuity.
• Subscription and entitlement data: purchase-state results required to provide premium access status.
• Support data: messages and context you choose to send when requesting help.
• Optional telemetry: analytics and diagnostics events only after explicit consent.

How we use data

• Provide account sign-in, provider linking, and account security operations.
• Maintain training continuity and synchronization where you choose to use account features.
• Resolve subscription status and entitlement state for premium features.
• Respond to support, security, privacy, and deletion requests.
• Improve product reliability through consent-gated analytics and diagnostics.

Legal bases

Where applicable, processing relies on: (1) performance of a service contract (account, sync, premium access), (2) legitimate interests in service security and abuse prevention, (3) compliance with legal obligations, and (4) your consent for optional analytics/diagnostics.

Sharing and processors

• Infrastructure processors may include Firebase/Google Cloud, Apple, Google Play, Stripe, and hosting or observability providers used to operate Sensium.
• Data is shared only as needed to operate the service, process payments, prevent abuse, and comply with law.
• We do not sell personal information.

International transfers

Service providers may process data outside your home jurisdiction. Where required, we use reasonable safeguards and contractual protections appropriate to provider and region.

Retention

• Account and sync records are retained while your account remains active.
• Support records are retained as needed for continuity, legal compliance, and dispute handling.
• Optional telemetry is retained according to product operations needs and provider retention controls.
• When deletion is completed, account-linked cloud data is removed or anonymized within system limits.

Your rights and controls

• Access or correction requests can be sent to sensium.wine@hotmail.com.
• You can request account deletion through the account deletion flow.
• Consent for analytics/diagnostics can be granted or withdrawn at any time.
• You can request support escalation for privacy or security concerns.

Children

Sensium is not intended for children under 13 (or under the minimum digital-consent age in your region). If you believe a child provided data without appropriate authorization, contact us for removal review.

Security posture

We use layered controls (authentication safeguards, callable-based sensitive operations, access controls, and operational monitoring) to protect data. No internet service can be guaranteed absolutely secure.

reCAPTCHA and abuse prevention

The Sensium web client uses Google reCAPTCHA Enterprise to protect callable endpoints (sign-in, entitlement resolution, telemetry) against automated abuse. The integration is score-based and runs silently in the background — no “I'm not a robot” checkbox, no image challenges, and no user interaction is ever required. Sensium does not collect or store the underlying risk signals; Google evaluates the request and returns a numeric risk score that Firebase App Check validates server-side before issuing tokens.

Use of reCAPTCHA Enterprise is subject to the Google Privacy Policy and Terms of Service of Google. The reCAPTCHA visual badge is intentionally hidden site-wide; this attribution panel (and the matching line in the site footer) satisfies Google's display-or-attribute requirement.