Soñj privacy policy for iPhone

Last updated: 1 September 2026.

The short version

Soñj works without an account. There is nothing to create, nothing to connect, and therefore no profile about you on my side.
No location tracking. The app does not follow you in the background or in real time. It only reads what is already written into the photos you have already taken.
The analysis of your photo library runs on the device. Your photos are not sent anywhere to be analysed.
One single thing leaves your iPhone, and only if you ask for it: the file of the poster you have printed.
No advertising, no advertising tracker, no analytics, no data resold. The app never asks permission to track you across apps.

Who is responsible

Soñj is published by Teddy Verneuil, sole trader, 14 bis rue Magellan, 56860 Séné, France. SIRET 792 687 576 00043. Contact: contact@lezbroz.com.

He is the data controller within the meaning of the General Data Protection Regulation (GDPR).

What the app reads in your photo library

With your permission, Soñj goes through your photo library to read its metadata: the capture date, the location recorded by the device if there is one, and enough to recognise the photo. Your trips are reconstructed from that, and from nothing else.

The thumbnails shown on screen are requested from iOS at the moment they are displayed. This reading happens entirely on your device: no photo is copied, sent, or analysed anywhere else.

If you mark a photo as a favourite in Soñj, it is marked as a favourite in Apple's Photos app. That is the only thing Soñj writes into your photo library.

Photos that were sent to you are excluded by default: they carry somebody else's location, and would distort your trips. You can include them from the Profile if you want to.

What stays on your iPhone

Everything, by default: your detected trips, the ones you confirmed or dismissed, the names you give them, the places and days of their journal, the places you rename or remove, the homes you declared, your settings, the posters you compose, and the print files you have bought.

This data lives on your device, backed up along with it if you use Apple's backup. I have no access to it. Deleting the app deletes it, and it is then recoverable only from a backup of your iPhone.

The homes you declare exist so that everyday life isn't mistaken for a trip. They never leave the device.

What leaves when you order a print

This is the only moment when anything concerning you leaves your iPhone.

The following is then sent to my server:

the PDF file of the poster, which therefore contains the photos you put in it, along with a preview thumbnail;
the poster's title, that is to say the name of the trip, for example "New York";
the size ordered, and the date of the order.

Neither your name, nor your email address, nor your delivery address, nor any payment method is sent. I never see them: you enter them on Peecho's payment page, Peecho being the seller of the print. So my server holds no identity data, and the notifications Peecho sends me to follow an order's progress contain only an order number and a status.

The file is then collected by Peecho to be printed. From that point on, Peecho processes your order and delivery data on its own account, as a separate data controller, under its own privacy policy.

What leaves when you buy the print file

Nothing. The PDF is made on your iPhone and stays there. The payment is handled by Apple, which tells me neither your identity nor your payment method: all I know is that a purchase took place.

No analytics

Soñj measures nothing. No usage statistics, no events sent to a third party service, no installation identifier, no automatic crash reporting. I don't know how many screens you open, or which ones.

Why, and on what basis

Performance of the contract: sending the poster file and storing it for the duration of production, without which the print cannot be produced or delivered.
Consent: access to your photo library, which you grant in iOS and can withdraw at any time in your iPhone's settings. Withdrawing it stops trip detection.
Legal obligation: retention of the accounting records tied to sales, by the seller.

This data serves no other purpose. It is neither sold, nor rented, nor passed to advertisers, and there is no advertising profiling.

For how long

The data that stayed on your iPhone stays there for as long as you keep the app, and disappears with it.
The poster file sent for an order is kept for ninety days after the order, covering production, delivery and any reprint, then deleted automatically.
An order's tracking record, which contains only a number, a size and a status, is kept for three years, the usual period for warranty and complaints.
The data Peecho holds for the sale and the delivery falls under its own retention policy.

Where it is hosted

Cloudflare, Inc. for the poster file and order tracking, on infrastructure located in Western Europe.
Peecho B.V. (Amsterdam, Netherlands) for the sale, printing and delivery of prints.
Apple Inc. for app distribution and in-app purchases.

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability over your data.

Since the bulk of your data is only on your iPhone, you exercise those rights yourself: deleting the app erases everything local, and withdrawing photo library access in the iOS settings stops the reading.

For an order's file, write to contact@lezbroz.com with the order number and I will delete it. I answer within thirty days. For delivery and billing data, contact Peecho, which is responsible for it.

You may also lodge a complaint with the French data protection authority, the CNIL, cnil.fr.

Security

Everything in transit is encrypted (HTTPS). The poster file store is protected by an access token, and the files are not publicly listable. The payment link handed to your browser is specific to your order.

No security is absolute. In the event of a data breach presenting a risk to your rights, you would be informed within the deadlines set by the GDPR.

Children

Soñj is not intended for under-15s and does not knowingly collect their data. If such data were reported to me, it would be erased.

Changes

This policy may change along with the app. The update date at the top of this page prevails, and any significant change will be announced in the app.