Privacy Policy

I. Preamble and Scope

This Privacy Policy explains how Aminoka Studio ("we", "us"), based in Paris, France, collects, processes, and protects personal data on the Aminoka platform (the "Service"). We act as data controller under the GDPR (Regulation EU 2016/679). By using Aminoka you consent to the practices described here.

II. Personal Data We Collect

A. Information you provide

Account credentials supplied via federated identity providers (Google OAuth, Apple Sign-In) — your name and email address. Profile details you choose to add — bio, avatar, link in bio. User content — posts, comments, messages, images. Community membership and participation metadata.

B. Information collected automatically

Technical telemetry necessary to operate the Service: device type, OS version, app version, IP-derived country (we never store raw IPs in plaintext — they're salted+hashed at the auth boundary), and minimal in-app analytics (page views, action counts).

III. Legal Basis for Processing

• Performance of contract — providing the Service you signed up for.
• Legitimate interest — securing the platform, preventing abuse, anti-spam.
• Consent — optional personalization and email notifications you can revoke at any time.
• Legal obligation — responding to lawful requests from authorities.

IV. How We Use Your Data

• To create and operate your account.
• To deliver the core platform: feed ranking, notifications, search.
• To detect and prevent abuse, harassment, and fraud.
• To respond to support and legal requests.
• To improve the Service via aggregated, non-identifying analytics.

V. Disclosure and Third Parties

We do not sell personal data. We share strictly limited data with infrastructure providers under data-processing agreements: Cloudflare (hosting, storage and content delivery); Brevo (transactional email such as sign-in codes); Apple and Google (OAuth identity verification); Google AdSense (advertising on our public pages only — see section XI); and OpenAI (machine translation, when you or a recipient asks for a message or post to be translated — only the text being translated is sent, and it is not used to train models). When legally compelled we may disclose data to authorities — we will notify affected users unless prohibited by law.

VI. Your Rights

Under the GDPR you may exercise the following rights at any time from your account settings or by emailing privacy@aminoka.app:

• Right of access — request a copy of your personal data.
• Right to rectification — fix inaccurate or incomplete data.
• Right to erasure (right to be forgotten) — delete your account and personal data.
• Right to restriction — pause processing of your data.
• Right to portability — export your data in a machine-readable format.
• Right to object — opt out of certain processing activities.
• Right to withdraw consent — for any consent-based processing.

VII. Security

Data is encrypted in transit (TLS 1.3) and at rest. Session tokens are JWE-sealed with HKDF-derived keys. Access to production systems is restricted, audited, and tied to individual SSO accounts. We follow the principle of least privilege.

VIII. Account Deletion

A. Data that will be deleted

• Your profile (name, avatar, bio, links).
• All posts, comments, and uploaded media you created.
• Your private messages.
• Your community memberships and notification preferences.

B. Data that may be retained

For legal and abuse-prevention reasons we may retain a minimal, anonymized footprint of your account (hashed email + ban/report history) for up to 12 months after deletion. After that window all residual records are permanently purged from production storage.

IX. International Data Transfers

Aminoka operates from the EU. Some processors run globally — when data leaves the EEA it does so under standard contractual clauses (SCCs) approved by the European Commission, with supplementary safeguards.

X. Child Safety

A. Age requirements

Aminoka is intended for users aged 13 and older. We do not knowingly collect data from children under 13. Accounts found to be underage are removed.

B. Prohibited content

CSAM, grooming, sexual content involving minors, and any related material are zero-tolerance. Detection combines automated content classifiers with human review. Confirmed violations result in immediate account termination and referral to law enforcement.

XI. Cookies, Local Storage and Advertising

Inside the Aminoka application we use a single first-party HttpOnly session cookie for authentication and a small number of localStorage keys for UI preferences (theme). The signed-in application carries no advertising code.

Our public pages — the homepage, the blog, and these legal pages — display advertising served by Google. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.

You may opt out of personalised advertising by visiting <a href="https://www.google.com/settings/ads">Google Ads Settings</a>. You can also opt out of a third-party vendor's use of cookies for personalised advertising at <a href="https://www.aboutads.info/choices/">aboutads.info</a>. Further detail on how Google uses data when you use our site is available at <a href="https://policies.google.com/technologies/partner-sites">policies.google.com/technologies/partner-sites</a>.

Visitors in the EEA, the UK and Switzerland are asked for consent before any personalised advertising cookie is set, and may withdraw that consent at any time through the same controls.

XII. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be highlighted in-app and on this page. Continued use of Aminoka after an update constitutes acceptance.

XIII. Contact

Questions, requests, or complaints? Reach our Data Protection contact at:

You also have the right to lodge a complaint with the French data protection authority (CNIL).