LALANA FR

Privacy policy

This page explains which data LALANA processes, why, where it is hosted, how long it is kept and how to retrieve or delete it. Effective date: 1 November 2026, updated on 8 November 2026 (website waiting list, replies to our e-mails, information attached to the mailing list).

Data controller

favo-it, 17 rue Gustave Leveillé, 94320 Thiais, France. Contact: hello@lalana.favo-it.com. Data protection officer: Simon Rabarijaona.

Data we process

Data we do not collect

Purposes and legal bases

News and offers e-mails

If you have a linked account (Apple, Google or e-mail), the app offers, when you create the account, once at the end of a session, and then at any time in Settings, to receive LALANA news and offers by e-mail. This is optional, the box is unticked by default, and declining has no effect on the app or your subscription. If you agree, we send you a confirmation e-mail; once you click the link, your account e-mail address is added to the mailing list kept at Brevo. We attach your subscription status (subscriber or not, monthly or annual plan, trial in progress, end date), so we do not offer you something you already have, and a single piece of practice information: whether you have completed the "Poser son attention" discovery path, so we can suggest what comes next at the right time. No other practice data, and no feelings, are sent. If you withdraw your consent, this information is cleared from the list; if you delete your account, your contact is deleted at Brevo. You can withdraw your consent at any time, in Settings or through the unsubscribe link in every e-mail; the withdrawal is reflected in the app. Deleting your account removes you from the list.

Website waiting list

On the website's "Waiting list" page, you can leave your e-mail address to be told when the app launches, then receive its news and offers. The consent box is never ticked in advance. We first send you a confirmation e-mail: your address is only added to the list, kept by Brevo, after you click. Together with it we store, if present, the parameters of the link that brought you (source, medium, campaign, ad variant and keyword, for example "instagram"), as well as the type of device inferred from your browser (iPhone, Android or unknown), to know which campaigns work and point you to the right store at launch; no cookie or tracker is used. To limit abuse, a non-reversible fingerprint of your IP address is kept for one hour on the website server. You can unsubscribe at any time using the link in every e-mail.

Your feelings (health data)

Consent for feelings is requested separately, the first time the app offers to record a feeling, never at launch. Declining does not prevent any session: a feeling received is then ignored. You can withdraw consent at any time in Settings › My practice; the app then offers to delete the feelings already saved. Without consent, no feeling average is computed. The weekly-summary feeling sentence has its own setting, off by default. The feeling offered after a breathing exercise or a free meditation follows the same rules. This processing is covered by a data protection impact assessment.

Analytics

It is off until you accept it, and you can change your mind in settings, which resets the audience data. Only these events are measured: screens viewed (screen name, no identifier), session completed (type and minutes), Premium screen shown, purchase started, succeeded or cancelled, purchases restored, locked content tapped, reminders turned on, introduction finished or skipped, offline download (number of sessions). We never send your feelings, your notes, your e-mail or your account identifier, and we do not use the advertising identifier.

Processors, hosting and transfers

Some of these providers may process data outside the European Union; transfers are covered by appropriate safeguards.

Security

Retention

Your rights

You have the rights of access, rectification, erasure, portability, objection and restriction, and you can withdraw your consents at any time.

You may also lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.

Minors

LALANA is not intended for children: it is reserved for people aged 18 and over, and we do not knowingly collect data about minors. If we learn that an account belongs to a minor, we delete it.

Users in Belgium, Luxembourg and Switzerland

The European regulation (GDPR) applies in Belgium and Luxembourg; you can contact the data protection authority of your country. In Switzerland, the Federal Act on Data Protection also applies. Quebec and the rest of Canada will be covered when they open.

Changes

This policy may change; the date of the last update appears at the top of the page and, for a significant change, the app informs you.