English translation for information. The French version (https://www.duroapp.fr/legal/privacy) prevails in case of discrepancy.

Duro Privacy Policy

Version 1.4 — last updated: 26 October 2026

Duro is an iPhone endurance-training app for men, offering pelvic floor (Kegel) exercises, breathing exercises and a coach based on artificial intelligence. It is reserved for adults (18 and over).

We designed it so that you can use it without an account, without an e-mail address and without a surname. This policy explains what data is processed, why, for how long, with whom it is shared and how to exercise your rights. It applies to the Duro app and to the web pages linked to Duro (the www.duroapp.fr website, creator link pages and redirect pages to the App Store).

1. The essentials in 30 seconds

• No account. Duro recognises you through a random identifier created on your iPhone (a "pseudonym"). We do not ask for your e-mail address, phone number or surname. Your first name is optional. Your data is pseudonymous, not anonymous: it is linked to this identifier.
• Your answers about your health and sex life leave your iPhone only with your explicit consent. Until you say yes, they stay on your iPhone. This consent is requested after you subscribe, on the "Here, it's discreet" screen (« Ici, c'est discret »), with the buttons "Share" (« Partager ») and "Don't share" (« Ne pas partager »). You can give or withdraw it at any time in Settings › Privacy.
• The coach "Victor" is an AI (Claude, by Anthropic). Your messages are sent only after your explicit consent, given before your first message.
• No advertising, no reselling, no tracking. Duro does not include any third-party advertising or analytics SDK, does not track you across other apps or websites and never identifies your device from its characteristics (IP address, model, screen, time zone, etc.).
• Erase everything: Settings › Delete my data erases your data from your iPhone and from our servers.

2. Who is responsible for your data?

The data controller is ALLURE, a simplified joint-stock company (société par actions simplifiée) with a share capital of €1,000:

• registered office: 32 rue de Paris, 92100 Boulogne-Billancourt, France;
• registered with the Nanterre Trade and Companies Register under number 988 842 902;
• intra-community VAT number: FR28 988 842 902;
• publication director: Henrique Da Silva;
• contact, including for any question about your data: contact@duroapp.fr.

ALLURE has not appointed a data protection officer: all requests are handled at the address above. In this policy, "we" means ALLURE.

3. The data processed, why, and on what basis

3.1 Pseudonymous identifier and technical information

What. When you first open the app, your iPhone creates a random identifier (a UUID), stored in Apple's Keychain. It serves as an installation identifier for our server and is attached to your Apple purchases (appAccountToken). We also receive: the iPhone model, the iOS and Duro versions, the language, the region, the time zone and the environment (production or test). Versions earlier than 1.0 (build 9) also sent Apple's identifier for vendor (IDFV) and the screen size; these are no longer collected. This information is used for the operation and diagnostics of the app; it is never used to recognise you elsewhere or to link you to a click.

Your IP address. Our server necessarily sees it when your app communicates with it. It uses it for security (usage limits) and, on first opening, to infer your country and region (using a geolocation database installed on our server, without calling any third-party service). The app's IP address is not stored in our database (our hosting provider may keep it briefly in its technical logs, for the security of its service).

Why. To operate the app and its server, link your subscription to your installation, ensure security and produce statistics.

Legal basis. Performance of the contract (Duro's terms of use) and our legitimate interest in securing and improving the service.

What we do not do. We do not use Apple's advertising identifier (IDFA) and we do not ask you for tracking permission: Duro does not track you.

3.2 Your assessment answers (health and sex life data)

What. During the assessment, you answer questions about your goal, your current endurance and the endurance you are aiming for, your control, the firmness of your erections, how often you engage in solo pleasure, your stress and your age bracket (previous versions of Duro also asked about your physical activity, your habits, your relationship, your confidence and any upcoming event). This is data concerning your health and sex life within the meaning of Article 9 of the GDPR.

Where it goes.

• It is always stored on your iPhone, in a file protected by iOS encryption and excluded from iCloud backups. Your plan, score and level are calculated on your iPhone.
• Until you have given your consent, it stays on your iPhone. Our usage statistics record only your progress through the assessment (the screens viewed), not your answers.
• When consent is requested. The assessment takes place before subscription, but consent is requested afterwards: once you have subscribed, the "Here, it's discreet" screen (« Ici, c'est discret ») offers you two buttons of the same size, "Share" and "Don't share", with no option pre-selected. If you do not subscribe, you are not asked: your answers stay on your iPhone, and you can still give your consent in Settings › Privacy.
• If you give your consent, your answers are then sent to our server, under your pseudonymous identifier, without any e-mail address or surname, to help us improve Duro.
• If you refuse, they stay on your iPhone, as before your choice.

Why. To improve Duro, for example through aggregated statistics across all users, and to develop the programme.

Legal basis. Your explicit consent (Article 9(2)(a) and Article 6(1)(a) of the GDPR). You can withdraw it at any time in Settings › Privacy. Withdrawal erases your answers from our server. It does not affect what was done before the withdrawal.

What we never do. Use your answers for advertising, sell them, hand them over to a data broker or store them in iCloud.

3.3 Your first name (optional)

If you provide a first name or nickname (it is requested after you subscribe), it is used to personalise the app (for example, to greet you by your first name). It is stored on your iPhone and, only if you agree to share your answers (section 3.2), sent to our server with your profile. It is never sent to the AI coach and does not appear in any export of our statistics. Legal basis: performance of the contract.

3.4 Your training and your use of the app

What. The screens viewed, the buttons used, the start and end of sessions (type, level, week, duration), your streak, your hold records, the evolution of your score, notification opens and the subscription steps (offer displayed, plan chosen, purchase started, successful or cancelled). These events are sent to our server in small batches. Without your consent (section 3.2), health-related values (score, durations, hold records, etc.) are removed from them before sending.

The version of the subscription screen. We test several presentations and several prices for the subscription. The first time you open the subscription screen, the app randomly selects the version that will be shown to you (A, B or C), then keeps it on your iPhone. This letter is also stored on our server, with your pseudonymous identifier and in the subscription events, to compare the versions (views, trials, subscriptions, revenue). It contains no information about you, and the selection takes into account neither your answers, nor your device, nor your country (sole exception: with a creator code, you are always offered the annual plan with a 14-day trial).

Why. To measure what works, identify problematic screens, fix bugs and improve the programme; to compare versions of the subscription screen; to display your ranking among subscribers (for example "Top 1%"), calculated from your latest score.

Legal basis. Our legitimate interest in measuring the use and quality of Duro. These statistics are produced by our own tools, without any third-party SDK, and are never combined with data from other companies. You can object to this at any time by writing to us (section 10).

The detailed history of your sessions and your Sunday check-ins stay on your iPhone. Only the elements described above are sent, along with the information transmitted to the coach if you use it (section 3.7).

3.5 Creator links, creator code and "How did you hear about Duro?" (attribution)

Duro is recommended by partner content creators. Here, plainly, is how we know who introduced you to Duro.

When you tap a creator's link (a web page, before any installation), our server records the click: date and time, link used, country, region and city inferred from the IP address, device type, operating system, browser and possibly iPhone model as they appear in the header sent by your browser, the app the click came from (Instagram, TikTok, etc.), referring page, browser language and the link's campaign parameters. The full IP address is kept for 30 days at most, to count unique clicks and block abuse; only a truncated version (last block masked) is kept thereafter. The page does not read any information from your device via script (no screen size, no time zone, no other characteristic).

The creator's code. The page displays their code and a "Download Duro" button. When you tap it, the code is copied to your clipboard (nothing else), then the App Store opens. In the app, it is you who pastes or enters the code: Duro never reads your clipboard without your action. The code is stored in your profile and on our server.

We never link your installation to a click: not by IP address, nor by your iPhone model, your language, your time zone, your screen size or any other characteristic of your device. An installation is attributed to a creator only through the code that you entered or pasted.

"How did you hear about Duro?" If you have not entered a code, the app may ask you this question once (Instagram, TikTok, a creator, a friend, etc.). Your answer is stored with your pseudonymous identifier and is used solely for aggregated statistics.

App Store campaigns. Links to the App Store contain an Apple campaign token. Apple provides us, in App Store Connect, with aggregated figures per campaign (number of downloads and purchases). We do not receive any personal data about you from Apple.

Why. To know which creators and which campaigns bring people to Duro, to pay our partners and to measure the effectiveness of our campaigns. The creator code may also give you a benefit (a longer trial) if you are not yet a subscriber.

Legal basis. Our legitimate interest in paying our partners and measuring our campaigns. For the creator code: performance of the contract (the benefit linked to the code).

What creators see. Only aggregated figures (clicks, installations with their code, subscriptions, revenue generated). They never see your answers, your messages to the coach, your first name or your identifier.

3.6 Purchases and subscription

What. Purchases are made and paid for with Apple. We never see your bank card, your name or your Apple ID. We receive signed transaction information from Apple: transaction identifiers, product, price and currency, purchase, renewal and expiry dates, trial or offer used, storefront country, renewal status, refunds. It reaches us via your app (after verification) and via App Store server notifications.

Why. To activate your subscription, calculate your seniority and loyalty status, offer you the loyalty prices you are entitled to, track our revenue (including per creator) and handle any disputes.

Legal basis. Performance of the contract and our legal obligations.

3.7 The AI coach "Victor"

What. If you accept the "Before talking to Victor" screen (« Avant de parler à Victor »), the following information is sent to our server, then to Anthropic, the publisher of the Claude model, to generate the reply:

• the messages you write and your latest exchanges with Victor (20 messages at most), for conversation continuity;
• a summary of your plan: your goal, your target duration and target frequency, the duration you reported in the initial assessment and in your latest Sunday check-in, your Duro score and its four pillars (control, firmness, mindset, lifestyle), your exercise level, your programme week, the length of your plan and the number of weeks remaining before your goal date, your phase (plan or Maintenance), your streak, your hold record, your daily training time, your age bracket (and, only for profiles created before version 1.2 that had provided them, your relationship status and any upcoming event with its timeframe), the days of your latest sessions (7 at most), the local time, the app's language (so that it replies in your language) and, if you are a subscriber, your loyalty status (Bronze, Silver, Gold or Platinum).

Never sent to Anthropic: your first name, your installation identifier, your Apple ID, your IP address. Our server additionally removes any identifying data that might appear in the summary.

As your messages may refer to your health or sex life, they are treated as sensitive data.

Retention.

• On your iPhone: the conversation is stored in a protected file.
• On our server: messages (yours and Victor's) are kept for 12 months, linked to your random identifier, then automatically erased. They are used to operate the service (daily message limit), for its security (abuse detection) and to improve Victor's replies. Only authorised members of our team can view them, without ever knowing your identity.
• At Anthropic: as a processor, Anthropic does not use this data to train its models and keeps it only for a limited period, for the security of its service, in accordance with its commercial terms.

Legal basis. Your explicit consent (Article 9(2)(a) of the GDPR), obtained before your first message. You can withdraw it in Settings › Coach: the conversation is then erased from your iPhone and from our server, and nothing more is sent.

Important. Victor is not a doctor. His replies may contain errors. They do not replace medical advice, a diagnosis or treatment.

3.8 When you write to us

If you contact us (for example via "Contact us" in Settings), we receive your e-mail address and the content of your message. They are used solely to reply to you and follow up on your request. Legal basis: our legitimate interest in responding to requests.

3.9 The website waiting list (e-mail)

On www.duroapp.fr, while Duro is not available for download in your country (or if you have an Android phone), you can leave your e-mail address to be notified. We record: your e-mail address, the website language, the type of phone chosen (iPhone or Android), the button used and the date of your consent. No IP address is recorded and nothing links this e-mail address to the app or to your assessment answers.

• Purpose: to notify you of Duro's launch (iPhone or Android) and send you its news.
• Legal basis: your consent, given by ticking the box on the form. You can withdraw it at any time: one-click unsubscribe link in every e-mail, or a simple message to contact@duroapp.fr.
• Your e-mail address is not sold, rented or shared with advertisers.

3.10 What stays on your iPhone

The following are not sent to our servers: the detailed history of your sessions, your Sunday check-ins, your settings (Face ID, icon, notification style and time), and your Face ID unlocking. Face ID is managed by iOS: Duro receives only "success" or "failure", never any biometric data.

Duro's notifications are scheduled locally on your iPhone. They do not go through a notification server and contain no sensitive words.

4. Retention periods

These periods are applied automatically, every day, by our server.

At the end of these periods, the data is deleted.

5. Who has access to your data?

• Our team (ALLURE), on a need-to-know basis: support, technical, analysis. Access to the administration console is password-protected and restricted to authorised persons.
• Our processors, who act solely on our instructions, under a contract compliant with Article 28 of the GDPR:

• Apple processes your purchases, your subscription, your refunds, App Store statistics, as well as the download and updates of the app, as a separate data controller, under its own privacy policy (apple.com/fr/legal/privacy).
• The authorities, only if the law requires us to.

We do not sell, rent or exchange your data with anyone.

6. Transfers outside the European Union

Anthropic is established in the United States, and Railway, our hosting provider, has its headquarters there. These transfers are governed by the safeguards provided for by the GDPR:

• the recipient's certification under the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), where it exists;
• failing that, the European Commission's standard contractual clauses, supplemented where necessary by additional measures (encryption in transit, pseudonymisation, no identifying data transmitted to the coach).

You can obtain a copy of these safeguards by writing to us (section 10).

7. How we protect your data

• Pseudonymisation: no name, e-mail address or Apple ID is required, and your identifier is random.
• On your iPhone: files protected by iOS encryption ("complete" protection) and excluded from iCloud backups; identifier stored in the Keychain; optional Face ID lock; screen blurred in the app switcher.
• Encrypted communications (HTTPS) between the app and our server.
• Cryptographic verification of Apple transactions.
• No app IP address stored in our database; automatic erasure of click IP addresses after 30 days.
• Installation exports from the console contain no first name or city.
• Restricted and protected access to the administration console.

8. Your rights

You have the following rights over your data:

• access: to know what data we hold and obtain a copy of it;
• rectification: to correct inaccurate data (you can also retake your assessment);
• erasure: to have your data deleted;
• restriction: to temporarily freeze a processing operation;
• objection: to object to processing based on our legitimate interest (for example usage statistics);
• portability: to receive the data you have provided to us in a machine-readable format;
• withdrawal of consent, at any time, without affecting what was done before;
• post-mortem directives: to specify what will happen to your data after your death (Article 85 of the French Data Protection Act, loi Informatique et Libertés).

The simplest way: from the app.

• Settings › Delete my data: immediately erases your data from your iPhone and from our servers (answers, progress, events, conversation with the coach, transactions). If your iPhone is offline, everything is erased from the iPhone straight away, and deletion on our servers is completed automatically at the next connection. Your Apple subscription is not cancelled: to stop it, go to iOS Settings › your name › Subscriptions.
• Settings › Privacy: withdraw or give again your consent to sharing your answers.
• Settings › Coach: withdraw your consent to the coach and erase the conversation.

By e-mail. Write to us at contact@duroapp.fr. As we do not know who you are (that is the principle of Duro), we may ask you for information allowing us to find your data without collecting any more, for example the transaction identifier shown on your Apple receipt. We reply within one month (a period that may be extended by two months for complex requests, in which case we will inform you).

Complaint. If you consider that your rights are not being respected, you can lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr) or with the data protection authority of your country of residence.

9. Minors

Duro is reserved for people aged 18 and over. The first screen asks you to confirm that you are an adult. We do not knowingly collect data concerning minors. If we learn that a minor is using Duro, we delete their data. A parent or legal representative can write to us at the address in section 10.

10. Contact us

• Post: ALLURE, 32 rue de Paris, 92100 Boulogne-Billancourt, France
• E-mail: contact@duroapp.fr
• In the app: Settings › Contact us

11. Changes to this policy

We may amend this policy, for example if Duro evolves or if the law changes. The date of the latest update appears at the top of the page. In the event of a significant change, in particular a new purpose or a new recipient, we will inform you in the app before it takes effect and, if the law requires it, we will ask for your consent again.

Version 1.3 (25 October 2026): IDFV and screen size are no longer collected; withdrawing consent for the coach also erases the conversation from our server; deletion completed at the next connection if the iPhone is offline; relationship status and upcoming event sent to the coach only for older profiles.

Version 1.2 (23 October 2026): consent to sharing your answers is requested after subscription ("Here, it's discreet" screen); assessment questions updated; subscription screen version (price test) stored on our server.

Version 1.1 (21 October 2026): no more matching between an installation and a click; app IP address not stored; exact list of the information sent to the coach; retention periods applied automatically.