Privacy policy

Version of 10 October 2026. It describes processing on myselah.net and in the Selah app. If this translation differs from the French version, the French version prevails.

1. Controller

The controller is Neotep, publisher of Selah. Privacy contact: contact@selah.ac. Neotep has not appointed a data protection officer. If an appointment becomes mandatory, the details will be published here.

2. Data concerned

• Account. Sign-in identifiers handled by the app platform, email address, and the fact that you ask to join the beta.
• Use of the app. Conversations, journal, notes, highlights, tags, reading progress, preferences (language, theme) and reminders, where you use those features.
• Voice. If you dictate a message, the audio is processed to transcribe it. It is not used to build a voiceprint. The resulting text may be kept in the conversation.
• Website. The host’s technical logs (IP address, date, page, browser) for security and operation.
• Cookie choice. Your decision to accept or refuse fonts is stored in the browser’s local storage.
• Contact form. The subject, email address and message you send from the website.

Neotep does not ask for health data, political opinions or religious data in order to create the account. Text you choose to write may still reveal beliefs or a personal situation. Do not put there anything you do not want processed in order to provide the service.

3. Purposes and legal bases

• Create the account, handle the beta request and provide the service: steps prior to a contract and performance of a contract (GDPR article 6(1)(b)).
• Show your notes, journal and conversations: the same basis, because that is the service you asked for.
• Secure the site, prevent abuse and keep technical logs: legitimate interest (article 6(1)(f)), limited to what is necessary.
• Load Google Fonts: consent (article 6(1)(a)), which you can refuse without losing access to the site.
• Reply to a message you send through the form: your request (article 6(1)(b)).
• Meet a legal obligation, for example a lawful request from an authority: article 6(1)(c).

The artificial intelligence answers help you study. They are not automated decisions producing legal effects or similarly significant effects under GDPR article 22. You remain free to ignore them.

4. Recipients

Data is available to Neotep and its providers, only for the purposes above:

• Hostinger, host of the website;
• Base44, the platform that runs the app and sign-in;
• the technical provider that generates the assistant’s answers, which receives the text needed for that answer;
• Google, only if you accept fonts, in order to deliver them.

Neotep does not sell your data and does not share it for advertising. An authority may receive it if the law requires.

5. Transfers outside the European Union

Hosting of the app and generation of answers may take place outside the European Economic Area. Where that happens, the transfer relies on a Chapter V GDPR mechanism: an adequacy decision or standard contractual clauses, with any further safeguards required. Google Fonts are sent to Google only if you accept them.

6. Retention

• Account, conversations, journal, notes and progress: for the life of the account. After the account or the item is deleted, erasure within 30 days, except a technical backup still in rotation, which is overwritten on the host’s cycle.
• A beta request that is refused or abandoned: 12 months, then erasure.
• Technical logs: 12 months.
• Proof of your cookie choice: 6 months in your browser, then the question is asked again.
• A message sent through the form: for as long as needed to reply and follow up, and no longer than 12 months, then deleted from the contact@selah.ac mailbox.

7. Security

Neotep takes proportionate measures: limited access, encrypted connection (HTTPS), and providers required to protect the data. No system is flawless. If a breach is likely to result in a risk to you, you will be informed when the GDPR requires it, and the CNIL as well if necessary.

8. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. You may withdraw consent (fonts) at any time; withdrawal does not affect the past. You may also give instructions about your data after your death, as French law allows.

Write to contact@selah.ac or use the contact form. Proof of identity may be asked if the request is not already tied to your account. Neotep replies within one month, extendable by two months if the request is complex. You may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr.

9. Cookies and similar trackers

The site does not set advertising cookies. The choice to accept or refuse is stored in the browser’s local storage, which is necessary so the question is not asked on every page.

• Necessary. Remembering that choice. Always on. Basis: legitimate interest in honouring your decision.
• Google Fonts. Optional. If you accept, your IP address and the request’s technical headers are sent to Google to download the fonts. If you refuse, the site uses your device fonts.

“Accept all” and “Refuse all” are shown together. You can change your mind with the “Cookies” link at the bottom of every page. Refusal is as easy as acceptance. The choice lasts 6 months.

10. Children

The service is not aimed at anyone under 15. Neotep does not knowingly collect their data. If an account of a child under 15 is reported, it is deleted.

11. Updates

This policy may change. The date at the top is the version in force. A material change is flagged on the site or in the app when possible.