Privacy Policy

Effective date: 2026-06-04

This privacy policy is applicable to the Antoinette app for mobile devices and web browsers, together with any related services operated by Antoinette LLC (collectively, the "Application"). Antoinette LLC is hereinafter referred to as the "Service Provider".

Data Controller Information

Antoinette LLC acts as the Data Controller responsible for the processing of your personal data.

• Name: Antoinette LLC
• Address: 2106 House Ave Suite 769 Cheyenne, WY 82001
• Email: contact@antoinette-official.com

For data protection inquiries and to exercise your GDPR rights, please contact the Data Controller using the contact information above.

What information does the Application obtain and how is it used?

The Application and related services acquire the information you supply when you download, access, or register for the service. Registration with the Service Provider is not mandatory. However, you might not be able to use some of the features offered by the service unless you register.

The Service Provider may also use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

Legal basis for processing your personal data

Where the GDPR applies, the Service Provider relies on one or more lawful bases to process your personal data, including:

• Contract performance: processing necessary to provide the Application or fulfil a contract with you.
• Consent: where you have given explicit consent to processing. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
• Legitimate interests: where processing is necessary for the Service Provider's specific legitimate interests, such as maintaining network security, preventing fraud, or improving core functionality, provided those interests are not overridden by your data protection rights.
• Legal obligation: to comply with laws or government requests.

Data Residency

EU users' data is stored in Frankfurt, Germany (AWS eu-central-1). US users' data is stored in Oregon, USA (AWS us-west-2). Data is not transferred between regions.

Cookies and similar technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, and service delivery. Where required by law, the Service Provider will obtain your consent before using non-essential tracking technologies.

What information does the Application collect automatically?

The Application may collect certain information automatically, including the type of device you use, your device's unique identifier, the IP address of your device, your operating system, the type of browser you use, and information about the way you use the Application.

Does the Application collect precise real-time location information?

This Application does not gather precise information about the location of your device.

Does the Application use Artificial Intelligence (AI) technologies?

The Application does not use Artificial Intelligence (AI) technologies to process your data or provide features.

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data outside the European Economic Area (EEA). Where such transfers occur, the Service Provider will use an appropriate transfer mechanism required by GDPR Chapter V, such as Standard Contractual Clauses (SCCs) approved by the European Commission. The Service Provider has accepted the AWS GDPR Data Processing Addendum, which governs data processing by AWS on behalf of the Service Provider.

Third-party disclosure

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application. The Service Provider may disclose information:

• as required by law, such as to comply with a subpoena or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights or the safety of others, or to investigate fraud;
• with trusted service providers who work on their behalf, do not have an independent use of the information, and have agreed to adhere to the rules set forth in this privacy statement.

Where the GDPR applies, the Service Provider enters into Data Processing Agreements (DPAs) with third-party processors as required by Article 28 GDPR.

Data retention

• User Provided Data: Retained for the duration of your use plus 12 months thereafter, unless longer retention is required by law.
• Automatically Collected Data: Retained for up to 24 months from collection.
• Aggregated and Anonymized Data: Retained indefinitely.
• Data required for legal compliance: Retained as long as required by applicable law.

You have the right to request deletion of your personal data at any time, except where retention is required by law. Contact us at privacy@antoinette-official.com.

Children's privacy

The Application is not intended for children under 16 years of age. The Service Provider does not knowingly collect personally identifiable information from children. If you believe a child has provided personal information, contact us at contact@antoinette-official.com.

Security

The Service Provider implements physical, electronic, and procedural safeguards to protect information it processes. However, no security system can prevent all potential security breaches.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, the Service Provider will notify the relevant supervisory authority within 72 hours as required by applicable law, and will notify you without undue delay if the breach is likely to result in a high risk to your rights and freedoms.

Your GDPR data protection rights

• Right of Access: You can request access to your personal data.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Erasure: You can request deletion of your personal data (the "right to be forgotten").
• Right to Restrict Processing: You can request that the Data Controller limits how they use your data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests, including an absolute right to object to direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact: privacy@antoinette-official.com

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority. Contact details: edpb.ec.europa.eu.

California privacy rights (CCPA/CPRA)

If you are a California resident, you have rights including: Right to Know, Right to Delete, Right to Correct, Right to Opt-Out of sale or sharing, and Right to Non-Discrimination. To exercise these rights, contact contact@antoinette-official.com.

Changes to this Privacy Policy

The Service Provider may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy with an effective date. Previous versions are available upon request at contact@antoinette-official.com.

Contact

For privacy-related inquiries or to exercise your rights: privacy@antoinette-official.com

General inquiries: contact@antoinette-official.com