Privacy Policy
Lastr asks twenty-one intimate questions, then walks with you for twelve weeks. Here is exactly what happens to those answers.
Last updated: 20 August 2026
The publisher is a French individual and French law applies. The French version is the binding one; this English translation is provided for convenience.
Data controller
Julien Montagne, publisher of Lastr, acting as an individual. Contact: hello@julienmontagne.com.
The principle: everything stays on your phone
Lastr works entirely offline and without an account. The forty lessons, the sixteen exercises and the eighty-four programme days are bundled into the app. Your intake answers, your PEDT scores, your completed sessions and your settings are stored in the app's private storage, on your device, and do not leave it.
Only four features call a server, and each is described below. None is required to follow the programme.
What we do not do
- No advertising tracking, no advertising identifier, no ads. The app never asks for tracking permission (ATT) because it has no use for it.
- No session recording, no automatic screenshots. Nothing you see or touch is filmed or replayed.
- No cross-referencing with other apps or websites. The identifier used by usage analytics does not follow you anywhere else.
- No sale, no sharing for commercial purposes. Your data is not a product.
- No automated decision-making producing legal effects concerning you.
The account, which is optional
Signing in does one thing only: it recovers your programme if you change phone or reinstall the app. You can use Lastr indefinitely without an account.
Sign-in uses Sign in with Apple. Apple passes us only an opaque identifier specific to this app. We receive neither your name nor your real email address, and we store nothing beyond that identifier.
What is backed up if you sign in
| Data | Why |
|---|---|
| Completed sessions, dates, durations, reported levels | To rebuild your programme on a new device |
| PEDT scores and intake questionnaire answers | Without them the programme restarts from zero and loses its branch |
| Opaque Apple identifier | To find your backup and attach your subscription |
Not backed up: your device settings, the Face ID lock, the discreet icon and the reminder time. They describe a phone, not a person.
Legal basis: performance of the service you request by signing in (Article 6(1)(b) GDPR).
Health data
Your intake answers and PEDT scores concern your sexual health. They are special category data under Article 9 GDPR. They leave your device only if you create an account, and creating one constitutes explicit consent under Article 9(2)(a). You can withdraw it at any time by deleting your account, which erases them immediately.
Usage analytics
To know which screens earn their place, where the intake questionnaire loses people, and whether the programme holds over time, the app sends events to PostHog. It is the only tool of its kind in Lastr, and it switches off in one tap: Settings → Usage statistics. Switched off, nothing leaves and nothing piles up in the meantime.
What is sent
- Steps reached: which intake screen was seen, which one was answered, which one was skipped, and how far the journey went.
- The option you picked on an intake question, as its scoring key — never the text you typed. The optional first name asked at the end of the questionnaire is never sent: we only know whether the field was filled in or skipped.
- The questionnaire outcome, in bands rather than values: the PEDT verdict ("no indication", "probable signs", "strong indication"), a duration band, the programme branch and the factors identified. Neither the score out of twenty nor the duration in seconds leaves your device.
- Programme progress: day opened, day recorded, week, actual duration, arousal level reached, consecutive-day streak, weekly review, lesson opened, situation logged.
- Subscription: wall shown, plan selected, purchase started, succeeded, cancelled or failed with its error code.
- The coach: the fact that a question was asked, whether the server answered, and whether the safety rule applied. Neither the question nor the answer is sent.
- The device: the installation identifier described below, the model, the OS version, the app version, the language and the time zone. Your IP address is used by PostHog to derive a country.
Never sent: the text of session notes, the first name you typed, the questions you asked the coach, the exact PEDT score, the declared duration in seconds.
Health data and legal basis
Some of these properties — the PEDT verdict, the duration band, the option picked on an intake question — describe your sexual health, even reduced to bands. They fall under Article 9 GDPR. They are attached to an installation identifier rather than to your name, and they are not cross-referenced with any other source.
Legal basis: the legitimate interest in understanding and improving the service (Article 6(1)(f)), together with the right to object that the setting gives you in one tap. If you would rather none of this left your device, switch off "Usage statistics" in the settings — it removes no feature from the app.
The coach
When you ask the coach a question, that question is sent to Google Gemini, which writes the answer. A context line built by our server is attached, made only of counters: the week number, the number of sessions completed, the last reported duration, and whether you are on the release branch. No identifying data is sent, and your questionnaire answers never are.
The text of your questions is not kept on our server. We keep only a count of questions asked per day, used to cap usage. Your text is not used to train any model, by us or by anyone else.
The coach is optional: not using it takes nothing away from the programme, and nothing is then sent to Google.
Legal basis: performance of the service.
The subscription
Payments are handled by Apple. We never see your payment details. Subscription management goes through RevenueCat, which validates receipts with Apple and passes us only the state of your access: active, in trial, in a grace period or expired, along with the plan and the renewal date.
The device
On launch, the app registers the installation with our server: an installation identifier provided by Apple and specific to this app, the platform, the app version, the language, the time zone, and the state of your reminders (on or off, chosen time, discreet mode). This tells us who a service message may be addressed to, and at what hour. That identifier is not an advertising identifier, it does not follow you from one app to another, and it changes if you uninstall the app.
Legal basis: the legitimate interest in operating and maintaining the service.
Notifications
Reminders are scheduled on your device, not pushed from a server. They work without an account and without a network. Their text never names the subject of the app: they appear on a lock screen, sometimes in front of somebody else. You can switch them off at any time in the app's settings or in your phone's.
Technical errors
The app reports no errors. Our server does send its technical errors to Sentry when that feature is enabled, so it can be fixed. Those reports contain stack traces, not the content of your data.
Retention
- On your device: until you erase your data from the settings, or uninstall the app.
- On the server, with an account: as long as the account exists. Deleting the account immediately and permanently erases the account, the programme backup, the linked devices and the subscription mirror.
- Sessions: a session unused for six months is deleted automatically.
- Coach counter: one number per day, with no content.
- Usage analytics: retained by PostHog under its own retention policy, and erasable on request at the address below.
Your rights
You have the right of access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent at any time.
Two of them are exercised directly in the app, without writing to anyone: Settings → Export my data for portability, and Settings → Delete my account for erasure. For anything else, write to hello@julienmontagne.com.
If you believe your rights are not respected, you may lodge a complaint with the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
Hosting and processors
- Hostinger International Ltd. (registered in Cyprus) — server and database hosting, on servers located in Germany, in the European Union.
- Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA — app distribution, Sign in with Apple, subscription billing.
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA — Gemini API, only when you ask the coach a question.
- RevenueCat, Inc. — purchase receipt validation and subscription state.
- PostHog, Inc., 2261 Market Street, San Francisco, CA 94114, USA — app usage analytics, until you switch it off in the settings.
- Functional Software, Inc. (Sentry) — server-side technical error reports, when enabled.
Transfers outside the European Union
Your programme data is stored in Germany and does not leave it. Transfers to the United States are limited to what is described above — a question asked of the coach, the validation of a purchase, a technical error trace, usage analytics events while they are enabled — and rely on the European Commission's standard contractual clauses.
Age
Lastr is rated 17+ and is for adults only. We do not knowingly collect data concerning minors.
Changes
Any change to this policy will be published on this page, with a new update date.