Politique de confidentialité
Ce texte n’est pour l’instant disponible qu’en anglais. La version anglaise fait foi.
ASafariM OS keeps as little about you as it can: what it needs to sign you in, to decide what you may open, and to keep the system secure. No ads, no analytics, no tracking.
Who we are
ASafariM, in Belgium, runs ASafariM OS and is the controller of the personal data described here. For anything about your data, email privacy@asafarim.site.
This policy covers asafarim.site, id.asafarim.site (sign-in and accounts), admin.asafarim.site (the Admin console), docs.asafarim.site, Notes, and any other app on asafarim.site that links to it. Breinhap has its own privacy policy, and so does IGS-Pharma (its landing page and Android app). The asafarim.com platform is a separate service with its own policy.
What we use, and why
| Data | Why | Legal basis |
|---|---|---|
| Your email address (or phone number, where sign-in by text message is offered) and an account id | To create your account, send you sign-in codes and recognise you when you come back | Contract: providing the service you asked for (6(1)(b)) |
| Passkeys: the public key, the name you gave it, when it was added and last used | To let you sign in with a passkey. The private key never leaves your device. | Contract (6(1)(b)) |
| Whether you have access, your roles and permissions, and who approved them | To decide what you may open, and to let an administrator approve or end access | Contract (6(1)(b)) |
| Sign-in and access events (an append-only security log). Addresses and identifiers in it are stored as keyed hashes, not in plain text. | To protect accounts, limit abuse (for example too many sign-in attempts) and investigate incidents | Legitimate interest: keeping the service secure (6(1)(f)) |
| What you write in an app, such as study notes in Docs or Notes | To store it and show it to you. Notes are private to you. | Contract (6(1)(b)) |
| Technical data a server always receives: IP address, browser, the page asked for, errors | To deliver pages, keep the service running and find faults. Kept briefly. | Legitimate interest (6(1)(f)) |
| Your light or dark theme choice | To show the theme you picked. See the cookie policy. | Your request (a cookie you set yourself) |
| Your language choice (English, Nederlands, Français or Deutsch) | To show the pages in the language you picked. See the cookie policy. | Your request (a cookie you set yourself) |
We do not use your data for advertising or profiling, we do not sell it, and we make no automated decisions about you that have legal or similarly significant effects.
Data outside the EU
We keep data in the European Economic Area where we can. When a provider handles it outside the EEA (as with Anthropic and GitHub above), we rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or on the Commission's standard contractual clauses. Email us for a copy of the safeguards.
How long we keep it
- Your account (email or phone, passkeys, access): until you ask us to delete it.
- Sign-in codes: 5 minutes, and only as a hash.
- Sign-in sessions: up to 12 hours on id.asafarim.site; an app's session ends no later.
- Your notes: until you delete them or your account.
- Security log: kept for accountability. It cannot be changed afterwards, and it holds no email address or IP address in plain text.
- Server logs: a short time, then they are overwritten.
Your rights
Under the GDPR you may ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to object to a use based on legitimate interest, and to receive it in a portable format. Email privacy@asafarim.site from the address on your account. We answer within one month.
If you think we handle your data wrongly, please tell us first. You can always complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels.
Security
Connections are encrypted (HTTPS). Sessions are kept in cookies other sites and other apps cannot read. Sign-in codes are short-lived and stored hashed, passkeys use public keys only, and access is checked on every request.
Children
ASafariM OS is not meant for children: access is by approval, for people aged 16 or over. Breinhap, our app for teenagers, follows its own stricter policy.
Changes
When what we do with your data changes, we update this page and the date below first. For a change that matters to you, we tell you when you next sign in.