Privacy policy

This is a translation, provided for convenience. In case of discrepancy, the French version prevails.

1. Data controller

Controller: QORLET, a French simplified joint-stock company with a sole shareholder
Company number: 109 058 560
Registered office: 143 avenue du Général de Gaulle, 92160 Antony, France
Contact: contact@qorlet.com

Given the nature and volume of processing, the company is not required to appoint a data protection officer. Any request concerning personal data is handled at the address above.

2. Mobile application

This section covers the applications published by Qorlet, including Abjad (com.qorlet.abjad).

2.1 No data collected

Our app collects, transmits and shares no personal data whatsoever. The published build does not request the network access permission: it is technically incapable of sending a request to a server.

In particular, there is:

no user account and no login;
no analytics or usage reporting;
no advertising network and no advertising identifier;
no crash report sent to any third party;
no access to location, contacts, camera, microphone, files or calendar.

2.2 Data kept on your device

The app stores your preferences and progress locally, using the operating system's standard storage mechanism. This information is never transmitted to us: the app does not declare the network permission and cannot make any request.

Your operating system, however, may back it up to your own account — Android Auto Backup to your Google account, or the system backup on iOS. Its purpose is to restore your progress on a new device. That copy belongs to your account and is governed by your system's privacy policy; we have no access to it. On Android it is end-to-end encrypted whenever your device is protected by a screen lock.

Uninstalling the app permanently deletes the local data. You may also clear it from the system settings, under the app's storage management section. The backup copy, in turn, is switched off in your device's backup settings.

2.3 Writing to us from the app

The app offers a contact screen. It sends nothing itself: it opens your mail client with a pre-filled message. The message is only sent if you send it, from your own account.

That pre-filled message contains four technical items: the app version, the selected language, the operating system, and an installation identifier. That identifier is a number drawn at random on your device. It is not a hardware or advertising identifier, it is shared with no other app, and it disappears when the app is uninstalled. Its only purpose is to link two messages from the same installation.

If you write to us, your address and the content of your message are processed solely in order to reply to you, on the basis of our legitimate interest. Messages are kept only as long as needed to handle the request, then deleted. They are never used for marketing.

2.4 Links to app stores

The app offers a link to leave a review on the store it was installed from. That link opens the store app or your browser. From that moment you leave our app and the store operator's own privacy policy applies — Google, Apple or the operator concerned.

2.5 Purchasing the app

Our apps are sold through app stores. The transaction, payment details and invoicing are handled exclusively by the store, acting as reseller. We receive no bank details, no name and no address — only aggregated sales reports.

2.6 Age provided by Google Play and the App Store

Some laws, including those of Utah, Texas and Louisiana in the United States, require apps to check the age range verified by the store. On Android, each time it opens, the app therefore asks Google Play, which answers on the device itself: an age range — for example “13 to 15” —, the status of parental supervision, or nothing if this information is not shared.

This answer stays in memory while the app is in use and is never stored or transmitted. It serves only to comply with these laws: no advertising, no profiling, no audience measurement. The app never asks for your age. When a verification is required, it takes place in Google Play and is governed by Google’s privacy policy.

On iPhone and iPad, Apple has offered the same mechanism since iOS 26: the app asks the system for the age range you have declared. It only does so when the system indicates that one of these US state laws applies; everywhere else, it asks for nothing. Apple then displays the prompt, and you remain free not to share the range. On earlier versions of iOS this feature does not exist, and the app asks for nothing.

Apple’s answer is handled exactly like Google Play’s: it stays in memory while the app is in use and is never stored or transmitted. Qorlet receives none of it and keeps none of it: the app has no server to send it to — see section 2.1. Here too, the app never asks for your age, and Apple’s prompt is governed by Apple’s privacy policy.

3. This website

3.1 No trackers

This site is made of static pages. It runs no JavaScript, sets no analytics or advertising cookies, and loads no resource from a third-party server — no font, no map, no embedded video. No consent banner is needed, as there is no processing to consent to.

3.2 Host's technical logs

The site is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States. As with any web server, the host's infrastructure logs technical connection data: IP address, date and time, page requested, browser type.

Purpose: Security, protection against attacks, availability monitoring
Legal basis: Legitimate interest — Article 6(1)(f) GDPR
Retention: Short period, defined by the host
Transfer: Host established in the United States, on the basis of the European Commission's standard contractual clauses

The host may set a strictly technical bot-detection cookie. It is necessary for the security of the service and exempt from consent on that basis.

4. YouTube channel

Qorlet publishes its own videos on its YouTube channel, @Qorlet. To upload and maintain them, the company uses an internal tool that relies on YouTube API Services. The tool is neither distributed nor publicly available: only the company uses it, and only for its own channel.

The tool accesses data of the Qorlet channel: its videos, captions and playlists, their public statistics (views, likes, comment counts) and the comments posted under its videos, with their authors’ public names. This data is displayed, never stored, and never shared with third parties. The tool does not post, moderate or delete any comment. Only a Google authorization token is kept, securely; it grants access to the Qorlet channel only.

The use of YouTube API Services is subject to the following documents:

If you commented on one of our videos, you can delete that comment yourself on YouTube. For any question, or to request the deletion of information about you, write to us at contact@qorlet.com

5. Transport activity

The passenger transport activity is not open. No booking is collected and no customer file exists. This policy will be completed before the service opens.

6. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability under Articles 15 to 22 GDPR. Exercise them at contact@qorlet.com

We respond within one month. Please state the purpose of your request. We may ask for proof of identity where there is reasonable doubt as to the identity of the requester.

Because our app collects nothing, we hold no data about you in connection with it. An access request can therefore only concern an email exchange with us.

You may lodge a complaint with the French data protection authority — CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr

7. Children

Our app is suitable for all ages and collects no data. It carries no profiling and displays no advertising of any kind, including to minors. The age range provided by Google Play or the App Store — section 2.6 — serves only to comply with the laws that protect minors.

8. Changes

Any change to this policy is published on this page, with the date at the top updated accordingly. Version in force: 18 September 2026.