Back

Privacy policy

Serdi is made for intimate moments. So we chose to keep as little as possible, and to leave it with you: on your phone.

Last updated: October 14, 2026

In short

  • No account: no email, no password, no sign-up.
  • Your data stays on your phone. We have no server that receives it.
  • Your letters are encrypted on your phone.
  • No ads, no trackers, no analytics, in the app or on this site.
  • We never sell or rent any data, to anyone.

What the app keeps on your phone

To work, Serdi saves in the app’s storage, on your phone only:

  • your first name, how you want us to refer to your ex (he or she), the date your no contact started and your goal in days;
  • the language you chose and your settings (reminders and their time, letters lock, challenge mode);
  • the history of your journey: relapse dates, when you used SOS, mood of the day, daily challenges checked;
  • your unsent letters and their P.S.;
  • your badges, your chosen Bobo and your mini-game scores.

This data does not leave your phone, except in your phone’s backup if you turned it on (iCloud or other), which depends on your provider, not on Serdi.

Your letters are encrypted

The text of your letters and their P.S. is encrypted (XChaCha20-Poly1305) before it is saved. The key is created on your phone and kept in its secure keychain (Keychain on iPhone). It is never sent anywhere.

With Serdi Premium, you can also lock your letters with Face ID or your passcode. Recognition is done entirely by your iPhone: Serdi never receives your face or your code, only the answer “unlocked” or not.

What goes through the Internet

Time check. So that badges can’t be unlocked by moving the phone’s clock forward, the app sends a tiny empty request to https://www.google.com/generate_204 and only reads the time in the answer. None of your data is sent, but as with any connection, Google sees your phone’s IP address. Google’s policy applies: policies.google.com/privacy.

Purchases. Serdi Premium subscriptions are paid to Apple, with your Apple Account. Serdi never sees your card. To know whether your subscription is active and to restore it, the app uses RevenueCat, a provider that receives an anonymous ID created by the app, the purchase details sent by Apple (product, date, status) and technical device data (model, system version, store country). RevenueCat never receives your first name, your letters or your journey. RevenueCat’s policy: revenuecat.com/privacy. Apple’s policy: apple.com/legal/privacy.

Review prompt. The app may show the App Store’s review window. Apple handles it; Serdi does not know whether you left a review.

What never goes through the Internet

  • Bobo’s reminders are local notifications, scheduled by your phone. No server sends them.
  • Milestone cards are made on your phone, without your first name or anything intimate. They only leave if you choose to share them.
  • The help numbers in the app are picked from your phone’s region, without sending anything.

How long

Your data stays on your phone as long as the app is installed. To erase everything: the app’s Settings, “Delete my data”, or simply delete the app.

Your rights

Under the GDPR, you can access, correct or erase your data, or object to its use. Since it lives on your phone, you do it right in the app. For any question, write to us at [email protected]. You can also contact your data protection authority (in France, the CNIL: cnil.fr).

This site

serdi.app uses no cookies, no trackers and no analytics. Like any website, it is served by a host (Cloudflare) that technically processes visitors’ IP addresses to deliver the pages and protect the site.

Changes

If this policy changes, the date at the top changes too. If a change affects your data, we will tell you in the app. Contact: [email protected].