Privacy Policy
Last updated: October 2026
1. Who We Are
Amka Innovation is the professional name used by ABDOU-RAHAMAN FADUL FAIZA, Entrepreneur individuel (EI).
- Address: 5 Cours de la République, 69100 Villeurbanne, France
- SIREN: 899 350 375
- SIRET: 899 350 375 00015
- RCS: 899 350 375 R.C.S. Lyon
- EU VAT number: FR17 899350375
- Email: contact@amkainnovation.com
ABDOU-RAHAMAN FADUL FAIZA is the data controller for the personal data described in this policy.
2. Scope
This Privacy Policy explains how Amka Innovation collects, uses, stores and protects personal data when you:
- Visit amkainnovation.com;
- Create or use an Amka Innovation account;
- Connect a supported workspace, including Notion;
- Configure or use Scheduler, Habit Garden or another Amka Innovation service;
- Subscribe to the newsletter;
- Contact support; or
- Purchase or manage a paid subscription.
3. Data We Collect
3.1 Account data
When you create an account, we may collect:
- Your name;
- Your email address;
- Your language preference;
- An internal application user ID;
- Your account and subscription tier;
- Account creation and update timestamps; and
- Security and authentication information required to operate your account.
3.2 Workspace connections and configuration
When you connect Notion or another supported platform, we may store:
- OAuth access tokens or equivalent connection credentials;
- Workspace and account identifiers;
- Connected page, database and data-source identifiers;
- Property identifiers, names and types;
- Select, multi-select or status option names where required;
- Property mappings;
- Plugin configuration and connection status; and
- Other technical identifiers needed to read from and write to the locations you selected.
This information allows the service to identify the correct workspace locations and properties.
3.3 Workspace content processed during operation
Amka Innovation processes the workspace data needed to perform the operation you request. Depending on the service, this can include schedule definitions, dates, recurrence rules, habit values and configured property values.
The service retrieves this information from your connected workspace and writes the requested result back to that workspace. We do not retain the ordinary content of your tasks, schedules, habits, notes or pages in the Amka Innovation application database.
Configuration information described in Section 3.2 is retained because it is required to operate the connection.
3.4 Generation records and diagnostic information
When a generation runs, we store a limited operational record that can include:
- An internal generation ID;
- Your internal application user ID;
- The service used;
- Generation status;
- The number of entries requested and created;
- Creation and update timestamps; and
- An error message when a generation fails.
Diagnostic error messages may contain the name of a configured property or property option when that information is necessary to explain the failure. Generation records are not intended to contain task titles, page content or note content.
3.5 Billing and subscription information
Payments are processed by Lemon Squeezy, which acts as merchant of record. Amka Innovation does not receive or store your complete card or banking details.
We may receive and store information needed to provide the correct subscription access, including:
- Lemon Squeezy customer, order and subscription identifiers;
- Product and plan information;
- Subscription status;
- Renewal and cancellation status;
- Transaction status; and
- Limited customer and billing information included in payment notifications.
Lemon Squeezy processes payment, tax, refund and chargeback information under its own privacy policy.
3.6 Newsletter information
When you subscribe to the newsletter, we collect your email address, subscription status, consent information and relevant subscription timestamps. Newsletter subscriptions are managed through Beehiiv.
The newsletter currently uses a single-step signup rather than double opt-in. By submitting the newsletter form, you request and consent to receiving the newsletter. You can unsubscribe at any time using the link included in each email.
3.7 Contact and support information
When you contact us, we process the information you provide, including your:
- Name and email address;
- Message and attachments;
- Relevant account or technical identifiers; and
- Follow-up correspondence.
Initial website contact submissions may be stored in Supabase. Subsequent email conversations are stored through Hostinger email services.
3.8 Technical, security and error data
We may process technical information needed to secure, maintain and troubleshoot the service, including:
- IP address;
- Browser, operating system and device information;
- Request timestamps;
- Requested URL or application route;
- Authentication and security events;
- Application errors and stack traces;
- Internal account or request identifiers; and
- Technical context associated with a failure.
Sentry is used for error monitoring. Depending on the error, diagnostic context may include limited account or configuration information. We do not intentionally use Sentry to collect task, note or page content.
3.9 Optional product analytics and session replay
PostHog EU Cloud remains inactive unless you explicitly accept analytics.
When enabled, PostHog helps us understand:
- Privacy-safe product milestones;
- General feature usage;
- Public marketing and setup-page interactions;
- Device and browser categories;
- Approved campaign-attribution categories; and
- Masked session replays of eligible interfaces.
Form inputs and visible text are masked in replay. OAuth, payment, password-recovery and embedded-plugin surfaces are excluded from replay.
We do not intentionally send PostHog email addresses, names, support messages, workspace names, database names, page names, property names, raw plugin URLs, OAuth credentials or payment information. Authenticated users are represented by an internal application user ID.
4. Why We Process Personal Data
We process personal data for the following purposes and legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and operating your account | Performance of a contract or steps taken at your request |
| Connecting your workspace and providing Scheduler, Habit Garden and related services | Performance of a contract |
| Managing Free and Plus entitlements | Performance of a contract |
| Processing purchases and subscription status | Performance of a contract and compliance with legal obligations |
| Securing the service, preventing misuse and investigating failures | Legitimate interests in operating a secure and reliable service |
| Responding to support and contact requests | Performance of a contract, steps taken at your request or legitimate interests |
| Sending the newsletter | Your consent |
| Running PostHog analytics and eligible session replay | Your consent |
| Maintaining accounting, tax and legal records | Compliance with legal obligations |
Where processing is based on consent, you may withdraw that consent at any time without affecting processing that took place before withdrawal.
5. Data You Must Provide
Account, authentication, connection and configuration information is required when it is necessary to provide a feature you request. If you do not provide or connect the necessary information, that feature may not function.
Newsletter and optional analytics data are not required to use authentication, billing, support or plugin functionality.
6. Service Providers and Recipients
We disclose personal data only when necessary to operate the service, comply with the law or protect our rights. Our principal providers include:
| Provider | Role |
|---|---|
| Hostinger | Website and backend hosting, infrastructure and email hosting |
| Supabase | Authentication, application database and backend services, hosted in the West EU (Paris) region |
| Notion | Connected workspace platform and API provider |
| Lemon Squeezy | Merchant of record, payment processing, tax, refunds and subscription transactions |
| Beehiiv | Newsletter subscription and delivery |
| PostHog EU Cloud | Optional consent-based product analytics and masked session replay |
| Sentry | Application error monitoring and diagnostics |
We do not sell or rent personal data. We do not disclose personal data for third-party behavioural advertising.
7. International Data Transfers
Some providers may process information outside France or the European Economic Area. Where required, transfers are governed by an adequacy decision, standard contractual clauses or another legally recognised safeguard.
Provider privacy notices contain further information about their processing locations and transfer mechanisms.
8. Retention
We retain personal data only for as long as needed for the purpose described below:
| Data | Retention |
|---|---|
| Account, profile and property mappings | While the account is active; deleted from active application systems immediately when the account is deleted |
| OAuth tokens and connection credentials | While the connection is active; deleted from active application systems immediately when disconnected or when the account is deleted |
| Generation records | Up to 12 months |
| Sentry error events | Up to 90 days |
| PostHog analytics events | Up to 12 months |
| PostHog session replays | Up to 30 days |
| Analytics-consent records | For the duration of the choice and up to five years afterward where needed to demonstrate consent |
| Initial contact submissions and support correspondence | Up to three years after the last interaction or account closure, unless a longer period is required for a legal claim |
| Newsletter subscription information | Until you unsubscribe, request deletion or the subscription is otherwise removed |
| Unsubscribe or suppression information | The minimum information needed to continue respecting your opt-out |
| Billing, tax and accounting records held by Amka Innovation | For the period required by applicable law |
Deletion from active systems does not necessarily remove information immediately from encrypted or provider-managed backups. Residual backup copies may remain until the applicable backup cycle expires and are not used for ordinary processing.
9. Security
We use measures intended to protect personal data, including:
- Encrypted HTTPS connections;
- Restricted access to production systems;
- Authentication and authorisation controls;
- Provider-managed infrastructure protections;
- Separation between public interfaces and restricted backend services;
- Error monitoring and security review; and
- Data minimisation.
OAuth tokens and equivalent credentials are stored in a restricted backend database and are available only to systems that require them to provide the connected service.
No online service can guarantee absolute security. You are responsible for protecting your account credentials and for maintaining appropriate access controls in your connected workspace.
10. Cookies and Local Storage
Essential cookies or local-storage entries support authentication, security, session management and preservation of your privacy choices.
PostHog analytics and eligible session replay remain disabled unless you accept analytics. If you withdraw consent, PostHog remains inactive and its local analytics state is cleared where technically possible.
We do not use advertising cookies.
You can change your analytics choice through Analytics preferences in the website footer or member area.
11. Children and Minors
The service is not intended for children under 15.
Users aged 15 to 17 may create a Free account. A paid subscription must be purchased by, or with the authorisation of, a parent or legal guardian.
If you believe that a child under 15 has provided personal data without the required authorisation, contact us so that we can investigate and delete the information where appropriate.
12. Automated Decision-Making
Amka Innovation does not use personal data to make solely automated decisions that produce legal or similarly significant effects about you.
13. Your Rights
Subject to applicable law, you may have the right to:
- Access your personal data;
- Correct inaccurate or incomplete data;
- Request deletion;
- Restrict processing;
- Object to processing based on legitimate interests;
- Receive certain data in a portable format;
- Withdraw consent at any time; and
- Lodge a complaint with the French data-protection authority, the CNIL.
You can update certain information through the member area. To exercise another right, contact contact@amkainnovation.com.
We may need to verify your identity before completing a request.
14. Disconnecting a Workspace or Deleting an Account
You can revoke Notion access through Notion's integration settings. You may also disconnect supported services through available account controls.
When your Amka Innovation account is deleted, account information, active OAuth credentials and property mappings are deleted immediately from the active application database, except for information that must be retained for legal, accounting, fraud-prevention or dispute-resolution purposes.
Deleting your Amka Innovation account does not delete tasks, habits, schedules or other entries already present in your workspace.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in the service, providers or legal requirements. The revision date at the top indicates when the policy was last updated.
Material changes may be communicated through the member area, the website or your registered email address where appropriate.
16. Contact
For questions or requests relating to privacy:
Amka Innovation
ABDOU-RAHAMAN FADUL FAIZA, Entrepreneur individuel
5 Cours de la République
69100 Villeurbanne, France
Email: contact@amkainnovation.com