Privacy Policy

SUX1 is a web and mobile (PWA / Android) application that allows users to quickly summarize any text using AI models.

The service is operated by an independent developer acting as the data controller under the GDPR. For any question about your personal data, you can contact us at:

fiestaman38470@gmail.com

When you use SUX1, we only collect:

• Email address: used as account identifier and for login.
• Password: stored hashed (bcrypt) — never in plain text, never accessible to the team.
• Display name: optional, provided at signup.
• Texts you submit for summarization: stored linked to your account so you can access your summary history.
• Generated summaries: produced by AI models and linked to your account.
• Minimal technical metadata: model used, length, format, date, chosen language.
• Stripe billing data (for Pro users): Stripe session ID and payment status. We never see or store credit card numbers.

What we do NOT collect: no stored IP addresses, no geolocation, no advertising cookies, no third-party trackers, no behavioral data, no access to your phone's contacts or photo library.

• Authentication: to let you log in to your SUX1 account.
• Summary generation: to send your text to a third-party AI model (see section 4) and store the resulting summary.
• Personal history: to let you find your past summaries.
• Pro payment: to process the one-time €2 payment via Stripe and activate your Pro status.
• Security: to prevent abuse and fraud (basic rate-limiting).

Legal basis: contract performance (GDPR art. 6.1.b) for the summarization service and billing, and your consent (art. 6.1.a) for account creation.

To generate your summaries, SUX1 forwards the text you provide to one of the following three AI providers, depending on the model you select:

• Anthropic (Claude Sonnet 4.5) — US servers.
  Anthropic policy
• OpenAI (GPT-5.2) — US servers.
  OpenAI policy
• Google DeepMind (Gemini 3 Flash) — US and EU servers.
  Google policy

Contractual commitment: these providers contractually agree not to use your texts to train their AI models in the context of the API calls SUX1 makes (default "no training" policy on the Claude, OpenAI and Gemini APIs).

Transfers outside the EU are governed by the European Commission's Standard Contractual Clauses (SCC).

• Hosting: Emergent (US / EU) — application servers and temporary file storage (PDFs/DOCX in transit).
• Database: MongoDB Atlas — stores accounts, summaries, and metadata (EU region when available).
• Payment: Stripe Payments Europe (Ireland). Credit card data is collected and processed exclusively by Stripe, in compliance with PCI-DSS. SUX1 never receives card numbers.
  Stripe policy

• User account: kept as long as your account is active. You can delete it at any time from Settings or by writing to us.
• Summaries and original texts: kept as long as your account is active. Individually deletable from History.
• Billing data: kept for 10 years to comply with French accounting and tax obligations.
• Inactive accounts: an account inactive for more than 3 years may be deleted after email notification.

As a data subject, you have the following rights at any time:

• Right of access: obtain a copy of all the data we hold about you.
• Right to rectification: correct inaccurate data.
• Right to erasure: request the deletion of your account and all associated data.
• Right to object: object to processing.
• Right to portability: retrieve your data in a usable format (JSON).
• Right to lodge a complaint: contact the French CNIL (www.cnil.fr) or your local data protection authority.

To exercise these rights, write to us at fiestaman38470@gmail.com. We will reply within 30 days at most.

• HTTPS encryption across the entire site (TLS 1.3).
• Passwords hashed with bcrypt — never plain text.
• JWT authentication tokens signed and time-limited.
• No direct database access from outside — only via authenticated API.
• Encrypted database backups.
• Regular dependency updates.

SUX1 is not intended for children under 13. If you are a parent or legal guardian and discover that your child has created an account without your consent, contact us at fiestaman38470@gmail.com and we will immediately delete the account and associated data.

This privacy policy may be updated to reflect legal, technical, or functional changes. Any significant change will be notified to you by email to the address associated with your account at least 30 days before taking effect.

The version currently in force is the one dated 27 février 2026.

The "Scan a book" feature lets you photograph the front cover (and optionally the back cover) of a book to generate an AI-powered reading sheet.

• No image storage: photos are processed in memory and deleted immediately. They are never persisted on our servers.
• Transformative summary: the sheet is generated from the AI model's public knowledge of the work. It does not reproduce the book's text and complies with copyright law (French CPI art. L122-5 and EU Directive 2019/790).
• No extended quotations: the model is instructed not to reproduce more than 30 consecutive words from the original text.
• User commitment: by submitting a photo, you declare that you have the right to photograph the submitted work (book you own, legally consulted copy, or private use). You are solely responsible for respecting the rights attached to the photos you send.
• Private use recommended: the generated sheet is intended for your personal use (study, curiosity, aide-mémoire). Public re-publication without source citation is your responsibility.

If you are the rights holder of a work and wish it to be no longer analysable by SUX1, write to us at fiestaman38470@gmail.com.