Privacy policy
This policy explains the data Fichea processes, its purposes, its retention, possible transfers and your rights.
Last updated: October 1, 2026
This page is a translation provided to make it easier for you to read. Only the French version is legally binding: in the event of any difference, the French version applies.
1. Data controller
Fichea LLC, Limited Liability Company (LLC), is responsible for the processing described in this policy. Its address is 30 N Gould St, Ste N, Sheridan, WY 82801, United States.
For any question or request about your data, write to contact@fichea.fr. Representative in the European Union: contact details to be completed if an appointment is required.
This policy covers the fichea.fr website, the web application, the APIs and the mobile journeys linked to the same account.
2. Data processed
Fichea processes the data needed for the account, the learning features, security, support and, for paid plans, billing.
- Account: identifier, email address, display name, confirmation status, preferences and security settings.
- Fichea emails: preferences, proof of your choice, and a limited history of emails sent and their delivery. With your consent to tips or offers, the steps you have actually completed in the product are used to avoid reminders that have become pointless.
- Learning: subjects, imported courses and documents, excerpts, sheets, flashcards, quizzes, answers, schedule and progress.
- AI features: instructions, selected sources and excerpts, generated outputs, citations and the measurements needed to run and monitor the request.
- Billing: plan, customer and subscription identifiers from the payment provider, payment status, invoices and related events. Fichea does not store the full card number.
- One-time trial offer: account identifier, protected fingerprint of the verified email address, trial references and status, to prevent the same customer from activating it several times. This register contains no card data.
- Technical and security: limited application logs, errors, anti-abuse checks, IP address and browser information when necessary to protect the service.
- Optional trackers: browsing and measurement data only for the purposes accepted in the consent panel.
3. Purposes and legal bases
Each processing relies on the basis suited to its purpose. Declining an optional tracker does not prevent the use of the essential account features.
- Performance of the contract or pre-contractual measures: sign-up, authentication, import, generation, review, export, quotas, service-related support and subscription.
- Legitimate interest: security, fraud prevention, incident diagnosis and reliability improvement, after balancing against people’s rights.
- Legal obligation: billing records and responses to requests required by the applicable rules.
- Consent: audience measurement, advertising measurement, advertising personalization, marketing outreach and other non-essential trackers when offered.
- Personalized tips and email offers are optional and subject to separate choices. Confirming your address or creating an account does not activate these communications. You can withdraw your choice in the email preferences or from the unsubscribe link in each marketing message.
- Individual measurement of clicks in emails is subject to a separate choice. Without this choice, the buttons lead straight to the product with no individual click measurement. Emails do not use an open-tracking pixel. Security and unsubscribe links are used only for the requested action.
4. Recipients and providers
The data is accessible to authorized Fichea staff and to the providers needed for the requested feature, within the limits of their role.
The Providers and subprocessors page states their purpose, the data concerned and the geographic information available.
Subscriptions use Stripe Managed Payments. Stripe processes the information needed for payment, billing, taxes and transactional support in its role as official merchant. Its own processing is described in the Stripe privacy policy. Fichea receives the identifiers and statuses needed to provide the subscription, without receiving the full bank card number.
Data may also be disclosed to an authority or an advisor when the law requires it or to establish, exercise or defend a right.
5. Imported courses and artificial intelligence
When an AI feature is requested, Fichea sends the instructions and excerpts needed to run it. The identity of the provider and the information available about it are published on the Providers page.
Do not import a secret, health data, highly sensitive data or a confidential third-party document if you are not authorized to have it processed by a cloud or automated service.
Fichea does not use automated generation to make, on its own, a decision that has a legal or similarly significant effect on you.
6. Retention periods
Data is kept for as long as needed for the purpose concerned, then deleted or anonymized, subject to legal obligations, disputes and technical backup delays.
The minimal trial register is kept after the account is deleted for as long as the one-time offer is available, to prevent its reuse. It is used only for this purpose; requests about this register can be sent to the contact given above.
- Account and learning content: until the user deletes it or the account is deleted.
- Temporary raw import sources: operational purge target within 24 hours; structured excerpts kept for the account features remain until the source, the subject or the account is deleted.
- Billing and accounting records: for the period required by the applicable accounting and tax obligations.
- Security and observability logs: for the time needed for diagnosis, abuse prevention and defense of rights, then deleted or anonymized. The retention period applicable to a provider can be requested from the contact given above.
- Optional trackers: according to the consent choices and the retention settings of the service concerned.
7. International transfers
Fichea LLC is established in the United States and some providers may process data from countries outside the European Economic Area. Fichea therefore does not present the whole service as stored in the European Union.
When a transfer is subject to the GDPR, the applicable mechanism must be determined for the receiving entity: adequacy decision, EU–US Data Privacy Framework for a certified entity, standard contractual clauses or another recognized safeguard. Mechanisms not yet verified are flagged on the Providers page.
8. Your rights
Depending on the applicable law, you can request access, rectification, erasure, restriction, objection and portability of your data. You can withdraw consent at any time, without affecting processing already carried out lawfully.
The export and deletion features available in your account cover the data supported by these tools. You can also use the Account deletion page or contact Fichea. A proportionate identity check may be requested.
If you believe your request has not been handled properly, you can lodge a complaint with the CNIL or the supervisory authority competent for your place of residence.
9. Cookies and trackers
Cookies needed for the session and security may be used without activating the optional purposes. Audience, advertising and personalization measurements are declined by default and can be chosen separately.
You can change or withdraw your choices at any time below. Withdrawal updates the consent status for future processing; some effects already produced or some data held by a third party may require a separate request.
10. Minors
Fichea is also aimed at students. Consent to processing, the capacity to enter into a contract and the authorization of a legal guardian are separate questions that depend on age, country and purpose.
A parent or legal representative can contact Fichea to exercise a minor’s rights when authorized to do so. No optional advertising profiling may be activated without the required consent.
11. Security and updates
Fichea applies proportionate technical and organizational measures, including for authentication, account isolation, input validation, abuse limiting and secrets management. No measure guarantees absolute security.
This policy may change with the product, the providers or the law. A significant change is announced by a suitable means and the date of the published version is updated.