Privacy Policy
Equos Demo — iOS application
Last updated: 27 April 2026
Effective date: 27 April 2026
This Privacy Policy explains how LIPITT SAS ("Lipitt", "we", "our", "us") collects, uses, stores and shares personal data when you use the Equos Demo mobile application (the "App") and related services (together, the "Service"). This Policy is written to comply with the EU General Data Protection Regulation (GDPR), the French Data Protection Act ("Loi Informatique et Libertés"), and Apple's App Store privacy requirements.
About Equos Demo. Equos Demo is a free evaluation application designed for prospective business customers and partners to assess the visual quality of Lipitt's proprietary on-device avatar model and to benchmark its inference performance on iOS devices.
CONTENTS
Who we are (data controller)
What data we collect
Voice and camera data — special notice
Benchmark and performance metrics
How we use your data and legal bases
Who we share your data with (sub-processors)
International data transfers
How long we keep your data
Security
Your rights
Children
Changes to this Policy
Contact
1. Who we are (data controller)
The data controller for personal data processed through the Service is:
LIPITT SAS, a French simplified joint-stock company
Registered office: 7 avenue de Laponie, 91940 Les Ulis, France
SIREN/SIRET: 980 765 531 00010
Privacy contact: privacy-app@equos.ai
Data protection point of contact: Antoine Ménager, CEO
2. What data we collect
2.1 Account data (collected when you sign in)
You access the Service using Sign in with Apple. From Apple, we receive:
Your email address (which may be a private relay address provided by Apple if you choose to hide your real email);
A unique Apple user identifier specific to our app.
We do not collect your name, your company, or any other commercial-context information through the Service itself.
2.2 Conversation data
Voice (audio): streamed in real time during your conversations with the demo avatar.
Video (camera): only if you choose to enable the camera; used to give the avatar contextual feedback on your facial expressions.
Conversations are ephemeral: they are not stored, archived or summarised. Each session starts fresh, with no memory of previous sessions. See Section 3 for technical details.
2.3 Technical and usage data
When you use the App, we automatically collect:
Device information: device model, iOS version, language and region settings;
App-specific identifiers (Apple's IDFV — Identifier for Vendors);
Crash and error logs (when the App crashes or encounters an error);
IP address (used transiently for connection routing and abuse prevention).
We do not use Apple's IDFA, do not request App Tracking Transparency permission, and do not track you across other apps or websites. The App does not contain any advertising.
2.4 On-device benchmark metrics
The App displays a benchmark dashboard showing live performance metrics of the on-device avatar model: rendering frame rate (FPS), inference latency, CPU/GPU utilisation and device temperature. These metrics are computed and displayed entirely on your device. They are not transmitted to Lipitt's servers, are not collected, and are not stored beyond your active session.
2.5 Communications
If you contact us by email, we keep a record of that correspondence.
3. Voice and camera data — special notice
Important. Audio and (optional) video data may qualify as "biometric data" under GDPR when processed in certain ways. We process your voice and camera input solely to enable the demo conversational experience, and never to uniquely identify you as an individual. We do not perform voice cloning, face recognition, or speaker identification.
3.1 How real-time conversations work
When you start a conversation:
Your microphone audio (and, only if you have enabled the camera, your video frames) are streamed in real time from your device to Google's Gemini Live API (operated by Google Ireland Limited, processing region: europe-west).
Gemini transcribes your speech, generates a response, and streams synthesised speech back to your device, all in real time.
The text response is also used by our on-device avatar engine (running locally on your iPhone) to animate the avatar's lip movements and facial expressions. No video of the avatar leaves your device.
3.2 Storage by Lipitt
Lipitt does not record, store, archive or summarise the raw audio or video of your conversations on its own servers. No conversation history is retained.
3.3 Storage by Google (Gemini Live API)
Google processes the streams as our sub-processor under its Cloud Data Processing Addendum. Based on Google's published policies:
We have opted out of using your data for model training. Google does not use your prompts or responses to train its AI models.
Google may temporarily log prompts and responses for a limited period for the sole purpose of detecting abuse and violations of its acceptable use policy.
For full details, see Google's Cloud Data Processing Addendum.
3.4 Camera is optional and revocable
The camera permission is not required to use the Service. You can grant it, refuse it, or revoke it at any time in iOS Settings → Equos Demo → Camera. The microphone is required for the conversational feature; you can disable it in iOS Settings → Equos Demo → Microphone, but this will prevent the conversational feature from working.
4. Benchmark and performance metrics
One of the main purposes of Equos Demo is to allow you to benchmark the performance of Lipitt's on-device avatar model on your iOS device. The benchmark dashboard shows you live, hardware-level metrics — frame rate, inference latency, CPU and GPU utilisation, and device temperature — computed locally on your device.
These metrics are strictly local to your device: they are not transmitted to Lipitt, not collected, and not stored beyond your active session. You may freely take screenshots of the dashboard for your own evaluation purposes.
5. How we use your data and legal bases
Under the GDPR, we must rely on a "legal basis" to process your personal data. The table below sets out our processing purposes and the corresponding legal basis.
Purpose
Data used
Legal basis (GDPR)
Creating and managing your account, providing access to the demo
Account data (email, Apple identifier)
Performance of the contract (Art. 6(1)(b))
Providing the conversational demo experience (real-time voice/video processing, avatar animation)
Voice, optional video
Performance of the contract (Art. 6(1)(b)); your explicit consent for use of camera (Art. 6(1)(a))
Crash diagnostics and security
Crash logs, technical info, IP
Our legitimate interest in keeping the Service stable and secure (Art. 6(1)(f))
Complying with legal obligations
Any data, as required by law
Compliance with a legal obligation (Art. 6(1)(c))
We do not use your personal data — including conversations — to train AI models. We do not send marketing emails or push notifications through this App.
6. Who we share your data with (sub-processors)
We share your data only with carefully selected sub-processors who provide the technical infrastructure of the Service. They process data only on our instructions and under contractual data protection terms.
Sub-processor
Role
Location
Google Ireland Limited (Gemini Live API)
Real-time speech-to-text, language model, text-to-speech
europe-west region (data centres in the EU); Google may transfer support data to its US affiliates under SCCs
Scaleway SAS
Application backend hosting (account data, learning profile, memory summaries, technical logs)
France
Apple Inc. / Apple Distribution International Ltd
App distribution, Sign in with Apple authentication, In-App Purchase, push notifications
EU and US (under Apple's standard terms)
Amplitude, Inc.
Product analytics
United States (under SCCs)
The avatar's visual rendering runs on your device using Lipitt's proprietary on-device model; no avatar video, facial data or benchmark metrics are transmitted to or stored on Lipitt's servers.
We do not sell your personal data, and we do not share it with advertisers or data brokers.
7. International data transfers
Some of our sub-processors are based in the United States (Sentry) or may transfer support data outside the European Economic Area. When such transfers occur, they are governed by:
The European Commission's Standard Contractual Clauses (SCCs); and/or
Where applicable, the EU–US Data Privacy Framework (DPF) certification of the recipient.
You can request a copy of the transfer safeguards by contacting us at privacy-app@equos.ai.
8. How long we keep your data
Data category
Retention period
Account data
For the duration of your account, plus up to 30 days after deletion (technical safety net), then permanent deletion
Real-time voice and video streams
Not stored by Lipitt; transiently processed by Google for the duration of the session
On-device benchmark metrics
Not collected by Lipitt; displayed locally only
Crash and technical logs
Up to 90 days
Email correspondence
Up to 3 years from the last contact
9. Security
We implement appropriate technical and organisational measures to protect your data, including:
End-to-end TLS 1.2+ encryption for all communications between the App, Lipitt's backend, and our sub-processors;
Encryption at rest of databases and backups;
Strict access controls and least-privilege principles for Lipitt staff;
On-device processing of avatar rendering and benchmark metrics, which means no avatar video and no performance data leaves your phone;
Regular security reviews and dependency monitoring.
No system can be 100% secure. If we ever become aware of a personal data breach affecting your data, we will notify the competent supervisory authority (the French CNIL) within 72 hours where required by law, and will inform you directly when the breach is likely to result in a high risk to your rights and freedoms.
10. Your rights
Subject to applicable law, you have the following rights:
Right of access — to obtain a copy of the personal data we hold about you;
Right of rectification — to correct inaccurate or incomplete data;
Right of erasure ("right to be forgotten") — to request deletion of your data. You can delete your account and all associated data directly from the App (Settings → Account → Delete Account);
Right to restrict processing;
Right to data portability — to receive your data in a structured, machine-readable format;
Right to object to processing based on our legitimate interests;
Right to withdraw consent at any time, where processing is based on consent (this does not affect the lawfulness of processing carried out before withdrawal);
Right to define directives regarding the fate of your data after your death (under French law).
To exercise any of these rights, email us at privacy-app@equos.ai. We will respond within one month (extendable by two further months for complex requests, in accordance with Article 12 GDPR). We may need to verify your identity before acting on your request.
Right to lodge a complaint. If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the French Data Protection Authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
www.cnil.fr
11. Children
Equos Demo is a professional evaluation tool intended for business users. The Service is not intended for children under the age of 15, and we do not knowingly collect personal data from anyone under 15.
If we become aware that an account belongs to a user under 15, we will suspend the account and delete the associated personal data without undue delay.
If you are a parent or guardian and believe your child under 15 has provided us with personal data, please contact us at privacy-app@equos.ai and we will delete the relevant data without undue delay.
12. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our Service, or applicable law. The "Last updated" date at the top of this page indicates when the most recent change was made. If the change is material, we will notify you in advance through the App or by email. Your continued use of the Service after the new Policy takes effect constitutes acceptance of the changes.
13. Contact
For any question or concern about this Privacy Policy or our data practices, please reach out to:
LIPITT SAS — Privacy
7 avenue de Laponie, 91940 Les Ulis, France
Email: privacy-app@equos.ai
© 2026 LIPITT SAS. All rights reserved.
