Back to homepage

Privacy policy

Last updated: 7/31/2026 · 7 sections

1. Data controller

The TestMonApp platform is published by KG-CODE (Quebec, Canada), the controller of the personal data collected on the platform. Processing is subject to the General Data Protection Regulation (GDPR) as well as Quebec's Law 25 on the protection of personal information. Contact: [email protected]

2. Collected data

Data Purpose Legal basis
Email address (owner)Account creation, notificationsContract
Email address (tester)Registration for tests, contact by ownerConsent
Country (IP detection)Anonymous statisticsLegitimate interest
Password (hashed)Securing account accessContract
Payment dataProcessing purchases (Concierge, points, promotion)Contract (via Stripe)
Payout details (PayPal, Mobile Money)Payment of withdrawals and rewardsContract
Email address and content of exchanges with the AI assistant (chatbot)Answering your questions on the platform, improving the serviceLegitimate interest
Google or GitHub login IDAccount creation and passwordless loginConsent
Google Play Console authorization token (developers, optional)Automatic verification that you own your Android applicationConsent

3. Data sharing

We never sell your data. Your data may be shared with:

  • Stripe and PayPal - payment and withdrawal processing
  • The campaign owner - your email address if you join their test
  • Hostinger - site hosting; LWS - domain name registration
  • Agnes AI - processing of your exchanges with the AI assistant (chatbot)
  • Cloudflare (Turnstile) - anti-bot form protection
  • Google Ads and Trustpilot - only if you accept non-essential cookies (see section 6)
  • Google - login (Google/GitHub) and, if enabled, verification of ownership of your application via the Google Play Console API

4. Retention period

Account data is retained as long as the account is active, then deleted within 3 years. Email addresses of testers are retained as long as the campaign exists.

Conversations with the AI assistant (chatbot) are kept for a maximum of 30 days from the last message, then deleted automatically.

If you connect your Google Play Console account, the authorization token is retained until you disconnect it from your profile (which immediately revokes access on Google's side) or until your account is deleted.

5. Your rights

In accordance with the GDPR, you have the following rights:

  • Access - obtain a copy of your data
  • Rectification - correct your data
  • Deletion - request erasure of your data
  • Limitation - restrict certain processing
  • Objection - object to certain processing
  • Portability - receive your data in a structured format

To exercise these rights, contact us at: [email protected]

You can also lodge a complaint with the competent supervisory authority: the Commission d'accès à l'information du Québec, or the data protection authority of your country of residence.

6. Cookies

TestMonApp uses two categories of cookies:

  • Essential (always active) - session, CSRF protection, anti-bot (Cloudflare Turnstile): necessary for the operation of the site.
  • Non-essential (with your agreement only) - advertising measurement (Google Ads) and reviews invitation (Trustpilot).

A banner allows you to accept or refuse non-essential cookies during your first visit. You can clear cookies at any time via your browser settings to change your choice.

7. Security

Your data is transmitted via HTTPS. Passwords are hashed with bcrypt. We apply security best practices to protect your information.

Table of contents