Privacy Policy
Last updated: October 22, 2026
This Privacy Policy explains how Romain Fauré, operating under the name Multumula, collects, uses, and protects personal data when you use the Stupefact mobile application (iOS and Android).
We are committed to respecting your privacy and limiting data processing to what is necessary to operate, maintain, and monetize the app.
1. Data controller
The data controller responsible for Stupefact is:
- Legal name
- Romain Fauré
- Trading name
- Multumula
- Legal form
- Sole Proprietorship
- Business address
- 47 Rue Vivienne, 75002 Paris, France
- Registration number
- 13180197900017
- Website
- https://multumula.com
For any questions about your personal data or this Privacy Policy, you can contact us using the email address above.
Stupefact does not require users to create an account or sign in.
2. About Stupefact
Stupefact is a general knowledge application that allows users to discover fascinating facts through a scrolling feed.
Users can explore different topics, save favorite facts, revisit their viewing history, share discoveries, and customize their experience.
The app offers:
- Free access: supported by advertisements.
- Premium Monthly: a monthly subscription providing access to all Premium features and removing advertisements.
- Premium Yearly: an annual subscription offering the same benefits.
- Premium Lifetime: a one-time purchase providing ongoing access to Premium features without automatic renewal.
Purchases are processed through Google Play or the Apple App Store, subject to their applicable payment terms.
3. Data we process
Data stored locally
Stupefact stores certain information on your device to provide and personalize its features:
- Optional first name provided during onboarding.
- Optional onboarding answers, including gender, interests, goals, and knowledge level.
- Selected topics and preferences.
- Favorite facts and viewing history.
- Previously viewed fact identifiers.
- Selected language.
- Notification preferences.
- Technical information required for certain app features.
Some onboarding questions can be skipped.
These preferences are primarily stored locally. However, certain information, such as selected topic IDs and fact identifiers, may be transmitted to our content provider when requesting or filtering facts.
Local data can generally be removed by clearing the app's data or uninstalling it. Depending on your device settings, some information may also remain in operating system backups.
Technical and content data
Stupefact uses Supabase to retrieve facts, topics, images, and related content.
When requesting content, the following information may be processed:
- IP address and technical request information.
- Device and operating system information, where transmitted.
- Selected language.
- Selected topic IDs.
- Identifiers of facts to retrieve or exclude.
This information is used to deliver content, operate the app, and maintain service security.
Premium purchases
Premium purchases are processed by Apple or Google Play and managed through RevenueCat.
The following information may be processed:
- Technical subscriber identifier.
- Purchase and transaction identifiers.
- Purchased plan and Premium entitlements.
- Subscription or purchase status.
- Purchase, renewal, and expiration dates.
RevenueCat may generate a random user identifier even when no account is created. Such identifiers may still constitute personal data under applicable privacy laws.
We do not directly receive your credit card information.
Advertising
Stupefact uses Google AdMob to display advertisements to non-Premium users.
Advertising configuration: advertisements in Stupefact are requested as non-personalized ads (requestNonPersonalizedAdsOnly).
Depending on your device, location, applicable permissions, and privacy choices, Google and its partners may process:
- IP address.
- Advertising identifiers, where permitted.
- Device and operating system information.
- Advertisement interactions.
- Approximate location derived from technical information.
- Data necessary for ad delivery, measurement, and fraud prevention.
Non-personalized advertisements do not use past user behavior for ad targeting. However, some technical identifiers may still be processed for other advertising purposes, subject to applicable legal requirements.
Where required, Stupefact uses Google User Messaging Platform (UMP) to request and manage advertising consent.
You can review or modify your advertising privacy choices through:
Profile → Ad Privacy
Advertising-related processing that requires consent must respect your choices. Depending on those choices and the available advertising options, limited advertisements may still be displayed.
Premium users do not see advertisements in Stupefact.
Notifications
Stupefact offers optional local notifications, including reminders and interesting facts.
These notifications are scheduled on your device and do not require us to send push notification tokens to a remote notification server.
You can disable notifications in the app or your device settings.
Sharing and external links
Sharing a fact uses your device's native sharing functionality. We do not host the images generated locally for sharing.
Opening external sources or services may redirect you to third-party websites or applications governed by their own privacy policies.
Email communications
If you contact us by email, we may process your email address and the information you provide to respond to your request and manage related correspondence.
We do not collect email addresses for marketing purposes through Stupefact.
The app does not require access to your precise GPS location, contacts, microphone, or camera for its core functionality.
4. Why we process data
We process personal data for the following purposes and legal bases, where the GDPR applies:
| Purpose | Legal basis |
|---|---|
| Deliver facts, topics, and app content | Legitimate interest in operating the free service, or performance of a contract where applicable |
| Maintain app functionality and security | Legitimate interest |
| Store preferences and personalize the experience | Legitimate interest, where applicable |
| Manage Premium purchases and access | Performance of a contract |
| Comply with applicable legal obligations | Legal obligation |
| Display advertisements and perform related processing | Consent where legally required; other applicable legal bases depending on the specific processing |
| Respond to support requests | Legitimate interest or pre-contractual measures, where applicable |
Our legitimate interests include providing a functional and secure application, maintaining service quality, and responding to users.
Where consent is legally required, the relevant processing must not take place without valid consent.
You may withdraw your consent at any time using the available privacy controls.
Permission to display local notifications is managed through your device's operating system and is separate from GDPR consent.
5. Third-party services and data transfers
We do not sell your personal data.
Stupefact relies on the following services:
| Provider | Purpose |
|---|---|
| Supabase | Hosting and delivering facts, topics, and images |
| Google AdMob / UMP | Advertising and privacy choices |
| RevenueCat | Managing Premium purchases and subscriptions |
| Apple / Google Play | App distribution and payment processing |
Our Privacy Policy is published on the Multumula website, hosted by Hostinger.
Third-party privacy policies
International data transfers
Our content infrastructure uses Supabase in Paris, France (eu-west-3).
Some service providers, including Google and RevenueCat, may process personal data outside the European Economic Area, including in the United States.
Where transfers under our responsibility occur, they are subject to appropriate safeguards required by applicable data protection laws.
Where personal data is transferred outside the European Economic Area under our responsibility, the following safeguards apply:
- Google (AdMob / UMP): EU–US Data Privacy Framework, and the European Commission’s Standard Contractual Clauses where the Framework does not apply. See Google’s advertising transfer notice.
- RevenueCat: Standard Contractual Clauses (2021), as set out in RevenueCat’s DPA. End-user subscription data is stored on AWS in the United States.
- Supabase: content is hosted in Paris, France (
eu-west-3). Any access from outside the EEA is covered by Standard Contractual Clauses in Supabase’s DPA. - Apple and Google Play: payments are processed under their own terms and transfer mechanisms.
You may contact us for further information about the safeguards applicable to your personal data.
6. Data retention
We retain personal data only for as long as necessary for the purposes described in this policy.
- Local data: generally stored until you modify it, clear the app's data, or uninstall Stupefact, subject to device backup settings.
- Technical logs: API and database logs are retained according to our Supabase plan (currently 1 day on the Free plan, or 7 days on the Pro plan).
- Premium purchase data: Premium purchase and entitlement data is retained by RevenueCat for as long as needed to manage and restore purchases, and in any event until we request deletion or for up to six years, whichever comes first. A deletion request is processed promptly. Apple and Google may retain payment records under their own legal obligations.
- Advertising data: retained according to the applicable purposes and retention practices of Google and its partners.
You may contact us to request further information about data retention or to exercise your applicable rights.
Uninstalling Stupefact does not automatically cancel an active Premium subscription.
Monthly and yearly subscriptions must be managed through Google Play or the Apple App Store.
The Lifetime purchase does not renew automatically.
7. Minors
Stupefact is a general-audience educational application and is not specifically directed at children.
We do not request users' dates of birth.
We take applicable requirements concerning minors' personal data into account, particularly regarding advertising and consent.
If you are a parent or legal guardian with concerns about a child's personal data, please contact us at contact@multumula.com.
8. Your privacy rights
Under the GDPR and other applicable data protection laws, you may have the right to:
- Access your personal data.
- Request correction of inaccurate information.
- Request deletion of your personal data.
- Restrict certain processing activities.
- Object to processing based on legitimate interests.
- Request data portability, where applicable.
- Withdraw consent when processing relies on consent.
You can manage some information directly:
- Local data: change your preferences or clear the app's data.
- Advertising choices: use Profile → Ad Privacy.
- Notifications: use the app or device settings.
- Subscriptions: manage them through Google Play or the Apple App Store.
To request access to or deletion of personal data processed under our responsibility, including relevant information held by our service providers, contact contact@multumula.com.
We may request reasonable additional information to locate the relevant data or verify your identity where necessary.
We will respond within one month, unless an extension is permitted by applicable law.
Certain data may need to be retained to comply with legal obligations.
You also have the right to lodge a complaint with your local data protection authority.
In France, you can contact the CNIL: https://www.cnil.fr.
9. Data security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, and disclosure.
Communications with our servers use secure HTTPS connections.
We also limit the information transmitted to external services where possible.
However, no method of electronic transmission or storage is completely secure.
If a personal data breach occurs, we will take the measures required by applicable law, including notifying the relevant authorities or affected individuals when necessary.
10. Changes to this policy
We may update this Privacy Policy to reflect changes to Stupefact, its features, our service providers, or applicable laws.
The date at the top indicates when this policy was last updated.
If we make significant changes to how personal data is processed, we will provide appropriate notice and obtain consent where legally required.
The latest version is available at https://multumula.com/stupefact/privacy-policy/.
11. Contact
If you have any questions about this Privacy Policy or how your personal data is handled, please contact:
- Name
- Romain Fauré — Multumula
- Address
- 47 Rue Vivienne, 75002 Paris, France
- Website
- https://multumula.com