Data Controller
Kokola App is operated by:
Patricia Albrengues
Entrepreneur individuel (Micro-entrepreneur)
SIRET: 88464869200033
Registered business address: 200 Rue de la Croix Nivert, 75015 Paris, France
Email: hello@kokola.app
Patricia Albrengues acts as the Data Controller in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").
Scope
This Privacy Policy explains how Kokola ("we", "our", "us") collects, uses, stores and protects personal data when you use the Kokola mobile application (the "App").
By accessing or using the App, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We collect only the data necessary to operate and improve the App.
Information you provide directly
- Name
- Email address
- Account credentials
- Profile information
- Content voluntarily entered into the App
- Messages sent to customer support
Information collected automatically
- IP address
- Device type
- Operating system
- App usage data
- Log data
- Crash reports
- Technical identifiers
Children and family use
Kokola is designed for parents and families. Children may access the App under parental supervision. Parents or legal guardians are responsible for monitoring the use of the App by minors.
If we become aware that personal data has been collected in violation of applicable child protection laws, we will take appropriate steps to delete such data.
Purpose of Processing
We process personal data for the following purposes:
- Creating and managing user accounts
- Providing core App functionality
- Managing subscriptions and in-app purchases
- Providing customer support
- Ensuring security and preventing fraud
- Monitoring performance and fixing technical issues
- Sending essential service communications
- Sending occasional newsletters (only with user consent)
- Operating future AI-powered features
Location, Photos and Health Data
Three categories of data deserve a detailed explanation, as they are optional and always triggered by an action on your part.
Approximate location. If you allow it, the app uses your device's approximate location in the Discover section, solely to suggest family-friendly places nearby and display them on a map. This location is sent to Google Maps for map display and place search. We do not keep a history of your movements, and the app never accesses your location in the background. You can decline or withdraw this permission at any time in your phone settings: only the nearby place search stops working.
Photos. The app accesses your photo library only when you choose an image yourself, to illustrate a memory or a child's profile. Only the photos you explicitly select are transmitted and stored; the app never browses your library and does not access it outside those moments.
Children's health data. The Health Booklet section lets you record information about your children yourself: vaccines and boosters, common illnesses, allergies, treatments and notes for the doctor. This information is entered freely by you and is used only to display it back to you in the app. Kokola provides no diagnosis, no recommendation and no medical advice, does not transmit this data to any third party, does not use it for any advertising or statistical purpose, and shares it with a co-parent only if you explicitly enable that sharing. You can delete each entry individually, or all of your data by deleting your account.
Legal Bases for Processing
Under GDPR, we rely on:
- Performance of a contract
- User consent
- Legitimate interest
- Legal obligations
Payments and Subscriptions
Payments are processed via:
- Apple App Store
- Google Play Store
We do not directly process or store payment card information.
Service Providers
We use third-party service providers, including Supabase (hosted in the European Union) for authentication, database and file storage, RevenueCat for subscription management, and Google Maps for map display and nearby place search. Technical infrastructure may evolve over time.
All providers are required to implement appropriate security and data protection measures.
International Transfers
Where data is processed outside the European Union, appropriate safeguards such as Standard Contractual Clauses are implemented.
Artificial Intelligence Features
The App may integrate AI-powered features in the future. These tools may process user-submitted content to generate responses or recommendations.
User data will not be used to train AI models without explicit consent. AI-generated content is provided for informational purposes only.
Data Retention
Data is retained:
- For the duration of the user account
- Up to three years after inactivity
- As required by law
Users may request deletion at hello@kokola.app.
User Rights
Users have the right to access, correct, delete, restrict or object to processing of their personal data and to request data portability.
Requests can be sent to hello@kokola.app. Users may lodge a complaint with the French Data Protection Authority (CNIL).
Security
Appropriate technical and organizational measures are implemented to protect personal data.
Changes
We may update this Privacy Policy. Continued use of the App constitutes acceptance of updates.