privacy policy

Version of 10 November 2026. This policy explains what data we process when you use Cocôtte, why, with whom, for how long, and how to exercise your rights. The French version prevails.

1. Data controller

The Cocôtte service is published by Adrénaline Production, a French SARL with share capital of €7,500, registered with the Paris Trade and Companies Register under number 443 945 738 (SIRET 443 945 738 00047), EU VAT number FR66443945738, whose registered office is at 131 boulevard Pereire, 75017 Paris, France (“we” or “the Publisher”).

Contact: contact@macocotte.app · phone: +33 1 84 16 65 95.

For any question about your data: contact@macocotte.app.

2. Data we process

• Account: first name, email address, password (stored encrypted, never readable), language, preferences.
• Cocôtte: name, type, currency, members, shares, and everything members enter: transactions (amounts, dates, suppliers, categories), kitty, repayments, calendar, reminders, tasks, comments.
• Receipts: photos, invoices, statements and other uploaded files.
• Subscription: plan, billing period, payment status and history, Stripe technical identifiers. We never receive your card number.
• Security: login history (dates, anonymised fingerprint of the IP address), log of actions in the Cocôtte.
• Newsletter: email address, language, date and wording of consent.
• Correspondence: your messages to customer service (email, phone, voicemail).

3. Purposes and legal bases

Why	Legal basis
Provide the service: account, Cocôttes, calculations, receipts, reminders, backups	Performance of the contract (terms of use)
Manage the subscription, invoicing and payments	Performance of the contract (terms of sale); legal accounting obligations
Automatically read receipts (Scanner), when you use it	Performance of the contract, at your request
Secure accounts, prevent fraud and abuse	Legitimate interest
Answer your requests	Legitimate interest; performance of the contract
Send the newsletter	Consent, which you can withdraw at any time

4. Who sees your data

• The members of your Cocôtte see that Cocôtte’s information (transactions, receipts, shares, tasks). They do not see your other Cocôttes.
• The Publisher, for support and administration, only as needed.
• Our processors, acting only on our instructions:

Provider	Role	Location
OVH SAS (Roubaix)	Hosting of the site, databases and files; email; telephony	France
Brevo (Sendinblue SAS, Paris)	Sending emails and the newsletter	European Union
Stripe (Stripe Payments Europe Ltd, Dublin)	Subscription payments, invoices	European Union; possible transfers to the United States
Anthropic PBC (San Francisco)	Automatic reading of receipts by the Scanner, only for the files you give it	United States

Transfers outside the European Union are covered by appropriate safeguards (European Commission standard contractual clauses or the EU–US Data Privacy Framework). We never sell or rent any data, and do no targeted advertising.

5. Retention periods

• Account and Cocôttes: as long as the account exists. After the account is deleted, data is erased within 30 days. A shared Cocôtte is kept as long as it has at least one member.
• Automatic backups: the last 7, renewed every night.
• Invoices and accounting records: 10 years (legal obligation).
• Login and security history: 12 months at most.
• Newsletter: until you unsubscribe; proof of consent is kept for 3 years afterwards.
• Pre-launch waiting list: 12 months at most.

6. Cookies

Cocôtte uses no analytics or advertising cookies. Only two strictly necessary cookies are set, which do not require your consent:

• COCSESS: keeps you logged in during your visit;
• COCREM: only if you tick “Stay logged in”, for 30 days at most.

Stripe’s payment page sets its own cookies, needed for payment security.

7. Security

Encrypted connections (HTTPS), encrypted passwords, protection against repeated attempts, each Cocôtte’s data kept separate, protected administration access, daily backups, hosting in France.

8. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw consent, and to give instructions about your data after your death. You can:

• change your information in “My profile”;
• download all your data and delete your account from “Security”;
• write to us at contact@macocotte.app; we reply within one month at most.

You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or the authority of your country.

9. Minors

Cocôtte is intended for adults. A minor may only create an account with the consent of their legal guardian.

10. Changes

We will inform you by email of any significant change to this policy.

Legal notice · Terms of use · Terms of sale