Privacy Policy

We collect the following data:

• Identification data: email address, display name (via Azure Entra External ID)

• Family data: family members, dietary preferences, allergies, diets

• Usage data: shopping lists, calendar events, homework, household chores, food inventory

• Private space data: private tasks, notes, wellbeing tracking (accessible only by the user concerned)

• Technical data: device identifiers for push notifications, authentication tokens

• AI data: conversation history with the Coco assistant, memorized preferences

• Location data: device position, for local weather and to set a household place from where you are standing; declared household places (“zones”) and crossings (arrival, departure)

Your data is used to:

• Provide the Application's features (family management, shopping, calendar, etc.)

• Personalize the AI assistant Coco's suggestions

• Send push notifications (reminders, alerts)

• Manage your Premium or Coco+ subscription, and the Caregiver option (the households a caregiver covers)

• Improve the Application and fix bugs

Data processing is based on:

• Contract performance: providing the Application's service

• Consent: collected at first launch for AI processing and notifications

• Legitimate interest: service improvement, security

• Explicit consent (GDPR Article 9): for tracking your treatments — one agreement to turn it on, then a separate agreement for each person who supports you; withdrawable at any time

Your data is hosted and processed by:

• Microsoft Azure (Cosmos DB, Azure Functions) — France Central region (Europe)

• Azure OpenAI Service (latest-generation GPT models and voice dictation transcription) — text, images and voice — European Union (EU data zone) — retained ≤ 30 days for abuse monitoring, no model training

• Azure AI Speech (read-aloud) — France Central

• Azure Communication Services — Transactional email delivery — European Union

• Azure Entra External ID — Authentication

• RevenueCat — In-app subscription management

• PostHog and Google Firebase / Analytics — Usage measurement, on consent only

• Sentry — Technical error reports — Germany

• Open-Meteo (OpenMeteo GmbH) — Weather forecasts from your coordinates — Switzerland (European Commission adequacy decision of 15 January 2024) — technical logs that may contain geographical coordinates, deleted after 90 days

• Nominatim — OpenStreetMap Foundation — City name and place lookup — United Kingdom and the Netherlands, backups in the EU (adequacy decision renewed on 19 December 2025)

• Apple (iOS) / Google (Android) — System geocoding of an address you type — United States

• Microsoft Exchange Online / Microsoft Graph — Receiving emails forwarded to your household address — European Union

• Azure AI Document Intelligence — Reading the text of a parental agreement you upload yourself (character recognition) — France (France Central) — the file is neither retained nor used to train a model

• Linkup (Linkup SAS, France) — Coco's web search for Premium subscribers: only a short query is sent, written without any person's name and stripped of all your household's data; neither your identity nor your IP address is transmitted

All AI data — text and images alike — is processed within the European Union, in compliance with GDPR: deployments are provisioned in the “EU data zone”, which guarantees the Union as the perimeter without pinning a single country.

Location follows two opposite regimes. Weather sends your device coordinates to Open-Meteo and then to Nominatim. Household places send none: the device evaluates entry and exit itself — including in the background, when the app is closed — and transmits only the place concerned, the direction and the time; the center of a declared place is stored encrypted, under a key specific to your household. No map, no trip history, no continuous position.

Coco missions (Coco+) — agents that read your household's calendar, tasks, stock, shopping and homework to prepare your week, your meals or your day, including when the app is closed if you have turned on a scheduled mission — use these same Azure OpenAI deployments in the EU data zone. They never decide on their own to delete, move or reassign anything: those actions are proposed to you and only exist once you approve them; only reversible additions (shopping, tasks, stock, reminders) can be applied directly if you have chosen so, and can be undone for 24 hours. Your Private Space, your weekly check-ins, emails, expenses and locations never go into them. A mission's result is kept for 90 days.

The caregiver link lets people you name (an adult child, a relative) see — and, if you decide so, change — a part of your household that you choose: calendar, tasks, shopping, stock. You set this sharing area by area and person by person, and you can reduce or stop it at any time, taking effect within a minute. The members of your household, your Private Space and your conversations with Coco are never shared.

Your treatments are only stored with your explicit agreement, given in the app. The name and dosage are encrypted with a key specific to your household. They are never sent to Coco or to any artificial intelligence service, are not part of any usage measurement, and appear neither on the wall screen (which, if you turn it on, can show only dose times) nor in a notification on the lock screen. A person who supports you only sees them with a second agreement, given for that person alone; a professional caregiver never sees them. The app gives no medical advice: it reminds you of what you entered, without ever suggesting a dose, a time or a duration.

Your data is retained as long as your account is active. If your account is deleted, all your data will be permanently removed from our servers within 30 days.

Treatments: kept as long as you track them; the dose log is erased after 90 days; “stop tracking” deletes treatments and the log immediately. The history of your agreements is kept as proof, without any health data.

Under the GDPR, you have the following rights:

• Access: obtain a copy of your data

• Rectification: correct inaccurate data

• Deletion: delete your account and all your data (available in the Application)

• Portability: receive your data in a structured format

• Objection: object to certain processing

• Restriction: request restriction of processing

To exercise your rights, contact us at: contact@mentalloadless.com

We implement appropriate technical and organizational measures:

• Encryption of data in transit (HTTPS/TLS) and at rest

• Secure authentication via OAuth2 PKCE (Azure Entra)

• API keys stored server-side only (never in the application)

• Rate limiting on APIs (20 requests/minute per user)

• Private space data partitioned by user

For any questions regarding this policy:

SmartAILabs

Email: contact@mentalloadless.com

You may also file a complaint with the CNIL (French Data Protection Authority) or your local data protection authority.

The application allows adding minor children's profiles. Explicit parental consent is collected and recorded before each addition.

For more information about the collection and processing of minors' data, see our dedicated policy: mentalloadless.com/en/children-privacy