Privacy policy
The French version prevails in the event of any discrepancy.
Draft text to be approved before opening to the public (by a legal adviser or lawyer). Highlighted passages still need completing.
Your allergies are health data. We designed askadèle to collect as little of it as possible: by default, it stays on your phone.
1. Data controller
askadèle — Simon Grange, sole trader, 2 rue du Palais, 38000 Grenoble, France — contact: contact@askadele.app.
2. What stays on your phone
Without an account, everything is saved only on your device: profiles and allergies, scan history, safe products, diary, restaurant notebook. We have no access to it. The diary is never sent online, even with an account.
3. Data we process
| Data | Why | Legal basis | Retention period |
|---|---|---|---|
| Email address, password (encrypted) | Creating and securing your account | Contract (terms of use) | Until the account is deleted |
| Profiles and allergies, emergency plan, restaurant notebook (only if you turn on backup) | Access your profiles on all your devices | Your explicit consent (Article 9 GDPR), which you can withdraw at any time | Until backup is turned off or the account is deleted |
| Shared profiles (with the other parent) and guest links | Allowing the loved ones you choose to view the profile | Explicit consent | Until sharing is stopped or the link is deleted |
| Restaurant reviews, reports | Informing other families, correcting errors | Legitimate interest | As long as the review is online; you can delete it |
| Payments (Pro plan, support): amount, date, subscription status. Bank details, email and billing address are entered with Stripe, not with us | Taking payments, invoicing, managing the subscription | Contract; legal obligation (accounting) | 10 years for accounting records |
| “An idea or a problem?” messages and attachments | Improving the service, replying | Legitimate interest | 2 years, then deleted automatically (attachments included) |
| “Publish its allergens” requests (anonymous device identifier) | Counting families interested in a restaurant | Legitimate interest | 2 years, then deleted automatically |
| “Let them know before you come”: date, number of people, name for the table, message and the allergies you choose to share with a restaurant | Allowing the restaurant to prepare for your visit and reply to you | Your explicit consent (tick box each time you send) | Automatically deleted 30 days after the date of the visit; you can cancel before then |
| Newsletters: email address, town (optional), newsletters chosen | Sending you “The askadèle week” and/or “The askadèle month” (without using your allergies) | Your consent (sign-up confirmed by email, or box ticked in your account) | Until you unsubscribe (link in every newsletter) |
| Newsletter: opens and clicks, only if you have agreed | Learn which topics interest readers and improve the newsletter | Your consent, which you can withdraw at any time (“My newsletters” page) | 13 months at most; deleted as soon as you withdraw consent |
| All our emails: opens and clicks counted only in anonymous totals (never linked to you) | Check that our emails arrive and are read | Legitimate interest | Totals only, no personal data |
| Restaurant owners: monthly email report | Informing the restaurant owner about activity on their listing | Legitimate interest (existing relationship) | Until you unsubscribe or the relationship ends |
| Notifications: technical device identifier provided by the browser, types of notifications chosen | Notifying you (a restaurant’s reply, a new review, a new newsletter) | Your consent (turned on in the app), which you can withdraw at any time | Until it is turned off or the account is deleted |
| Product recall alerts (if you turn them on): the barcodes of the products you scan, without the verdict or your allergies | Notify you (notification, e-mail if you choose) when one of these products is the subject of an official RappelConso recall | Your consent (turned on in My account), which you can withdraw at any time | 18 months after the scan at most; everything is erased when you turn it off or delete your account |
| “Follow-up” reminders (if you turn them on): only the times this device’s reminders are sent. The appointment, doctor and treatment stay on your phone and are never sent to us | Sending a notification with neutral text: “You have a reminder” | Your consent (turned on in the app), which you can withdraw at any time | Each time is deleted once the reminder has been sent, and all of them when you turn it off |
| Anonymous usage counters (number of scans, opens, page views, restaurant searches with no results) | Measuring usage and knowing which restaurants to approach | Legitimate interest | Kept as totals only — no identifier, no allergies, no cookies |
| Pollen and air quality (optional): chosen town and pollen allergies | Show forecasts for your area and highlight your pollens | Your request | Town and pollen allergies saved only on your phone. To get the forecasts, only the town code is sent (forecasts kept for 3 hours, not linked to you). The town search uses the French public service geo.api.gouv.fr (name typed or location, if you choose “Locate me”). Forecasts: Atmo France / AASQA. |
| In-house audience measurement: page viewed and, on arrival on the site, source (search engine, social network, website or “direct”) and device type (mobile, tablet, computer) | Knowing how the site is found and which pages are useful | Legitimate interest (strictly anonymous audience measurement, no prior consent required under CNIL guidance) | Totalled per day, with no IP address, no identifier, no cookies and nothing stored on your device. If your browser sends a “Do Not Track” signal (Do Not Track or Global Privacy Control), nothing is counted. |
| Restaurant team training: first name, surname, job title and score | Allowing the restaurant to track its team’s training | Restaurant’s legitimate interest | Until deleted by the restaurant or its listing is closed |
| Photos of labels or menus | Reading the text in the photo | Providing the requested service | Not kept: the photo is read, then discarded |
| Restaurant owners: demo request (name, restaurant, town, email and/or phone, message) | Getting back to you about the demo you requested | Your request (pre-contractual measures) | 1 year after the request, then automatically deleted |
| Restaurant owners: name, phone, SIRET number, listing and menu | Verify and manage the restaurant | Contract | Duration of the relationship, then 5 years (limitation period); invoices: 10 years (accounting obligation) |
| Contributions (menu photos and restaurant information you submit) | Complete and correct restaurant pages | Legitimate interest | Photos deleted 1 year after review, contribution deleted after 2 years |
We run no advertising, sell no data and use no advertising trackers or third-party analytics tools (no Google Analytics): our audience measurement is in-house and anonymous.
4. Who can see your data?
Only you, and the loved ones you choose to share a profile with. Our technical subcontractors use them only to run the service:
| Provider | Role | Location |
|---|---|---|
| Supabase | Accounts and database | Paris, France |
| Netlify | Website hosting | United States / global network — EU–US Data Privacy Framework, or failing that Standard Contractual Clauses |
| Anthropic | Reading photos of labels and menus (the photo only, never your allergies) | United States — European Commission Standard Contractual Clauses |
| Brevo | Sending emails (account, restaurant owners, visit notices, newsletters) | France |
Notifications go through your browser’s service (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox); their content is encrypted and never includes your allergies.
The allergy card QR code contains the card itself, in the address after the “#” sign: the person who scans it sees it in their own language without anything being sent to or stored on our servers.
When you scan a product, its barcode is sent to Open Food Facts and RappelConso; when you search for a restaurant, your approximate location is sent to OpenStreetMap’s public servers (Overpass: overpass-api.de, or as a fallback the mirrors overpass.private.coffee and overpass.kumi.systems); displaying the map downloads the base map for the area you’re viewing from OpenFreeMap (or OpenStreetMap as a fallback). No information about your allergies is sent to these services.
5. Your rights
You can access your data, correct it, export it (“Download my data” in My account), withdraw your consent (turn off backup) and delete your account (“Delete my account”) at any time: everything is then erased. For any questions: contact@askadele.app. You can also contact the CNIL, the French data protection authority (cnil.fr).
6. Children
A child’s profile is created and managed by their parents or guardians. For a child under 15, online backup requires the consent of their parent or guardian.
7. Security
Encrypted connections (HTTPS), data access restricted to its owner by rules enforced on the server, message files accessible to the administrator only.
Last updated: 29/10/2026.