Cocon – Privacy Policy
Last updated: November 13, 2026
Cocon is a mobile app for the household: recipes and meals, shopping, tasks and reminders shared between the phones of the same household. It is published by Pelicode (contact@pelicode.com), which is responsible for the data described here.
In short: Cocon only collects what it needs to work. No ads, no analytics, no data sold or shared for commercial purposes. You can delete your account and your data at any time.
The data we collect
| Data | Why |
|---|---|
| Email address | To confirm your account and reset your password. It is never shown to anyone. |
| Username, display name, profile photo (optional) | So members of your household and your friends can recognize you and invite you by your username. You can choose not to appear in search. |
| Password | To sign you in. It is never stored in plain text: the server only keeps a hashed version. |
| What you enter: recipes, photos, meal plan, shopping lists, tasks, reminders, notes, absences, friend cards (birthdays…), tracked parcels | To make the app work, and to share it with the members of your household. |
| Friends, recipes sent, comments, recipe ratings, photo suggestions | Your exchanges with the people you have added as friends. |
| Device notification token | To ring your household’s reminders on your phone. It is removed when you sign out. |
| The address of a recipe page you import | The server reads the page to extract the recipe. The address is not kept after the import. |
| Server technical logs (IP address, date, request) | Security and troubleshooting. They are kept for a short time, then deleted. |
Friend cards may contain information about other people (a birthday, for example): only write down what those people would be comfortable with.
Legal basis
This data is processed to provide the service you ask for when you create an account (Article 6(1)(b) of the GDPR). Server logs rely on the legitimate interest of protecting the service (Article 6(1)(f)). Notifications are only sent with your permission, which you can withdraw in your phone’s settings.
Where it is stored
On your phone, so the app works offline, and on a server hosted in France by OVHcloud, which keeps a synced copy. Traffic between the app and the server is encrypted (HTTPS).
Who can see it
- Members of your household can see and edit the household’s data. Your friends only see what you send or share with them.
- A recipe shared by link can be seen by anyone who has the link, for one week.
-
Technical service providers, only to run the service:
- OVHcloud (France): server hosting;
- Brevo (France): sending account confirmation and password reset emails;
- Google Firebase Cloud Messaging: delivering notifications to Android phones. The text of a notification (the name of a reminder, for example) goes through this service;
- 17TRACK, only if you track a parcel and tracking is enabled: the tracking number, to get the parcel’s status.
No data is sold, rented or used for advertising.
Bug reports and suggestions
If you choose to send a bug report or an idea from the app, we receive your message, the app’s version and language, as well as your username and email address so we can reply to you. You can send up to three per day.
For a bug report, and only if you leave the “Attach this information” option on, we also receive a technical description of your phone (platform, operating system and version, manufacturer, model, built-in browser version, screen size, connection status, unit system) and your last ten actions in the app, in a form that contains neither what you typed, nor the content of your recipes, lists or notes, nor any device identifier. The form shows you exactly this information before you send it.
This data is only used to fix bugs and improve the app. It is only read by the developer, never shared, and deleted after twelve months at most, or as soon as you delete your account.
How long we keep it
As long as your account exists. What you delete in the app disappears from your devices and those of your household. When you delete your account, your data is erased from the server; at most a trace remains in backups, which are replaced as the server is updated and then deleted.
Deleting your account
From the app, or by writing to contact@pelicode.com. What is deleted, and what stays with the household, is described on the Delete your Cocon account page.
Your rights
You can access, correct, export or erase your data, object to its processing or ask for it to be restricted. Most of this can be done directly in the app. For anything else, write to contact@pelicode.com: you will get an answer within a month. You can also file a complaint with the CNIL, the French data protection authority.
Minimum age
Cocon is intended for people aged 15 and over. Younger users need a parent’s permission.
Changes
If this policy changes significantly, the app will let you know. The date at the top of the page shows the latest version.