Skip to content
CrocFor iPhoneDownload

Privacy policy

Last updated: 5 October 2026. Applies to the Croc app for iPhone.

In two sentences. Croc works entirely offline: without an account, nothing leaves your phone and the app does not send a single byte over the network. If you create an account, and only then, your progress is backed up on a server so you can restore it on another device.

1. Who processes your data

The Croc app is published by [à compléter : nom de l'éditeur], [à compléter : adresse postale], referred to below as “we”. We are the data controller under the General Data Protection Regulation (GDPR).

For any questions about this policy or your data, contact croc.app.contact@gmail.com.

2. Without an account: nothing leaves your phone

Croc is designed to work without signing up. As long as you do not create an account, no personal data is transmitted to us or to any third party. Your pacts, streak, logged urges, slips, photos, settings and onboarding answers are stored in the app's private storage on your device and stay there.

This data is deleted along with the app: uninstalling permanently removes it from your phone. It may, however, be included in an iCloud or iTunes backup of your device, depending on your Apple settings. That backup is managed by Apple, not by us.

3. With an account: what is sent

An account is optional and serves two purposes: keeping your streak when you change phones, and restoring your Croc+ subscription on another device. You can use Croc indefinitely without creating one.

If you create an account, we process:

  • Your sign-in identity. Depending on your chosen provider: your email address and a unique identifier. With Sign in with Apple, you can hide your real email address: we then receive only a relay address supplied by Apple and cannot trace it back to your real address.
  • Your progress. The dates you start and complete pacts, days when you bite, logged urges with their time, intensity and chosen context, milestones reached, notches and colour palettes, settings (reminder times, language, theme, sound) and onboarding answers.
  • Minimal technical information needed for synchronisation and security: the timestamp of the last write and the IP address making the request, retained for rate limiting and the hosting provider's technical logging.

Synchronisation is infrequent and deliberately discreet: when you sign in, after a forty-five-second pause following a change, and when you return to the app if the last sync was more than fifteen minutes ago. A failure never blocks the app, which continues to work locally.

4. Photos of your nails

The nail journal is optional. Photos are taken with the camera or selected from your photo library with your explicit permission, which you can withdraw at any time in iOS settings. We do not access your photo library or any images you have not selected yourself.

Without an account, photos never leave your device. With an account, they are uploaded during synchronisation to private storage separated by user and accessible only through your account. They are never published, shared, used to train a model, or analysed for any purpose other than displaying them back to you.

A photo may contain sensitive health information. We process it solely on the basis of your explicit consent, given by creating an account and taking the photo. You can delete a photo in the app, or delete all of them by deleting your account.

5. Purchases and Croc+

Payments are handled by Apple through the App Store. We never see your payment details. To determine whether Croc+ is active on your device, we use RevenueCat, a subscription management service that receives a transaction identifier, your purchase identifier and your subscription status from Apple.

Your Croc+ entitlement is never declared by the app itself: it comes from the store through a server notification, ensuring it cannot be forged.

6. Notifications

Croc reminders are scheduled locally on your device. There is no push notification server and no device token is transmitted, so we have no way of knowing when a notification appears or whether you open it. Shield, which schedules reminders around your vulnerable times, calculates those times on your device using your own journal.

7. What Croc never does

  • No advertising, advertising space or advertising identifiers.
  • The mobile app contains no audience measurement, usage analytics or behavioural tracking SDK.
  • No tracking across apps or websites as defined by Apple's App Tracking Transparency framework.
  • No selling, renting or transferring data to third parties.
  • No automated profiling that produces legal effects concerning you.
  • This website does not set cookies, and serves fonts from its own domain. The language selector loads flag images from FlagCDN; these requests transmit your IP address to that service.

8. Website audience measurement

The landing page sends visits and App Store clicks to our own API, together with the language, button position and, when present, source, medium, campaign and creative labels. Only the referring domain may be used as a source; full referrer URLs and advertising identifiers are not recorded.

A random identifier links clicks to the current page load. It remains in memory, without cookies or browser storage, and changes on reload. These measurements are not linked to your Croc account or journal. Our analytics database does not contain your IP address, email or device identifier.

Records are stored in our Supabase database and available to authorised administrators. Records older than 90 days are deleted on the next collection or report request. Your browser's Do Not Track and Global Privacy Control signals disable collection.

9. Legal bases

  • Your consent (GDPR Article 6(1)(a) and, for photos, Article 9(2)(a)): account creation, synchronisation, photos and access to your photo library.
  • Performance of the contract (Article 6(1)(b)): providing Croc+ and verifying your entitlement.
  • Our legitimate interests (Article 6(1)(f)): service security, rate limiting and preventing abuse.

10. Recipients and processors

We only share your data with providers strictly necessary to operate your account, each bound by a contract complying with GDPR Article 28:

  • Supabase: authentication, database and photo storage.
  • Railway: hosting the synchronisation server.
  • RevenueCat: managing subscription status.
  • Apple and, if you choose that sign-in method, Google: authentication, payments and app distribution. Their own policies apply to data they process for their own purposes.

Some providers may process data outside the European Union. These transfers are covered by the European Commission's standard contractual clauses or, where applicable, an adequacy decision.

11. How long data is kept

  • Local data: as long as the app is installed. Uninstalling deletes it.
  • Account data: as long as the account exists, then erased when it is deleted.
  • Inactive accounts: deleted after thirty-six months without signing in, following advance notice by email.
  • Technical and security logs: a maximum of twelve months.
  • Transaction records: retained by Apple according to its own accounting and tax obligations.

12. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Write to croc.app.contact@gmail.com from the email address associated with your account. We respond within one month. If you are not satisfied with the response, you can contact the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, France, or the supervisory authority in your country of residence.

13. Deleting everything

You can delete your account directly in the app without writing to us: Settings, then Account, then “Delete my account”. Your progress, photos and account are then permanently erased from the server.

Data on your phone stays there until you uninstall the app. This is intentional: deleting an account should not cost you your streak.

14. Children

Croc is not aimed at or intended for children under thirteen. We do not knowingly collect their data. If you are the legal guardian of a child whose data has been sent to us, contact us and we will delete it.

15. Security

Communication with the server is encrypted in transit (HTTPS). Access to account data is checked on every request using a signed token, and photo storage is separated by user. No system is perfectly secure: this is another reason why an account remains optional and the entire app works without one.

16. Changes

This policy may change as the app evolves. The date at the top shows the latest revision. If a substantial change affects your rights, we will notify you in the app before it takes effect.

17. Contact

croc.app.contact@gmail.com. A real person reads these messages.