Privacy Policy
Effective Date: August 24, 2026
1. Introduction and Legal Framework
This Privacy Policy explains how Le Cocon collects, uses, and protects your personal information. Our data processing practices are governed by Law 09-08, which is Morocco's primary data protection law. The CNDP (Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel) oversees and enforces compliance with this law to ensure the protection of individuals' privacy.
2. Strict Age Restriction
Le Cocon is strictly intended for users aged 18 and older. We do not knowingly collect or solicit personal information from anyone under the age of 18. If we discover that a user is under 18, we will immediately delete their account and personal data.
3. Data Collection and Purpose
Under Law 09-08, personal data must be collected and processed fairly, lawfully, and transparently for specific and legitimate purposes. We collect only the information necessary to facilitate safe community meetups:
Profile Data: Information provided during signup to establish your presence in the community.
Location Data: Location access is requested strictly on-demand while using the app to help you discover nearby gatherings or publish event locations. Location sharing is optional; you can manually select event locations or disable permission in your device settings at any time without losing access to the app.
Camera & Image Data: Camera permission is requested strictly on-demand when you explicitly initiate an action requiring it, such as taking a profile picture or submitting a verification selfie.
Verification Selfie: To keep the community safe, we ask every applicant for one selfie during registration. It is stored in a private storage area, reviewed by a member of our team, and deleted permanently as soon as we approve or refuse the application. No facial recognition, biometric template, or automated analysis of the image is performed. If an application is never reviewed, the photo is deleted automatically within 7 days.
Audio Data: Microphone permission is requested strictly on-demand when you explicitly initiate an action requiring it, such as recording a voice message or joining a live voice room.
Account & Activity Data: We store your email address, display name, date of birth (used only to confirm you are 18 or older), your photos, your messages, the events and communities you join, and basic activity records used to operate rewards and safety tools. We also store a device identifier and IP address so we can deliver notifications and limit abuse.
Report Evidence: If you report a member and attach a screenshot, it is stored privately with the report so our team can review it, and is deleted when the review is closed.
4. Data Retention
Your verification selfie is deleted immediately after we decide your application, or within 7 days if no decision is made. Messages you delete are retained in a restricted, admin-only area for up to 90 days for safety review, then permanently purged. Account and profile data are held while your account is active and are deleted when you close your account.
5. Account Safety and Eligibility
Le Cocon is a community for adult women. Every account is reviewed by our team before it can use the app, and we reserve the right to refuse or remove any account that does not meet our eligibility requirements.
6. Data Protection and Security
We implement strict technical and organizational security measures to protect personal data against unauthorized access, destruction, or alteration. We employ database rate limiting and secure server-side infrastructure to prevent spam and safeguard user information.
7. Data Sharing and Legal Disclosures
Le Cocon does not sell your personal data. Any aggregated event metrics shared with local business partners are strictly non-identifiable and never contain personal data or email addresses. However, personal information may be disclosed to Moroccan authorities if we are legally mandated to do so by a valid judicial order.
8. Third-Party Service Providers
To operate effectively, we utilize trusted third-party infrastructure and services that process data on our behalf:
Supabase: Our primary backend database, authentication and file storage. Your account data, messages, photos and voice recordings are stored here.
Mapbox: Powers map rendering, location search and address lookup. Map requests you initiate are processed by Mapbox.
Agora: Carries live audio for voice rooms and voice messages. Live audio is transmitted through Agora while you are in a voice room.
Expo and Firebase / Google Cloud Messaging: Deliver push notifications on your device. A limited preview of a new message may be included in the notification.
Sentry: Collects crash and error diagnostics, including device type, app version and IP address, so we can fix faults. Not used for advertising or profiling.
Resend: Sends our transactional emails, including alerts to our moderators when someone is reported.
9. International Data Transfer Notice
Because our cloud infrastructure (such as Supabase) utilizes global servers, your data may be stored and processed on servers located outside of Morocco. We ensure that any international data transfers comply with security safeguards and applicable data protection regulations.
10. Your Rights Under Law 09-08
In accordance with Moroccan regulations, you have the right to access, correct, and delete your personal data, as well as object to its processing.
Account Deletion: You can request account erasure at any time via the in-app settings or our web deletion page. Deletion cannot be undone. Your profile, messages, voice recordings, shared photos and any report evidence you submitted are deleted. Chat conversations you were in remain, but your name is removed and the messages you sent are deleted. Events you hosted and communities you created are removed entirely.
Support & Inquiries: For assistance with your data or privacy concerns, contact us at support@lecocon.app or via the Support form in the app.
11. Escalation to the CNDP
In accordance with Moroccan Law 09-08 relating to the protection of individuals with regard to the processing of personal data, you have the right to lodge a complaint regarding data privacy. If you believe your rights have not been respected, you may contact our support team directly, or you can escalate your complaint to the CNDP (Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel) via their official website www.cndp.ma.