Reference document provided in French. The French version prevails.
Privacy Policy (GDPR)
Last updated: June 2026
1. Data controller
COCOON MIND ("we") is responsible for processing your personal data. For any question regarding the protection of your data, you can contact us at: contact@cocoonmind.com.
2. Data collected
We collect: (a) the account data you provide (first name, email address, encrypted password); (b) the content of your conversations with L'Élan, your requests to the curiosity tools (The Two Paths, The Idea Bridge, The Analogy Machine, The Compass of the Unexpected, Two Truths and a Lie, etc.), your Constellation, your Epiphany Journal and the personalised narratives derived from them (retrospectives, "memory" reminders); (c) the images you import for the vision features (Le Scribe, La Chambre noire), processed transiently to produce a transcription or analysis and not kept beyond the necessary processing; (d) the voice recordings you choose to dictate, transcribed into text and then not kept in audio form; (e) if you activate a public explorer profile, the information you make visible (first name or nickname, motto, emblem or photo, exploration statistics) as well as community interactions (sparks, following other explorers) — this profile can be disabled at any time from your profile; if you add a profile photo, it is also visible to other participants in the real-time community spaces (The Circle, The Duo) you take part in; (f) minimal technical data (strictly necessary authentication cookies); (g) if you take part in the referral programme, your referral code and link (based on your nickname), the identity of any referrer who invited you, the number of your referees, any "Ambassador" status and the associated rewards; (h) the exploration trails you choose to save in The Rabbit Hole ("My trail"); (i) if you take out a paid subscription, billing and subscription data (chosen plan, subscription status and dates, transaction identifier and the email address transmitted to our payment provider) — bank card details are entered directly with Stripe and are never stored on our servers; (j) if you use the Family Account ("Le Cocoon" subscription), the explorer profiles you create (first name or nickname, chosen emblem and colour) as well as the curiosity history (the Thread) scoped per profile within your account.
3. Purposes
Your data is used solely to: create and secure your account, provide the conversational learning service, keep the memory of your explorations, and improve the quality of the service. If you take part in the referral programme, your referral data is used solely to allocate rewards and display your progress; the personalised share cards (featuring your first name or nickname and a QR code) are generated at your request to make sharing easier. We never sell your data.
4. Legal basis
Processing is based on the performance of the contract (provision of the service) and on your consent, which you can withdraw at any time.
5. Processors and AI
The content of your messages, the imported images and the voice extracts are transmitted to our artificial intelligence providers (OpenAI, Anthropic and Google) strictly to generate text responses, voice synthesis and transcription, image transcription and analysis (vision) and illustration generation. These providers act as processors and do not reuse your data to train their models in the context of our professional use. As some of these providers are established outside the European Union (notably in the United States), data transfers are governed by appropriate safeguards, such as the European Commission's standard contractual clauses. In addition, when you take out a paid subscription, your payment data (identity, email address and bank card details) is processed directly by our payment provider Stripe Payments Europe, Ltd., which acts as controller for these operations; we neither receive nor store your card details. The sending of our emails (transactional and newsletters) is handled by our provider Resend. These providers may process data outside the European Union, under appropriate safeguards.
6. Retention period
Your data is kept as long as your account is active. Upon account deletion, it is erased within 30 days, unless there is a legal retention obligation.
7. Your rights
In accordance with the GDPR, you have the right of access, rectification, erasure, portability, restriction and objection. You can exercise these rights at contact@cocoonmind.com. You may also lodge a complaint with your data protection authority (in France, the CNIL).
8. Cookies
We use only cookies strictly necessary for authentication. No advertising cookie or third-party tracking is placed.
9. Minors
The service may be used by minors from the age of 15. Below this age, registration and data processing require the prior consent of the holder of parental authority, in accordance with Article 8 of the GDPR. Parents can contact us at any time at contact@cocoonmind.com to access, rectify or delete their child's data.
Document de référence rédigé en français. Une traduction de courtoisie peut être fournie ; en cas de divergence, la version française prévaut.