Ooples

Privacy

Privacy Policy

Last updated: 17 September 2026

This policy describes the data the Ooples application (the "App") and its servers process, why, for how long, and what you can do about it. It is written from what the software actually does, and it is updated when the software changes.

Ooples is a private messaging app for a couple, which can grow into a household with children. The content of conversations is end-to-end encrypted: our servers carry and store it without being able to read it.

1. Data Controller

The data controller is the publisher of the Ooples App. For any question: privacy@ooples.fr.

2. What Ooples cannot see

Messages, photos, voice notes and files are end-to-end encrypted on your iPhone before they leave it. Only the recipient devices can read them. Our servers store encrypted data they cannot decrypt. This also applies to the copies intended for the parents of a supervised child.

3. Data we process

3.1 Your profile

  • Display name, avatar and colour: chosen by you, stored on our servers so they can be shown to the members of your household.

3.2 Your device

  • Technical identifier generated for your device, required to route messages.
  • iPhone model, iOS version, country and time zone, sent during pairing. The time zone is used for children's quiet hours.
  • Public encryption keys, needed so other devices can write to you in encrypted form. Private keys never leave your iPhone.
  • Apple push token, if you accept notifications. It is revoked when you unpair or erase your data.
  • Last connection date and, where applicable, a suspension status decided by the operator.

3.3 Your household

  • Composition: the household's devices, each member's role (parent or child), the household name, and the state of the "children in the household" option.
  • Children's dates of birth, entered by the parent who invites them. They are used only to compute the age at which supervision ends.
  • Parental settings: supervision end age, children's location sharing, quiet hours.
  • Household activity log: who invited, removed, renamed, changed a setting, ended or re-requested supervision, and when. This log never contains message content.

3.4 Messages and attachments

  • Encrypted content of each message, with the message type and the sent, delivered and read timestamps.
  • Encrypted attachments, with their non-sensitive metadata (file type, size, duration of a voice note).
  • Aggregate technical statistics on whether encryption works properly, without content or message identifiers.

3.5 Presence and location

  • Presence: online, typing and in which thread, last activity. This is held in memory on our servers and broadcast only to the members of your household.
  • Location: only if you turn on sharing in a conversation, or if parental supervision requires it (see section 5). It is approximate, kept briefly, for as long as it is displayed, and shared only with the members of your household. It is never archived.

3.6 Technical logs

  • Access logs: IP address, timestamp and route called, for security and diagnostics.

3.7 What we do not collect

No conversation content, no address book, no advertising identifier, no analytics, no cookies or trackers on this website. No payment data: the "children in the household" option is not yet open for subscription; if it becomes so, payment will be handled by Apple and we will not receive its details.

4. Push notifications

Notifications go through Apple's notification service and never contain the content of your messages. For a child, they are held back during the quiet hours set by the household. You can turn them off at any time in your iPhone settings.

5. Children and supervision

A child can only join Ooples on the invitation of a parent of the household, who enters the child's date of birth and holds parental responsibility. For a child under fifteen, that parent gives consent to the processing.

While supervision is active, and until the age set by the household:

  • parents receive an encrypted copy of the messages the child sends;
  • the location of the child's device is shared with the parents, including when the app is closed, if the "children's location" setting is on;
  • supervision actions are recorded in the household activity log.

The child is told about this in the app, through a permanent banner in their conversations and in their settings. Supervision ends automatically at the set age; turning it back on is requested by one parent and must be approved by another parent of the household, and the child is informed. Withdrawing the paid option freezes the addition of children and deletes nothing.

6. Purposes and legal bases

  • Providing the service (performance of the contract): routing and storing encrypted messages, managing pairing, the household, presence and notifications.
  • Parental supervision (legitimate interest of parents exercising parental responsibility, and the parent's consent for children under fifteen): encrypted copies, location, activity log.
  • Voluntary location sharing (consent, revocable at any time in the conversation or in settings).
  • Notifications (consent, revocable in iPhone settings).
  • Security and reliability (legitimate interest): access logs, protection against abuse, aggregate technical statistics.

7. Retention periods

  • Device, household, encrypted messages and attachments: as long as the household is active. A household created more than thirty days ago with no message for thirty days is deleted automatically, together with everything that belongs to it. You can request deletion at any time.
  • Location: briefly, for as long as it is displayed; never archived.
  • Push token: until you unpair, erase your data, or withdraw consent.
  • Access logs: at most fifteen days.
  • On your iPhone: decrypted messages and your keys stay on the device until you erase them from the App (unpairing or emergency wipe) or uninstall the App.

8. Recipients

Your data is not sold, rented or shared for commercial or advertising purposes.

  • The members of your household see your name, your avatar, your presence, your location if you share it, and of course your messages.
  • A hosting provider located in France for our servers and storage.
  • A traffic protection and routing service, under standard contractual clauses.
  • Apple, which delivers push notifications and distributes the App.
  • The host of this website, which sets no cookies.

The service operator only accesses the data needed to run the service, never the content of conversations, and its interventions are logged.

9. Security

  • End-to-end encryption of messages and files.
  • Safety number verifiable between devices.
  • Encrypted transport and encryption at rest of sensitive data.
  • On the iPhone: system data protection, optional biometric lock, emergency wipe.
  • Restricted and logged access on the operator's side.

10. Transfers outside the European Union

Our servers are in France. Traffic may pass through our network protection service and notifications through Apple, under standard contractual clauses. We store no data outside the European Union.

11. Your rights

You have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw consent and to lodge a complaint with the CNIL. In the App, you can edit your profile, stop sharing your location, unpair or erase everything. For a server-side request, write to privacy@ooples.fr. Details are on the personal data page.

A parent exercises these rights on behalf of their child; a child may also write to us directly.

12. Changes

This policy evolves with the App. The date at the top indicates the last revision; a material change will be announced in the App.

13. Contact

privacy@ooples.fr