TooCacao Privacy Policy

Last updated: October 12, 2026

TooCacao is an app for scanning, rating, and discovering chocolate bars. This page explains what data is collected when you use the app, why, and how to exercise your rights.

Who is responsible for your data?

The TooCacao app is published by Fabrice Herrmann, an individual developer. For any question regarding your personal data, contact:

What data is collected?

• Account data: email address, and if you sign in via Apple or Google, your name (if you choose to share it).
• Username (optional): if you choose one, it is shown publicly with your tastings. You can change or remove it at any time from the Profile screen. It is never derived from your email address.
• Location: your geographic position, used only to show you nearby chocolatiers. It is not retained beyond displaying the map.
• Photos: if you add a photo to a chocolate entry, it is stored to be displayed in the app. Label reading (when a bar has no barcode) analyzes the photo directly on your phone: that photo is neither sent nor kept.
• Content you create: your tastings (ratings, aromas, sensory profile, comments, price), favorites, and scan history. Your tastings are visible to other users of the app, along with your username if you have one; your favorites and scan history remain private.
• Reports: if you report content (a tasting or a chocolate entry), the reason, any details you add and your identifier are stored to handle the report. They are never shared with the author of the reported content and are automatically deleted after 12 months.
• Diagnostic data: if the app crashes or hits an error, an anonymous technical report is sent (phone model and OS version, app version, technical error trace). It contains neither your email address, nor your IP address, nor the content you enter, and is used only to fix bugs.
• Places of purchase: if you enter where you bought a bar, the place's address (via Google Places) is saved and shared with other users (without any link to your identity).

TooCacao does not collect any data for advertising purposes and does not sell any data to third parties.

Who is your data shared with?

• Supabase — hosting of the database, authentication, and photos.
• Google — sign-in via Google Sign-In, map display (Google Maps), and place search (Google Places, queried through our servers).
• Google Cloud — automatic analysis of published photos and texts (comments, usernames) to filter out inappropriate content.
• Apple — sign-in via Sign in with Apple.
• Sentry (servers located in the European Union) — receives anonymous crash reports.
• Resend — sends moderation emails to the publisher (content to review and reports).
• Open Food Facts — public product database, queried to complete chocolate entries (no personal data is transmitted to them).

How long is your data retained?

Your data is retained for as long as your account exists. You can delete your account at any time from the app's Profile screen ("Delete my account" button): this action permanently erases your tastings, favorites, scan history, your username, your reports, and your account. The chocolate entries, bar photos and places of purchase you added to the shared catalog are kept, with no link to your identity. Reports are in any case deleted after 12 months.

Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, and port your data. You can exercise these rights directly in the app (editing your tastings and username, deleting your account) or by contacting us at the address above.

Security

All communications between the app and our servers are encrypted (HTTPS). Authentication is handled by recognized providers (Supabase, Apple, Google).

Minimum age

TooCacao is not intended for children under 16. We do not knowingly collect data about minors under 16.

Changes to this policy

This policy may be updated occasionally. The last modification date is shown at the top of this page.