Privacy Policy – Cocoon®

Our commitment

At Cocoon®, we build our privacy policy on trust and in compliance with the Act respecting access to documents held by public bodies and the protection of personal information (CQLR, chapter A-2.1) and any other applicable Quebec and Canadian laws or regulations. We designed Cocoon® to simplify your daily life while applying the highest standards of protection. In this way, we make the protection of your personal information — and that of your children — our top priority.

Who Manages Your Information?

GDML Solutions inc. assumes responsibility for the personal information collected. In this regard, you can contact our Privacy Officer via email at cocoon@gdmlsolutions.com for any questions.

How Do We Collect Your Information?

Your data is collected when you create your account on the application or use features such as the calendar, expenses, messaging, or resources. Furthermore, your information is processed when you use the application or browse our website by filling out forms, subscribing to the application, or accepting our cookies. In addition, our system automatically collects certain technical and digital information, such as IP addresses, login times, pages visited, and actions taken on the Cocoon® website.

What Information Do We Collect?

We only collect the information necessary for the proper functioning of the Cocoon® application. This data is used exclusively to facilitate family organization, communication, and expense management.

• Identification Information:

  • Identity: First name, email address, province, parental status, and number of children.

  • Finances: Income-based distribution factor for shared expenses.

  • Co-parenting: Calendar, messages between parents, and parenting schedule.

  • Children: First name(s), schedules for shared events, expenses and receipts (added by parents) and memories’ pictures.

  • Location: Only used to suggest nearby resources.

Why Do We Use Your Information?

Your data is processed to create and manage your account and to facilitate communication between co-parents. Additionally, this information helps organize daily family life while improving the technical performance of the application. Finally, our team ensures the security of the service and complies with applicable legal obligations. We do not engage in any commercial policies with your data, nor do we conduct advertising based on your information.

Your Consent

By using Cocoon®, you consent to the use of your information in accordance with this policy. However, please note that you can withdraw this consent at any time by contacting our Privacy Officer via email at cocoon@gdmlsolutions.com.

Who Has Access to Your Information?

You can access all of your own data at any time. As for the authorized co-parent, they only see the information you choose to share. Regarding our technology partners, they only process data strictly necessary for their services. Notably, Stripe fully manages your payments without us ever having access to your credit card information.

The technology partners of Cocoon® are:

• Supabase : Secure Hosting in Canada and User Database
• Resend : Sending emails
• Google Analytics : Usage analysis (anonymized data)
• Stripe : Encrypted payments

Non-Disclosure to Third Parties

In any case, Cocoon® does not rent, sell, or exchange your personal information with any other entity unless required under a legal obligation or court order, or as part of the execution of a contract entrusted to a third party.

Where and How Do We Protect Your Data?

Our system automatically encrypts your data to guarantee its confidentiality. Likewise, a strict isolation between families prevents unauthorized access. Finally, your data is hosted on secure servers in Canada. Only members of our technical team are authorized to access it.

Security Measures: Retention and Deletion

We retain your information for as long as you use your account. However, once the account is closed, we delete or anonymize your data after complying with our legal obligations.

Clause Regarding the Retention and Disclosure of Messages

Message Retention and Personal Safety

We retain the history of messages exchanged between users to ensure the continuity of your co-parenting service. However, the protection and safety of our user parents are our absolute priorities.

Disclosure to Authorities Without Prior Consent

In accordance with Section 18.2 of the Act respecting the protection of personal information in the private sector (Bill 25), we reserve the right to disclose your messages to the competent authorities (police services, courts, DPJ/Youth Protection) without your consent in the following situations:

• Emergency and Safety: When there is reasonable cause to believe that an imminent danger of death or serious injury threatens a person, including death threats or threats of physical violence.

• Legal Obligation: When a court order or an official request from an investigative body compels us to do so to prevent, detect, or suppress a criminal act or an offense under the law.

Retention Period

This data is retained for the entire lifespan of your account. In the event of account closure, we may archive this data for a period of 3 years to meet our legal obligations or to allow for the production of evidence in the context of subsequent legal disputes.

Your Rights

You can view your data or correct any information at any time. Furthermore, it is also possible to request the deletion of your account at any time. To this end, any request can be sent directly to our Privacy Officer at cocoon@gdmlsolutions.com.

Children’s Data

Parents or legal guardians provide information for minor children or young adults under guardianship. By using the application, you confirm that you are the holder of parental authority or the legal guardian for the registered children or young adults under guardianship. Consequently, we provide enhanced protection for this data. We never collect information directly from minors or young adults under guardianship.

Incidents and Amendments

In the event of a privacy incident, we will inform you within a reasonable timeframe. Furthermore, this policy will be reviewed regularly every six (6) months. When updates occur, you will receive a notification within the application.

If unauthorized access to messages between co-parents occurs, such as a data breach, GDML Solutions inc. will promptly notify the Commission d’accès à l’information (CAI) and inform the affected users if the incident presents a “risk of serious injury.”

Handling of Complaints Related to Personal Information Protection

Any person may file a complaint regarding the company’s privacy practices with the Privacy Officer at cocoon@gdmlsolutions.com.

Complaints are handled in a confidential, diligent, and impartial manner. Cocoon® analyzes each complaint, takes appropriate corrective measures when necessary, and communicates its decision to the complainant within a reasonable timeframe. The Privacy Officer maintains a registry of complaints received and the measures taken to follow up on them.

Contact

For any questions, you can reach our Privacy Officer at cocoon@gdmlsolutions.com