Privacy Policy
Effective date: April 19, 2026
Last updated: September 3, 2026
This Privacy Policy describes how Capaz ("Capaz", "we", "us", or "our") collects, uses, stores, and shares personal information when you use the Capaz mobile application and related services (the "Service"). It also explains the rights you have under the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.
The Service is operated by Capaz. If you do not agree with this policy, please do not use the Service.
1. Who we are (Data Controller)
The data controller responsible for your personal data is:
Capaz
Contact email: contact@capaz-app.com
2. Children and family use
Capaz is a family application that allows parents and their children to stay in touch. Accounts for children under the age of 13 (or the applicable age of digital consent in your country, e.g. 15 in France) can only be created or linked by a parent or legal guardian, who provides verifiable consent for the collection and processing of the child's data.
- A parent account must invite the child to join the family.
- The parent can at any time review, export or delete the child's data from the "Family" settings or by contacting us.
- We do not knowingly collect data from a child without parental consent. If we discover that we have done so, we will delete the data promptly.
- We do not show behavioral advertising to children and we do not sell children's personal data.
3. Data we collect
| Category | Examples | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Account data | Email, phone number, display name, profile picture, date of birth, authentication identifiers (Google / Apple sign-in) | Create and secure your account, link family members | Performance of a contract |
| Family & friends graph | References to other users you add as friend or family, invitations | Enable chat, calls and location sharing inside your family / friends | Performance of a contract |
| Messages & media | Chat text, photos, videos, voice messages you send or receive | Deliver messages to the intended recipients, and run the automated anti-harassment analysis described in section 6 | Performance of a contract; legitimate interest for the anti-harassment analysis |
| Calls | Voice / video call signaling and temporary media streams (via Agora) | Enable real-time calls between family members | Performance of a contract |
| Location | Approximate and precise location, in foreground and (with consent) background | Share your location with the family members you have authorized, so they can see you on the family map | Explicit consent (you can revoke it at any time) |
| Device & technical data | Device model, OS version, language, app version, push token, crash and performance logs | Deliver push notifications, diagnose bugs, improve the app | Legitimate interest |
| Purchases | Subscription status, purchase receipts (handled by Apple / Google / RevenueCat — we never see your card number) | Manage paid features and subscriptions | Performance of a contract |
| Support & communications | Emails you send us, reports you submit from the app | Respond to you and improve the Service | Legitimate interest |
We do not collect: bank card numbers, government ID, biometric identifiers, sexual orientation, political opinions, religion, health data, or precise contacts from your address book.
4. How we use your data
- To provide, operate, and maintain the Service (accounts, chat, calls, family map, notifications).
- To authenticate you and prevent fraud or abuse.
- To provide customer support.
- To send you service-related notifications (e.g. a new message, a family invitation).
- To improve the Service, fix bugs, and measure performance in an aggregated way.
- To comply with our legal obligations.
We do not use your personal data for targeted advertising, and we do not sell your personal data.
5. Sharing with other users
Some data is shared with other users of Capaz by design:
- Your display name and profile picture are visible to the friends and family members you accept.
- Messages and media are delivered to the recipients of the chat.
- Your location is visible only to family members you have explicitly authorized, and only if you have not turned location sharing off.
6. Automated safety checks (anti-harassment)
Capaz includes an automated safety system designed to detect and prevent cyberbullying between children. Because it analyses the content of messages, we describe it here in detail.
- What is analysed: the text of messages exchanged in the app is automatically analysed to detect signals of harassment, threats, insults and other abusive behaviour. Only conversations involving at least one child are analysed; conversations between adults are not.
- Who performs the analysis: an AI agent operated by Mistral AI, a provider established in the European Union (France). The content sent for analysis is not used by the provider to train their models.
- Why: to protect the safety and the mental health of the minors who use the Service, and to meet our responsibilities regarding the protection of minors online.
- Legal basis: the legitimate interest of Capaz and of the children using it in providing a safe environment for minors (Article 6(1)(f) GDPR).
- The analysis is automated. We do not routinely read your conversations.
- What happens on detection: the only outcome is a notification sent to the parent account linked to the child, indicating that a potential harassment situation has been detected in a conversation, together with the display names of the participants. The alert does not contain the content of the messages. The system does not block, restrict, suspend or delete anything, and takes no decision about any user: it hands the information to a parent so that an adult can decide what to do.
- Detection log: we keep a log of these detections for one year, in order to operate and improve the safety system.
- What we never do with message content: advertising, commercial profiling, sale to third parties, or any purpose other than delivering and securing the Service.
7. Service providers (sub-processors)
We rely on a small number of trusted providers to run Capaz. They process data only on our instructions, under a data processing agreement:
| Provider | Role | Data location |
|---|---|---|
| Google Firebase — Cloud Storage | Storage of photos, media and files shared in the app | Switzerland (Zurich) |
| Google Firebase — Firestore | Accounts, profiles, friend lists and messages | Switzerland (Zurich) |
| Google Firebase — Cloud Functions | Server-side processing | Belgium |
| Google Firebase — Authentication | Sign-in and account identifiers. This service is not region-selectable: Google runs it exclusively from US data centres. | United States |
| Google Firebase — Cloud Messaging, Crashlytics, Performance Monitoring | Push notifications, crash and performance diagnostics. These services run on Google's global infrastructure and are not bound to a selected region. | Global (Google infrastructure) |
| Google Play Services / Apple Push Notification service | Delivery of push notifications to the device | European Union / United States |
| Agora.io | Real-time voice and video calls (only for the duration of a call). The service is configured to route call media through the provider's European region only. The provider itself remains a US company, so we rely on the European Commission's Standard Contractual Clauses for this processing. | European Union (media routing) — provider in the United States |
| RevenueCat | Subscription management | United States |
| Mistral AI | Two distinct uses: (a) the AI assistant and image generation features, when you choose to use them; and (b) the automated anti-harassment analysis of message content described in section 6, which runs on all conversations. In both cases the content sent is not used by the provider to train their models. | European Union (France) |
| OpenAI | AI assistant features, when you choose to use them, under the same conditions. This provider is being phased out and replaced by Mistral AI. | United States |
| Google Sign-In, Sign in with Apple | Authentication, when you choose to use them | United States |
Account data, messages and media are stored in Switzerland, which benefits from a European Commission adequacy decision: the level of data protection is recognised as equivalent to that of the EEA. Where data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or on an adequacy decision.
8. Data retention
- Account data: kept as long as your account exists.
- Messages & media: kept for up to one year, then deleted — or earlier if you or the chat participants delete them, or if your account is deleted. Note that the window of history visible in the app depends on your plan (the last 30 messages, or the last 30 or 90 days). Messages outside that window are not destroyed: they become visible again if you move to a plan with a longer window.
- Location: only the latest known position of each family member is stored; we do not keep a long-term location history.
- Logs & crash reports: up to 90 days.
- Anti-harassment detection log (see section 6): one year.
- Billing records: kept for the period required by applicable tax and accounting law (up to 10 years).
When you delete your account, we delete or anonymize your personal data within 30 days, except where we are legally required to keep it longer.
9. How we protect your data
- All traffic between the app and our servers is encrypted with TLS.
- Data stored on Firebase is encrypted at rest.
- Access to production data is restricted to a limited number of administrators and logged.
- Firestore security rules enforce that you can only read and write your own data and data shared with you by other users.
No system can be 100% secure; if we become aware of a personal data breach affecting you, we will notify you and the competent authority as required by law.
10. Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of your data ("right to be forgotten");
- Restrict or object to certain processing;
- Port your data to another service;
- Withdraw your consent at any time, for processing based on consent (e.g. location sharing);
- Lodge a complaint with your local data protection authority (in France: the CNIL — www.cnil.fr).
You can delete your account directly from the app (Settings → Account → Delete my account) or by writing to contact@capaz-app.com. We will reply within 30 days.
11. Permissions we request on your device
- Location — to show your position to the family members you have authorized. You can disable it from your device settings or from inside the app.
- Camera & microphone — to take photos, record videos and voice messages, and make calls.
- Photos / media — to let you attach content to messages and to save received media to your gallery.
- Notifications — to alert you of new messages, calls or family events.
- Background location (optional) — to keep the family map up to date even when the app is not open. You are asked for this permission separately and can revoke it at any time.
12. Cookies and similar technologies
The Capaz mobile app does not use advertising cookies or third-party tracking SDKs. Our public website uses only technical cookies needed to display the page.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you inside the app or by email before the changes take effect. The "Last updated" date at the top of this page always reflects the latest version.
14. Contact
Questions, requests, or complaints? Contact us at contact@capaz-app.com. We are happy to help.
Capaz