Privacy policy

Chouquette · last updated: 3 November 2026

In short

• No ads, no selling of data, no ad trackers, no audience measurement tools.
• Your notes are saved on your device, then in your account, on our server in Switzerland, hosted by Infomaniak.
• The little white rabbit only sends something to our AI provider when you ask it to.
• You can export your data and delete your account from the app, at any time.

1. Who looks after your data

Chouquette is published by Cyril Anne, under the trade name en biais (see the legal notice). He is the controller of your data. Contact: support@chouquette.app.

2. Your account

• To sign in: your email address. There is no password: we send you a link and a 6-digit code, valid for 15 minutes. If you use Apple or Google, they give us your email address (or Apple’s relay address), your first name if they have it, and an identifier specific to that service.
• Your profile: the first name, username and profession you choose to enter.
• Your devices: the type of each connected device (for example “iPad · app”), so you can recognise them in your account.
• Your session: a sign-in cookie, valid for one year. Signing out deletes it from the server. Links, codes and sessions are only kept in a scrambled form, never in plain text.

3. Your notes and sync

Your pages, chouquettes, drawings, photos, PDFs, sounds, sources, and read and saved articles are first saved on your device (in the browser’s or the app’s storage), so that Chouquette works even without a network. They are then sent to your account, on our server, so you can find them on your other devices. They travel encrypted (HTTPS).

On the server, your data is not end-to-end encrypted: the server has to be able to read it to sync and back it up. We do not look at it and we do not use it for anything else.

A few settings stay on each device and are not sent to the server: open tab, zoom, theme, language, display settings.

When you share a chouquette, anyone who has the link sees its name, its cards and your first name, until you cut the link. We do not count visits and we keep nothing about the person who is looking.

4. Backups

Every night, the database (accounts and synced data) and your files are backed up with Swiss Backup (Infomaniak, in Switzerland). They are encrypted before they leave: Swiss Backup cannot read them. We keep the backups of the last 14 nights, 8 weeks and 12 months. After an account is deleted, its data may therefore remain in these backups for up to 12 months, after which it disappears on its own.

5. The little white rabbit, the assistant

The little white rabbit uses artificial intelligence from our provider, Anthropic (in the United States). It only sends something when you ask it to: chatting with it, summarising cards, suggesting titles, making a mind map, naming a group, summarising an article, or reading handwriting or a photo.

What is sent to Anthropic, only for the current request:

• what you give it to work on: your question and the latest messages of the conversation, the selected cards, the article (title, source, text), or the image to read;
• a short context so it answers accurately: the open section, the name of the chouquette, a preview of what it contains, your first name, your profession, the date and time.

Never your whole account. Anthropic does not use this data to train its models.

On its side, Anthropic deletes requests and responses within 30 days. Exceptions: a request flagged by its safety checks may be kept for up to 2 years, and the law may require it to keep data longer.

On our side, we do not keep the content of your requests or the responses. For each request, we only record the date, the type of request, its size and its cost, to count your monthly quota. This counter is also linked to a scrambled fingerprint of your email address (not the address itself), which remains after the account is deleted, so the quota does not start again from zero.

This counter is kept for 12 months, then deleted.

6. Emails

Chouquette’s emails (sign-in link and code, invitations) are sent from bonjour@chouquette.app or support@chouquette.app, through Infomaniak’s mail service, in Switzerland. No newsletter, no advertising.

7. Subscription and payment

• On iPhone and iPad, payment is handled by Apple. To know whether your subscription is active, we use RevenueCat (in the United States), which receives from the app a randomly generated account identifier (not your email address or your name) and the status of your purchase with Apple, along with the usual technical information of a connection (IP address, device model, iOS version). We never see your bank details.
• On the web, payment goes through RevenueCat (in the United States) and Stripe (in Ireland and the United States). RevenueCat receives your account identifier and your email address (for the receipt and managing the subscription), and Stripe processes your payment data. We never see your card.
• For the 14-day free trial, we keep, even after the account is deleted, a scrambled fingerprint of your email address (not the address itself): it is only used to avoid giving a second trial to the same address.

8. What goes through our server to read the web

• The feeds and pages you read: to read an RSS feed, the full text of an article, a link preview or a site’s images, our server fetches these pages on your behalf. It keeps a temporary copy (from a few minutes to a few days) to go faster, without linking it to your identity.
• Searching for sources: when you search for a site by name, our server queries Feedly’s feed search and checks the site’s possible addresses. Feedly only receives the text typed, never your identity.

9. Images and videos from other sites

Images in News and Inspiration are often loaded directly from the sites that publish them, as on any web page: these sites then see your IP address. The same goes for a web page opened from Chouquette, or for a YouTube or Vimeo video added to a chouquette.

10. Maps in chouquettes

When you add a map, the place you type is looked up by our server with OpenStreetMap (the result is kept for up to 30 days, without your identity), then the map is displayed from openstreetmap.org, which then sees your IP address.

11. Your ideas and reported bugs

What you send through the idea box or “Report a bug” (your text, the screenshot if you attach one, the app version and the device type) is kept on our server, under an identifier randomly generated by your device, without your email address.

If you write to us through the contact form, your email and message are used only to reply to you. They are not kept on our server.

12. Who else receives data

• Infomaniak (Switzerland): server hosting, backups, emails.
• Anthropic (United States): the little white rabbit, only when you ask it to.
• RevenueCat (United States): subscription status, on iPhone, iPad and the web.
• Apple: payment on iPhone and iPad.
• Stripe (Ireland and United States): payment on the web.
• Apple and Google: only if you choose to sign in with them.

Nothing is sold, nothing is used for advertising.

Some of these services are in the United States (Anthropic, RevenueCat, Stripe, and Apple or Google if you sign in with them). These transfers are governed by the European Commission’s standard contractual clauses and, for the services that adhere to it, by the EU–US Data Privacy Framework.

13. How long we keep your data

• Your account and your notes: as long as your account exists. When you delete it, everything is erased from the server immediately, files included, then from the backups within 12 months at most.
• Sign-in requests (links and codes): deleted after one day.
• Items moved to the bin: 30 days.
• The scrambled trial fingerprint and the little white rabbit’s counter: see above.

The internal log of the back office (account creation, subscription, deletion): 12 months. When you delete your account, your email address is removed from it immediately.

14. Your rights

At any time, from the app, you can: export your data (My account › Export my data) and delete your account and everything in it (My account › Delete my account). Deleting the account does not cancel an Apple subscription: remember to cancel it too.

You also have the right to access your data, correct it, have it erased, object to a use or restrict it. For any request: support@chouquette.app. If you think your rights are not being respected, you can contact the CNIL (cnil.fr), the French data protection authority.

15. Children

Chouquette is for people aged 15 and over. If you think a younger child has given us data, write to us: we will delete it.

16. Changes

If this policy changes in a significant way, we will let you know in the app or by email. The date at the top of the page shows the last update.

See also the terms of use and the legal notice.