Privacy policy
Last updated October 22, 2026
In short: CosmoBloc asks for no account and never receives what you log (workouts, weight, meals): it all stays on your phone. Three pieces of technical data still move, as explained below: your IP address reaches Open Food Facts when you scan a barcode, the website host keeps connection logs, and we receive the emails you choose to send us.
Who is responsible
CosmoBloc (the app and the cosmobloc.app website) is published by [publisher name, sole trader (EI)], established in France. Contact: support@cosmobloc.app.
The data you enter
Workouts, weights, body measurements, body weight, meals, recipes, added photos, settings: everything is stored only in your phone's memory. Some of it (weight, nutrition) may relate to your health; we never receive it. The publisher has no server to receive it and there is no user account.
What the app does not use
- no advertising;
- no analytics or audience measurement;
- no trackers, no advertising identifier;
- no sale or sharing of personal information.
Barcode scanning (Open Food Facts)
When you scan a product, your phone sends the barcode number to the collaborative database Open Food Facts to retrieve its nutrition facts. As with any web request, the Open Food Facts servers also receive your IP address and technical details about the connection. Open Food Facts processes these logs on its own behalf, under its privacy policy. Nothing you log in the app goes with this request. Scanning is optional: if you don't scan anything, the app connects to nothing, apart from the purchase check described below.
Purchases
The app is bought once on Google Play, with no in-app purchases. Google handles payment as an independent controller. The publisher receives neither your name nor your payment details, only limited order information in the Google Play Console (for example the order number and country). See Google's privacy policy.
To prevent pirated copies, the first time you open the app it asks the Play Store on your phone to confirm that you bought it (Google Play license check). Google only tells the app "purchased" or "not purchased"; the publisher receives nothing. Once your purchase is confirmed, it is remembered on your phone and the app works offline.
Permissions requested
- Camera: to scan a barcode or add your own photos. Images stay on your phone.
- Notifications: for the rest timer and the reminders you turn on. They are scheduled on your phone; nothing is sent.
- Health Connect (steps): optional. If you allow it, the app only reads your step count; it writes nothing to Health Connect and this data stays on your phone.
You can revoke these permissions at any time in your phone's settings.
The cosmobloc.app website
This website sets no cookies, uses no analytics and serves its fonts from its own server. Its host, OVH SAS, like any host, records visitors' IP addresses in technical logs for security purposes; these logs are kept up to one year, as French law requires of hosting providers.
If you type a product barcode in the “Leaves your phone” box, that number goes straight from your browser to Open Food Facts to show the product; their server sees your IP address, as with any connection. The site keeps nothing.
If you email us
Emails sent to support@cosmobloc.app are used only to reply to you. They are deleted 12 months after the last exchange.
The contact form and the secret star
The contact form sends your name, your email address and your message to support@cosmobloc.app from the site's server; they are then handled like an email (above). To block mass sending, the server keeps a fingerprint of your IP address for one hour, never the address itself. When you ask for a secret star code, the server receives your star number (4 characters drawn at random by the app, with no link to your identity); to limit abuse, it keeps, with a fingerprint of your IP address, the list of numbers requested during the current season. These traces are deleted after 100 days at most.
The “Let me know at launch” sign-up: if you fill it in, your email address, the page language and the date are kept on the site's server (OVH, in France), in a folder closed to the public. They are only used to send you a confirmation email, then one single email when CosmoBloc launches. Every email has an unsubscribe link that deletes your address at once; the whole list is deleted once the launch has been announced. Legal basis: your consent, which you can withdraw at any time.
Backup and deletion
You can export your data to a file from Settings › Data; the file is saved wherever you choose. Uninstalling the app deletes all its data from your phone. Since the publisher cannot access it, it cannot restore it for you: remember to export a backup. Android may also include the app's data in your Google account's automatic backup, depending on your settings: that backup is managed by Google and Android, and the publisher has no access to it.
For users in the United States
- We do not sell or share personal information (as those terms are defined under California law). We do not use personal information for targeted advertising or profiling.
- Your workout, body and nutrition data stay on your device; we never receive it. This includes any consumer health data.
- Do Not Track: this website and app do not track you across sites; we have no tracking to switch off, so DNT signals do not change anything.
- Children: CosmoBloc is not directed to children under 13 and we do not knowingly collect their personal information.
Your rights
The publisher is established in France and subject to the EU General Data Protection Regulation (GDPR), which gives you the right to access, correct, erase, restrict, object and port your data. The app's data is on your phone: you view, edit or delete it directly in the app. For anything else (emails, website logs), write to support@cosmobloc.app.
You may also lodge a complaint with the CNIL, the lead authority since the publisher is established in France, or, in the European Union, with the data protection authority of your country of residence.
Changes
If this policy changes, the new version will be published on this page with its effective date.






