← Back

Privacy & cookies

Updated · June 2026

Éclore supports women's health and the wellbeing of people affected by SMOP (Poly-endocrine Metabolic and Ovarian Syndrome, formerly SOPK). Because this is an intimate subject, we handle your data to high standards. This page explains, with full transparency, which data is processed, why, on what legal basis, for how long, by whom, and what your rights are.

1. Data controller

The data controller is:

TAILOR ADVICE, a SASU with share capital of 2 500 €.
RCS Salon-de-Provence 839 432 986 — SIRET 839 432 986 00033.
Registered office: 163 avenue des Oulivarello, 13300 Salon-de-Provence.
Represented by Christophe PAYET, Chairman.
Personal data contact: maellys@eclore-smop.com.

2. The showcase website

This presentation website

This website requires no account and sets no tracking cookies or advertising trackers. No third-party audience measurement, no profiling.

On the browser side, the only data stored is a display preference for the banner (and, if you object, your refusal of audience measurement), stored locally (local storage): it is not a cookie and is never sent to a server. You can erase it by clearing your browser's data. The site's anonymous, server-side audience measurement is described in §2 bis.

The fonts are self-hosted on our own server, in France. The website makes no calls to any third-party service (no Google Fonts, no external CDN): your IP address is therefore not transmitted to any third party while you browse.

2 bis. Site audience measurement (cookie-free)

To understand how this site is used (page views, features used, languages, number of visitors), we use an internal audience measurement, with no cookies or third-party tools (no Google Analytics). Everything is processed on our self-hosted infrastructure in the European Union (OVH).

Disable audience measurement

3. The Éclore app — data, purposes and legal bases

As the app is dedicated to SMOP, the mere fact of using it reveals that you have this condition. The data processed in the app therefore constitutes, by inference, health data within the meaning of Article 9 of the GDPR (see section 4). Here is the detail of the processing operations:

Account — email, username.
Purpose: to create and manage your account and let you access the app.
Legal basis: performance of the contract (Art. 6.1.b).

Wellbeing and health — mood, allergies (optional), having SMOP.
Purpose: to offer you tailored tracking and content.
Legal basis: explicit consent (Art. 9.2.a) — sensitive data.

Update 1.0.1

Cycle, contraception and wellbeing tracking — menstrual cycle (period dates, flow, pain, symptoms, cycle phase, including intimate symptoms such as libido or pain during sex, which relate to your sex life), basal body temperature, declared contraception (method, pill model and CIS code from the public medicines database, how regularly you take it), cycle reflection (mood tags and free text) and hydration (glasses drunk and goal).
Purpose: your personal wellbeing tracking only.
Legal basis: explicit consent (Art. 9.2.a) — health data, some of which reveals your sex life.
Where it is stored: your menstrual cycle, basal body temperature and hydration are stored on our servers (self-hosted Supabase at OVH, in France, within the European Union, isolated per account); your contraception and cycle reflection stay on your device only (local storage) and are never sent to our servers. The pill model and its CIS code are used solely to open the medicine's official leaflet. Never sold, never used for advertising.

Date of birth (optional).
Purpose: to tailor the experience. By minimisation, an age range is sufficient.
Legal basis: consent (Art. 6.1.a).

Community — posts, comments, photos.
Purpose: to take part in exchanges between members. This content is visible to other members and subject to moderation. Profiles are not public by default.
Legal basis: performance of the contract (Art. 6.1.b) and consent (Art. 6.1.a / 9.2.a for content revealing health data).

Push notifications — device identifier.
Purpose: to send you reminders and information. Notifications are routed via the Expo service (Expo Push), which relays them to Apple (APNs) and Google (FCM). No health data is transmitted in this context.
Legal basis: consent (Art. 6.1.a). This service may involve a transfer outside the EU framed by appropriate safeguards (see section 6).

Approximate geolocation (~10 km, only if you enable it).
Purpose: to contextualise certain content.
Legal basis: consent (Art. 6.1.a).

Statistics and service improvementaggregated / pseudonymised data.
Purpose: to understand usage and improve the app.
Legal basis: legitimate interest (Art. 6.1.f).

Waiting list — email.
Purpose: to notify you of the launch.
Legal basis: consent (Art. 6.1.a).

4. Health data (Article 9 of the GDPR)

The data processed in the app reveals your health status. It benefits from reinforced protection and is processed only on the basis of your explicit consent (Art. 6.1.a combined with Art. 9.2.a).

This consent is:

5. Recipients and processors

Your data is accessible only to authorised staff at the publisher and to the providers strictly necessary for the operation of the service:

No resale of your data. No advertising trackers. No third-party analytics SDK.

6. Transfers outside the European Union

Your data is hosted in France. Only push notifications pass through Expo, Apple and Google, which may involve a transfer outside the EU; these transfers are framed by appropriate safeguards and contain no health data.

7. Retention periods

8. Security (Article 32 of the GDPR)

We implement appropriate technical and organisational measures:

9. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

To exercise these rights: maellys@eclore-smop.com. We respond within one month at the latest.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL (cnil.fr).

10. Minors

In France, consent alone is valid from the age of 15. Below this age, processing requires the consent of the holder of parental authority.

11. Contact and data protection officer

For any question regarding your personal data or this policy: maellys@eclore-smop.com.

12. Hosting

The website and data are hosted by OVH, on a server located in France, within the European Union.

Personal testimony — Éclore shares an experience and lifestyle advice, not medical advice.