Privacy policy

Last updated: 25 October 2026. If the translations differ, the French text prevails.

Crapou handles sensitive information: how children's lives are organised, official documents, sums of money and exchanges between two people who have separated. This document states exactly what is collected, why, for how long, and what you can demand. It applies to the website (www.crapou.com) and to the Crapou mobile app, on iPhone and on Android.

Data controller

Nayaro SRL, BE 0647.588.826, Mons, Belgium.
Contact for any question about data: support@crapou.com

What we collect

• Account: first name, last name if you give it, email address, encrypted password, and a phone number if you turn on text alerts.
• Family: name of the file, the label chosen for each parent, children's first names and dates of birth.
• Close ones: first name, email address and the children whose schedule they may see; confirmation of the handovers entrusted to them.
• Children's access: the first name taken from the child's record; no email address, no phone number. Sign-in QR codes are valid for ten minutes and once only.
• Organisation: custody nights, handovers, appointments, holidays, things to bring.
• Money: expenses, amounts, categories, receipts, child support, payments, and the last four digits of an IBAN when one is saved.
• Documents: the files you upload, including, if you choose to, medical or court documents.
• Discussions: questions asked to the other parent and the answers.
• Log: the author, the time and the previous state of every action on the calendar or on money.
• Billing: name, billing address and, for a company, VAT number, with the purchase history.
• Sign in with Apple or Google, if you choose it: see « Sign in with Apple or Google » below.
• Devices (mobile app and browser notifications): see « The mobile app » below.
• Contact form on the website: name, email address and message.
• Technical: connection logs, IP address, timestamps, for security; a record of the emails, text messages and notifications sent.

Information about the other parent (their label, the address you invite them at) may be entered by you: the address is only used to send them the invitation.

The mobile app (iPhone and Android)

The app shows the Crapou service, with the same data as the website. It adds signing in on the phone, unlocking with Face ID or fingerprint, and notifications. It contains no purchases, no advertising and no audience measurement tool. It never accesses your contacts or your location, and accesses your photos or files only when you choose one to attach (a receipt, a document).

Notifications

To let you know (a request from the other parent, an upcoming handover…), Crapou uses the system's notification service: Apple Push Notification service on iPhone, and Google Firebase Cloud Messaging on Android. For each phone on which you accept them, we keep:

• the notification token that Apple or Google assigns to the app on that phone (it is used to reach it, nothing else);
• the device type (iPhone or Android) and its name or model, as the phone reports it (for example « iPhone » or « Samsung Galaxy S24 »), so you can recognise it in « Signed-in devices »;
• the app version, a randomly generated installation ID, how you signed in, and the dates of first and last use.

The content of a notification (a title and a short sentence, as in our emails, and the page to open) passes through Apple or Google to be delivered to your phone. Browser notifications are end-to-end encrypted: your browser's service (Apple, Google or Mozilla) delivers them without being able to read them. You can turn notifications off at any time, in the phone's settings or on Crapou's « Alerts » page.

Face ID, Touch ID and fingerprint

Face or fingerprint recognition is done entirely by your phone. No biometric data ever leaves the phone: Crapou neither receives nor stores it. When you sign in, the app places a device token in the phone's encrypted vault (the Keychain on iPhone, the Keystore on Android); the phone only releases it after your face or fingerprint. Our servers keep only a hash of it, from which it cannot be rebuilt. Without Face ID or a fingerprint, the token is kept in the same vault, without a biometric lock.

Sign in with Apple or Google

If you choose « Continue with Apple » or « Continue with Google », we receive from that service, and only from it:

• an identifier specific to Crapou, which recognises you from one sign-in to the next;
• your email address, and whether it is verified;
• your first and last name, if the service shares them. Apple only gives them once, at the first sign-in, and only if you agree. Otherwise we ask for your first name; we never take it from your address.

We never receive your Apple or Google password, your contacts, or any other data from your account with them.

Apple relay address. With « Hide My Email », Apple gives us an address ending in @privaterelay.appleid.com, which forwards our emails to you without revealing yours. We use it like any other address, and never as a name. If you turn off this forwarding at Apple, Apple tells us and we send nothing more to it until you turn it back on. If you remove Crapou from the apps using your Apple ID, or delete your Apple account, Apple tells us too: Sign in with Apple is removed from your Crapou account, and you are notified.

For Sign in with Apple, we also keep, encrypted, a token provided by Apple: it is used only to inform Apple when you delete your Crapou account, as Apple requires.

Sensitive data

A medical document or a court ruling is sensitive data under the GDPR. Crapou never asks you to upload any. If you do, it is on the basis of your explicit consent, which you can withdraw at any time by deleting the document. Documents marked as medical are visible to the parents only, never to invited third parties.

Why, and on what basis

• Performance of the contract: providing the schedule, the accounts, the documents and the discussions, and signing you in. Without this data, the service does not exist.
• Legal obligation: keeping invoices and accounting records.
• Legitimate interest: security of the service, fraud prevention, and keeping the log, which protects both parents equally.
• Consent: notifications on the phone or browser, text alerts, Sign in with Apple or Google, uploading sensitive documents, opening access to a close one or a child (agreement of both parents).

Crapou makes no automated decision with legal effects on you, and does no profiling.

Who has access

Both parents of the same file see the schedule, the expenses, the non-restricted documents and the log. That is the very principle of the tool: shared information is better than disputed information.

A close one (grandparent, babysitter, step-parent) only joins with the agreement of both parents and with their own account; they see the schedule, the handovers and the appointments of the chosen children only: never the money, never the log, never the documents, never the discussions or a pending request. A child with access only sees their own schedule. Each of these accesses can be revoked at any time by a single parent. There is no anonymous viewing link.

Nayaro SRL staff only access a file's data at a user's explicit request or under a legal order.

Processors

• OVH SAS (France): hosting, backups and sending emails, in the European Union.
• Stripe Payments Europe Ltd (Ireland): payment for licences and text message packs, and billing, on the website only. No card data passes through our servers.
• Brevo (Sendinblue SAS, France): sending text messages, when a plan includes them.
• Apple (Apple Distribution International Ltd, Ireland): Sign in with Apple, delivering notifications to iPhones (Apple Push Notification service), distributing the app (App Store).
• Google (Google Ireland Limited, Ireland): Sign in with Google, delivering notifications to Android phones (Firebase Cloud Messaging), distributing the app (Google Play).

Transfers outside the European Union. Apple, Google and, for some processing, the Stripe group may process data in the United States. These transfers rely on the EU-US Data Privacy Framework (adequacy decision of the European Commission) or, failing that, on the Commission's standard contractual clauses.

Each acts on instructions, under a data processing agreement (or, for Apple and Google, under their data processing terms). No data is sold, rented or used for advertising. Crapou shows no advertising.

How long

• Family file: as long as at least one parent uses it; once closed (no parent left), three years, then complete and permanent deletion.
• Account never confirmed (email address not confirmed): deleted after seven days.
• Deleted account: thirty days to change your mind, then deletion, except for log entries and accounting records.
• Mobile app devices: 90 days, rolling. Each time you open the app, the period starts again; after 90 days without use, the device is removed (no more notifications, no more unlocking with Face ID or fingerprint: you need to sign in again), and its record is deleted thirty days later. It is removed immediately if you sign out in the app or remove it in « Signed-in devices ».
• Website sign-ins (browser, or the website inside the app): closed after 90 days without use, or as soon as you remove them in « Signed-in devices »; their record is deleted thirty days later.
• Browser notifications: as long as the subscription is active; removed as soon as you turn them off or the browser refuses it.
• Log: kept as long as the file exists. It can be neither changed nor deleted, not even by us: that is what gives it its value.
• Invoices: seven years, Belgian accounting obligation.
• Technical logs, records of emails, text messages and notifications sent, contact form messages: twelve months at most.
• Demo (« Try the demo »): a fictitious family, deleted after twenty-four hours; nothing entered in it is kept or sent.

Deleting your account

• From the app or the website: « My account », then « Delete my account ». You confirm with your password; an account created with Apple or Google, without a password, confirms with a code sent by email, or by signing in again with Apple or Google.
• If you cannot sign in: the public page www.crapou.com/app/suppression-compte: you enter your address, and confirm with the link you receive by email.

You then have thirty days to change your mind; after that your personal data is deleted, except for the log and accounting records (see « How long »). At that point, all your devices are signed out and stop receiving notifications, your Apple and Google sign-ins are deleted, and Apple is informed. Uninstalling the app does not delete your account.

Your rights

You can request access to your data, its correction, its deletion, restriction of processing and its portability, and object to processing based on legitimate interest. You can export your data directly from the app. You can withdraw a consent (notifications, text messages, Sign in with Apple or Google) at any time, without affecting what was done before.

Two limits, stated plainly: deletion cannot apply to the log or to data held jointly with the other parent, because they are the shared record of your arrangements. In case of disagreement, the supervisory authority or the court decides.

To exercise a right: support@crapou.com. Answer within thirty days.

Complaint

You can lodge a complaint with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be), or with the authority of your country of residence.

Security

Encrypted connections, hashed passwords, hashed device tokens, strict separation of files, a log protected by a chain of hashes and write-only triggers. In the event of a data breach presenting a risk, the people concerned and the authority are informed within the legal time limits.

Children

Children's data is entered by their parents, in the exercise of parental authority. It is limited to what the organisation needs: first name, date of birth, appointments and documents. No profiling, no advertising, no commercial transfer.

A child can have access, with no age requirement, opened by their parents with the agreement of both when both use the service. This account contains no email address and no phone number; it only allows the child to view their own schedule and to receive, on the connected device, the reminders that concern them (the child's phone is then registered like any device, see « The mobile app »). It closes automatically at eighteen; the parents can then, if the child wishes, invite them as a close one with an adult account.