Dodeli Privacy Policy

Version: 15 October 2026

Dodeli is provided by EURL Kolbeo, SIREN 101 112 480, 55 rue Grignan, 13006 Marseille, France. Privacy contact: rgpd@kolbeo.fr.

Dodeli processes an email address and Firebase identifier for registered accounts; random device identifiers, names and credential hashes for pairing; session and connection metadata; IP addresses and necessary security logs; and an instantaneous sound level when noise is detected. It does not record or store audio or video. A paired parent's push token is stored to deliver a “possible crying” alert and is removed when notifications are disabled, the device is revoked, the token becomes invalid, or the account is deleted. WebRTC media is encrypted and travels peer-to-peer when possible, or through a TURN relay without being decoded by Dodeli's Worker.

The service uses Google Firebase for authentication and push notifications and Cloudflare for Workers, Durable Objects and TURN. Data may be processed outside the EEA under the providers' applicable safeguards. Pairing QR codes expire after five minutes; guest access expires after at most 24 hours; saved devices remain until revoked; accounts remain until deletion.

Users may access, correct, erase, restrict or object to processing where applicable and may contact rgpd@kolbeo.fr or lodge a complaint with the CNIL. The app provides device revocation and account deletion in Settings.

Dodeli is intended for parents and guardians, not children. It is not a medical device or a substitute for adult supervision. Full French terms prevail where permitted. The current policy will be hosted at https://kolbeo.fr/dodeli/privacy before store publication.

For subscription features used by registered accounts, RevenueCat receives the Firebase user ID, purchase receipts/tokens, product and subscription/trial status, dates, and SDK technical metadata (app, device and IP). This processing is necessary to validate and restore paid access. Apple or Google processes payments; Dodeli does not receive payment card numbers. Guest mode does not initialize RevenueCat. No media, device secret or sound event is sent to RevenueCat. These providers may process data outside the EEA under applicable safeguards. Purchase data follows the providers’ contractual and statutory retention requirements. Contact rgpd@kolbeo.fr to request erasure with providers; deleting a Firebase account does not automatically erase RevenueCat purchase data or cancel a store subscription.

Subscription purchase and management screens use native RevenueCat UI (Paywalls and Customer Center). Technical display and interaction events may be processed by RevenueCat to operate these interfaces and monitor subscription journeys.

Listening status and Live Activities

During parent listening, Dodeli displays connection status and time since the last detected sound on the lock screen through an iOS Live Activity or an Android notification. Anyone with access to this screen may see this status. It contains no audio recordings or images. The operating system runs the timer locally.

To update status while the app is suspended, Cloudflare processes a temporary listening identifier, the paired parent device, reception and presence states, sound event levels and timestamps, alert preferences, and Firebase Cloud Messaging / Apple ActivityKit delivery tokens. Google and Apple deliver these notifications. The Worker never receives, stores or decodes audio or video. Only current sound metadata is kept, not a sound history.

Subscriptions last no longer than the session (at most 24 hours after registration and no longer than guest authorization). They are removed when listening stops, pairing is revoked, or the account is deleted. If the phone cannot reach the server, they expire automatically. Invalid delivery tokens are removed when detected. Metadata for an ended station is removed after a short delivery window of at most 30 seconds. The installation's technical FCM token may remain locally available for reuse.

Disabling sound and disconnection alerts keeps silent listening status updates. System permissions also control notification and Live Activity visibility. Network loss or operating system restrictions may delay or prevent an alert. A status of “Listening needs checking” does not confirm audio reception.

To avoid repeating alerts, the phone locally retains at most 32 recent technical incident identifiers, progressively replaced by newer ones. They contain no media or notification tokens.