Soma — Privacy policy
Last updated: October 15, 2026
Who we are
Jennifer Thibault (sole proprietor) — Les Arcanes de Cookie, 22 Boulevard Gambetta, 64130 Mauléon-Licharre, France. Contact: contact@arcanescookie.fr. Soma is available as a website / web app (soma.arcanescookie.fr) and as an Android app (fr.arcanescookie.soma); both use the same account and the same server.
In short
Soma is a cycle and women's-health tracker. Your health data is yours. It is stored on our server in France (hosting: LWS) only to show it back to you. We do not sell it, share it for advertising, or use it to profile you. It is never used to target ads. The free version of the Android app shows a small banner ad (Google AdMob); there are no analytics trackers. Soma Complete (premium) removes the ads. The website has no ads.
Advertising (free Android version)
The banner is shown only on neutral screens (guides and settings) — never next to your cycle, journal or body data — and only non-personalised ads are requested. In the European Economic Area and the UK, we ask for your consent first (Google's consent form); you can change your choice at any time in Me › Ad privacy choices. To display ads, Google AdMob may process your device's advertising identifier, IP address and general device data under its own privacy policy (policies.google.com/privacy). We never send Google your health entries or your account details. Subscribers see no ads and no consent form.
What we collect, and why
| Data | Why |
|---|---|
| Email address, display name (optional), password (stored only as a one-way hash), optional PIN (hash) | Create and secure your account; sign in. |
| Health and wellbeing entries you choose to log: periods and cycle dates, symptoms, mood, energy, stress, medication / supplement / contraception reminders, illness episodes, water, meals, sport, steps, body measurements, notes, profile settings | Core feature: tracking, predictions, calendar, reports. Entered by you, with your explicit consent; you can stop at any time. |
| Products you scan (barcode, name, ingredients, risk summary) | Scanner feature. The barcode is sent to our server, which looks it up in its own catalogue, then in the open databases Open Food Facts / Open Beauty Facts / Open Products Facts. Your identity is not sent to them. |
| Products you add yourself when a barcode is not found (barcode, name, brand, category, ingredient list) | These product details (no personal data) are stored in a catalogue shared by all Soma users so the product is recognised next time. Only you can later correct a product you added; your scan history stays private. |
| Notification subscription (web push address of your browser/device) | Send the reminders you enabled (period, ovulation, hydration, medication). |
| Subscription status, purchase token (Google Play) or Stripe customer identifier | Soma Complete (premium) purchases are handled by Google Play (in the app) or Stripe (on the website); we never see or store your card number. |
| Session cookies (sign-in, "stay signed in") | Keep you signed in. No advertising cookies. |
Camera and permissions (Android)
Camera: only to read a product barcode; the image is analysed on the phone and never saved or sent. Notifications: reminders you enabled. Internet: to talk to your account on our server. The app does not use your location, contacts or microphone. Advertising ID: read by Google AdMob in the free version to show the banner (non-personalised ads).
Who can see your data
Only you (and technical administration of the server, when strictly needed). Data is sent over HTTPS. Service providers: LWS (hosting, France), Google Play (in-app payments), Google AdMob (banner ads in the free version, see above), Stripe (website payments), the open Open*Facts databases (barcode lookup only). Nothing is sold; your health data is never used for advertising.
Your rights, and deleting your account
You can edit or delete your entries at any time, export a PDF report (Me › "Report for my gynaecologist"), change your password and delete your account and all your data at any time: in the app (Me › My account › Delete my account) or on the web at soma.arcanescookie.fr/supprimer-mon-compte.php. Deletion is immediate and permanent. A recurring Soma Complete subscription is cancelled with the account; neither a subscription period in progress nor a lifetime purchase is refunded. Under the GDPR you may also request access, rectification, erasure or portability, or complain to the CNIL, by writing to contact@arcanescookie.fr.
Retention
Data is kept while your account exists and erased when you delete it. Technical logs are not used to track you.
Children
Soma is intended for adults (18 and over).
Medical disclaimer
Soma is an information and tracking tool. It does not diagnose, treat or replace medical advice. Predictions are estimates and must not be used as a contraceptive method.
Changes
If this policy changes, the date at the top of the page is updated.