Sokka
🔒 Privacy

Privacy policy

Last updated: 4 October 2026

English translation provided for convenience. The French version is the reference text.

This policy explains what data Sokka processes, why, for how long, and how you stay in control of it. It applies to the mobile app as well as to this website.

Article 1

Data controller

Heyben KHENISSI, 28 boulevard du Général Leclerc, 92110 Clichy, France, reachable through the help page.

Article 2

Data processed

Email address and password

The password is stored as a hash, never in clear text. Used to create and secure your account. Kept until the account is deleted.

Google or Apple account identifier

Only if you choose “Continue with Google” or “Continue with Apple”. Used to recognise you when you sign in. Kept until the account is deleted.

With Apple, if you ask to hide your email address, we only ever receive the relay address Apple creates (…@privaterelay.appleid.com): your real address never reaches us. When the account is deleted, the permission granted to Sokka is revoked on Apple’s side in the same move.

First name and username

Your first name personalises the app. Your username, if you choose one, lets your friends find you. Both can be seen by other users (Article 4b). Kept until the account is deleted.

Friends, blocks and reports

Your friendships, your requests and the accounts you block, erased with your account. Reports, sent or received, are kept for the security of the service.

Places, lists and notes

They make up your map and bring it back from one device to another. Kept until you delete them, or until the account is deleted.

Plan, dates and analysis counters

Used to apply your access rights and the fair-use limits. Kept for the duration of the subscription, then according to the statutory billing retention periods.

Advertising identifiers (iOS app)

IDFA and IDFV, to measure which ads actually bring people to Sokka. The IDFA is only read if you allow tracking. Details in Article 4.

Technical logs

Errors and processing times, to run the service and diagnose failures. Kept as long as the account exists, and erased with it.

Article 3

What we do not do

  • No data is sold or rented, and none is passed to a data broker. The only information shared for advertising purposes is the measurement described in Article 4 — and only if you have allowed it.
  • This website uses no cookies, advertising or otherwise, and loads no external resources. Signing in to the app relies on a token kept on your device, erased when you sign out. The iOS app, however, embeds TikTok’s measurement kit: see Article 4.
  • No background location. If you allow location access, it is used solely to place you on the map, on the device.
  • Sokka owns no video and provides no playback, no recording and no download. A place card links back to the original post.
  • When you share a TikTok or Instagram post, your use of those services remains governed by their own terms and privacy policies. We only process the posts you choose to submit to us.

Article 4

Advertising measurement

Sokka makes itself known through ads shown on TikTok. To find out which ones actually bring people in — and stop paying for the ones nobody cares about — the iOS app reports four actions to TikTok: your sign-up, your sign-in, an analysis carried through to the end, and the subscription once it has been charged.

What is sent, and nothing else:

  • your email address and your account identifier, hashed (SHA-256) before sending: TikTok never receives the address itself;
  • the device advertising identifiers (IDFA, IDFV) — the IDFA only if you have allowed tracking;
  • the name of the action and its date, the amount of the subscription and its currency, as well as your IP address and your browser for the actions sent from the app;
  • a ticket number, hashed as well, which prevents the same action from being counted twice.

Neither the content of your analyses, nor the video links, nor the places found, nor your lists are shared with TikTok.

You decide. When you first reach the map, iOS asks whether Sokka may track you. Declining takes nothing away from the service: the measurement simply becomes less precise. You can change your mind at any time in Settings › Privacy & Security › Tracking. Legal basis: your consent (GDPR art. 6(1)(a)), which can be withdrawn without justification and without consequence.

This measurement concerns the iOS app only. The website carries no trace of it.

Article 4a

Use of artificial intelligence services

Sokka uses third-party artificial intelligence services to provide and improve the service. Legal basis: performance of the contract (GDPR art. 6(1)(b)).

No data identifying you is sent to them: neither your email address, nor your account identifier, nor your map, nor your other places.

Article 4b

What other users can see

  • Someone who types your exact username sees your username and your first name, unless you have chosen “Make me unfindable”.
  • Your friends, and only once you have both accepted, see your map: your places and the posts they link to. Unless you have chosen “Hide my map”.
  • Your email address and your subscription are never shown to anyone.

You can remove, block or report a friend at any time. Legal basis: performance of the contract (GDPR art. 6(1)(b)); for blocks and reports, the legitimate interest in the security of the service (art. 6(1)(f)).

Article 5

Legal bases

  • Performance of the contract (GDPR art. 6(1)(b)): account, analyses, map, friends, subscription.
  • Legitimate interest (art. 6(1)(f)): security of the service and prevention of abuse.
  • Legal obligation (art. 6(1)(c)): retention of billing records.
  • Consent (art. 6(1)(a)): the advertising measurement of Article 4, and that alone. Can be withdrawn at any time.

Article 6

Recipients and processors

To operate, the service relies on the following categories of recipients:

Other Sokka users

Only what Article 4b describes: username, first name, and your map for your friends.

Hosting

OVH SAS, for the server and the database — France (European Union).

Artificial intelligence services and technical providers

Under the conditions of Article 4a — inside and outside the European Union. No data identifying you is disclosed to them: neither your email address, nor your account identifier.

Maps and address lookup

Providers of map tiles and place directories — European Union / United States.

Sign-in with an Apple or Google account

Only if you choose that sign-in method — European Union / United States.

TikTok

Ad measurement, under the conditions of Article 4 — United States / Singapore. No analysis content is shared with them.

Subscriptions

Apple and Google Play for collecting payment, and our subscription management provider for validating them — United States / European Union.

Transfers outside the European Union are covered by the European Commission’s standard contractual clauses. The named list of processors can be obtained on written request through the help page.

Article 7

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data.

  • In the app: Settings › Profile › Permanently delete my account. See also the Delete my data page.
  • In writing through the help page. Answer within one month.

If a disagreement persists, you may lodge a complaint with the CNIL, the French data protection authority — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or www.cnil.fr.

Article 8

Minors

Below the age of 15, the service is used with the consent of the holder of parental authority.

Article 9

Security

Exchanges are encrypted in transit (HTTPS), passwords are stored as a non-reversible hash, and access to the database is restricted. In the event of a data breach presenting a risk to your rights, you would be informed in accordance with Article 34 of the GDPR.

Article 10

Changes

This policy may change along with the service. The update date appears at the top of the page, and any substantial change will be announced in the app.

← Back to the site