Privacy policy

1. Data Controller

C2Care, a simplified joint-stock company (SAS) with a share capital of €558,047.88, registered with the Toulon Trade and Companies Register under number 815 196 332, with its registered office at 101 Avenue Desmazures, 83110 Sanary-sur-Mer, France, acts as the data controller for the personal data collected through its services.

For any questions regarding data protection, you may contact us at: support@c2.care

2. Scope

This Privacy Policy applies to:

• The website www.c2.care
• The platform accessible at app.c2.care
• The C2Care virtual reality application
• Related services (account creation, subscription, support)

3. Personal Data Collected

A. Data collected via the website (www.c2.care)

When using the website, we may collect:

• First and last name
• Email address
• Phone number
• Professional information (if applicable)
• Browsing data through cookies

This data is collected only when voluntarily provided or when using our online services.

B. Data collected via app.c2.care and the C2Care application

When using the platform and VR application, we collect only the data strictly necessary for service operation:

• Email address and login credentials
• Technical data (device type, application version)
• Limited usage data: time spent in environments and feature usage

We do not collect:

• Full conversations with interactive characters
• Biometric data
• Motion tracking data
• Voice recordings

When voice functionality is used, voice input is converted into text to enable service operation. Voice data is not stored by C2Care.

Data collection is strictly limited to what is necessary to provide the service.

C2Care does not sell personal data to third parties.

4. Use of Third-Party Services

Certain interactive features rely on services provided by OpenAI.

In this context:

• Text generated from user interactions may be transmitted to OpenAI to generate dynamic responses
• C2Care does not store conversations
• Data is not used by C2Care for commercial resale

OpenAI acts as a technical processor.

Data hosting is provided by Amazon Web Services (AWS), with servers located in Frankfurt, Germany, within the European Union.

These providers act only on C2Care’s instructions and are contractually bound to ensure data confidentiality and security.

5. Purpose of Processing

Personal data is processed to:

• Create and manage user accounts
• Provide access to the platform and application
• Ensure proper technical operation
• Measure overall service usage (time spent)
• Maintain platform security and prevent abuse
• Respond to support requests
• Comply with legal obligations

6. Legal Basis (GDPR)

For users located in the European Union, processing is based on:

• Contract performance (service delivery)
• Legitimate interest (service improvement and security)
• Consent (where applicable, e.g., marketing communications)
• Legal obligations

7. Data Retention

Personal data is retained:

• For the duration of the active account
• For the period required to comply with legal obligations

Users may request account deletion at any time by contacting: support@c2.care

8. User Rights

In accordance with the General Data Protection Regulation (GDPR), users have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to object
• Right to restriction of processing

Requests may be sent to: support@c2.care

9. Data Security

C2Care implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

10. Intended Audience

C2Care services are intended exclusively for adults.

11. Policy Updates

This Privacy Policy may be updated at any time to reflect legal or technical changes.
The applicable version is the one published on this page.