Legal Notice Mobile app

Coffre-Fort mobile application (Android and iOS) · Last updated: 14 October 2026

Publisher and definitions

The Coffre-Fort application is published by the company INDUSTEAM SA, a public limited company under Luxembourg law, registered with the Luxembourg Trade and Companies Register (RCS) under number B 48582, with its registered office located at Immeuble Blackstone, 202 Z.A.E. Wolser A, L-3225 Bettembourg, Luxembourg.

The term "Application" refers to the mobile or tablet application for Android and iOS named "Coffre-Fort".

The term "Industeam Server" refers to the software component of the Coffre-Fort suite with which the Application communicates.

The term "User" refers to any person who installs and uses the Application.

These rules explain what data is processed from the Application, why, how it is used, and to which third parties it may be transmitted. They comply with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Luxembourg law of 1 August 2018 on data protection.

Data controller

INDUSTEAM SA is responsible for the processing described in this document. The data you save in the vault itself is stored on the Industeam Server to which the Application connects; its processing is subject to the rules of the organization operating that server.

Personal data

The Application does not collect any personal data that directly identifies you: no name, postal address, phone number, email address, or contact list.

The Application does not use any advertising, audience measurement, or profiling tools.

Communication-related data

When the Application communicates with an Industeam Server via telecommunication networks, technical connection data is automatically generated, including your device's IP address.

The Industeam Server does not store this data. It is used solely to establish communication between the Application and the Server.

Permissions requested by the Application

Crash reports

The only information shared with a third party occurs in the event of an Application crash. These reports are necessary to fix anomalies. They are sent to the Firebase Crashlytics service, provided by Google Ireland Limited.

Information transmitted

• the device model;
• the Android or iOS version;
• the version of the Application;
• the mobile operator;
• the type of active connection (Wi-Fi or mobile network);
• the technical state of the device at the time of the crash (available memory and disk space, orientation);
• the crash log indicating which part of the code the error occurred in;
• a random installation identifier, which allows crashes to be grouped without identifying you.

No personally identifiable information is included in these reports, and the contents of your vault are never included.

Data sharing and transfers

We do not sell, trade, or rent your information to third parties.

Google, as the provider of Firebase Crashlytics, may process crash reports on servers located outside the European Union, particularly in the United States. These transfers are governed by the European Commission's standard contractual clauses and the EU–U.S. Data Privacy Framework. Google's privacy policy can be viewed at policies.google.com/privacy and Firebase's at firebase.google.com/support/privacy.

The Application also relies on components provided by other publishers, notably the Android and iOS operating systems. Their own privacy policies apply to these components.

Security

Communications between the Application and the Industeam Server are encrypted (HTTPS / TLS protocol). Access to the Application can be protected by your device's biometric lock. We recommend that you keep your device's system and the Application up to date.

Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict the processing of, and object to the use of your personal data. As the Application does not collect data that identifies you, we may ask for additional information (such as the approximate date of a crash) to process your request.

To exercise these rights, please use the contact form or reach out to INDUSTEAM SA using the details below. We will respond within one month.

You may also lodge a complaint with the National Commission for Data Protection (CNPD), 15 boulevard du Jazz, L-4370 Belvaux, Luxembourg, cnpd.public.lu.

Changes to these rules

We may update these rules, particularly in the event of changes to the Application or regulations. The date of the last update is shown at the top of this page. In the event of a significant change, you will be notified within the Application.

Contact

For any questions regarding these rules or your data: