Skip to content
France · Agentic mobile development

Mobile App Development for France, Built with AI Agents

StatCounter put France's mobile operating system share for September 2026 at 65.39% Android and 34.59% iOS, so an iPhone-first app misses most of the market by that measure. The CNIL's cookie rules also reach trackers inside apps, analytics SDKs included, and its sanctions register lists a €270,000 cookie-related fine on a company publishing a mobile application, dated 29 December 2025.

Curiosive is a software studio in Ankara, Türkiye. We build one React Native codebase for both stores with AI coding agents (Claude Code and Cursor), and no agent output merges until a senior engineer has read it. Engineers own the parts that can hurt a user in France, from token storage to the consent flow and the privacy declarations sent for store review.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

One React Native codebase for France's Android and iOS split

Android's share is close to double that of iOS in StatCounter's September 2026 figures, so both platforms are first-class from the first release. One React Native codebase reaches both stores. Since 31 August 2026, new apps and app updates submitted to Google Play must target Android 16 (API level 36) or higher, so we start new projects on that target. French is France's official EU language, so strings live in translation files from day one rather than being hard-coded and extracted later. Coding agents scaffold screens, navigation, list rendering, form validation and the tests around them, and they draft store listing metadata. A person checks every French string and every store text before submission, because a badly translated permission prompt leaves the user guessing what they are agreeing to.

Article 82 of the loi Informatique et Libertés transposes Article 5(3) of the ePrivacy Directive on device storage, and the CNIL guidelines adopted on 17 September 2020 set the bar. Non-exempt trackers cannot be stored or read before consent, refusing must be as simple as accepting, withdrawing must be as easy as giving consent, accepting the terms of use does not count, and every actor relying on consent must be able to prove it. Audience measurement escapes consent only if all four conditions hold: measurement for the publisher alone, anonymous statistics only, no cross-referencing with other processing, and no tracking across apps or sites. The CNIL also recommends a 13-month cookie lifetime and a maximum of 25 months of data retention, and it certifies no tools, so vendors can only self-assess. In practice we initialise each SDK only after the matching consent choice and store a record of it.

The CNIL mobile app recommendation and store privacy declarations

The CNIL's recommendation on mobile applications (Délibération n° 2024-061 of 18 July 2024) was published in final form on 24 September 2024 and updated on 8 April 2025. It addresses publishers, developers, SDK providers, operating-system providers and app stores, and the CNIL announced a dedicated mobile-app control campaign starting in early spring 2025. Since 1 May 2024 an upload to App Store Connect must declare approved reasons in the privacy manifest for each listed required-reason API the code uses, and Google Play requires a Data safety form that stays accurate, including data collected or shared through third-party SDKs. When an agent adds a dependency, the engineer reviewing that diff updates both declarations in the same change. Keeping the manifest, the Data safety answers and the consent screen in step is review work, not agent work.

Minors, account deletion and age ratings for apps in France

GDPR Article 8 sets 16 as the default age of digital consent, and France lowers it to 15. Under Article 45 of the loi Informatique et Libertés, where an online service relies on consent, a child under 15 consents only jointly with a holder of parental authority, though processing tied to an online contract falls outside that rule. If young users are in your audience, the consent flow needs a parental path. Apple requires apps that support account creation to let users start account deletion inside the app, and Google Play requires an in-app path plus a web link for deletion requests. Apple's updated age ratings add 13+, 16+ and 18+ to 4+ and 9+, with new questions developers had to answer for each app by 31 January 2026 to keep submitting updates. It is worth confirming your audience assumptions with a privacy lawyer before launch.

What coding agents build and what engineers keep

Each agent task arrives with acceptance criteria and limits it may not cross, and the agent proves its change against the type checker, linter and tests first. Engineers keep the boundaries: tokens in the Keychain on iOS and the Keystore on Android, auth refresh, offline and reconnection behaviour, permission prompts, and server-side receipt and entitlement checks. Those checks matter more for iOS apps in the EU, where Apple says its terms effective 1 October 2026 allow alternative payment processing alongside In-App Purchase, at a 20% commission or 10% for program participants and for subscriptions after their first year. Entitlements then have to agree across two payment sources. France sits one or two hours behind Ankara depending on the season, so most of the working day is shared. Our React Native work includes TrendinChat (trendin.chat) and Coffict (coffict.com).

Questions

The things people ask before starting.

How much does mobile app development cost for a startup in France?

Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. An MVP covers auth, a database and the core flow in production. Scope for a French launch adds SDK consent, localisation and store privacy declarations, fixed in writing after a discovery call.

Do analytics SDKs in a mobile app need consent in France?

Usually yes, unless the tool meets all four CNIL conditions for audience measurement: publisher-only measurement, anonymous statistics, no cross-referencing and no cross-app tracking. An SDK that combines its data with other processing or follows users across apps fails those conditions by definition, so it stays inactive until the user agrees.

What is the age of digital consent for apps in France?

It is 15. Below that age, when the app relies on consent, a holder of parental authority must consent jointly with the child, and the CNIL accepts one parent's consent while presuming the other's. Processing tied to an online contract is outside this rule, so the legal basis you choose changes what the onboarding flow has to do.

Should we launch on Android or iOS first in France?

Both at once is usually the better answer with React Native, because one codebase ships to both stores. If you must stage it, Android's larger share in StatCounter's September 2026 figures for France makes it the stronger first store, provided new builds target API level 36 as Google Play has required since 31 August 2026.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones