Privacy policy — Hello Câlin

User feedback

We include the section visited, selected country and language. No documents or screenshots. Avoid personal information about your children.

Feedback is kept for 180 days in our operator inbox in Europe. Our team receives a notification without the message content.

So we can reply, if you would like.

1. Who processes your data

Hello Câlin is published by [RAISON SOCIALE] [forme juridique et numéro SIREN le cas échéant], whose registered office is at [ADRESSE]. For any question about your data, or to exercise your rights, write to [email protected].

The publisher’s full legal identity is being registered. The details above are deliberately left pending rather than filled with a name that does not yet exist; they will be completed as soon as it is known.

2. What we process, and why

We do not sell your data and we do not use it to profile you commercially. No content from your documents and no data about your children is passed to ad networks.

3. Your children’s data

Hello Câlin processes information about minors (first name, birth year, school, activities, photos of school documents). This data is entered by you, as a holder of parental authority, for your family use. It is never used for advertising, is not shared with third parties beyond the technical processors listed in point 5, and disappears when the household is deleted.

4. What the artificial intelligence does

When you photograph or import a document, its content is sent to an AI provider to extract dates, tasks and things to bring.

The document and the suggestions drawn from it are stored as soon as they are received. What waits for your confirmation is not the storage: it is the effect on your calendar and your tasks. An imported document stays visible in your Vault until you move it to the bin, even if you confirm none of its suggestions.

These providers process the document to produce the answer. We cannot make a blanket guarantee that nothing is ever reused to train their models: that depends on each provider’s terms, which are listed in point 5 along with the country of processing.

You can use the service without ever importing a document.

5. Who else is involved (processors)

Part of this processing happens outside the European Union, notably in the United States; it relies on the European Commission’s standard contractual clauses. We do not claim that the whole service is hosted or processed in the European Union: the server and the file storage are, email delivery and the artificial intelligence are not.

6. Advertising and cookies

The free plan is funded by advertising. Ads only appear on the public home page and, if you switch it on, at the bottom of the signed-in home screen. They never appear on the Children, Memories, Documents, Calendar or Settings pages, nor on any other private screen, and never for a household on the Family plan or in a trial.

The consent message is presented by Google’s certified platform, compliant with the TCF framework; refusing is available on the very first screen. The list of advertising partners and the detail of the purposes are in that message, which keeps them up to date. Non-personalised advertising is not tracker-free advertising: it is your choice in that message that decides what is stored on your device.

You can change your mind at any time: the “Manage my consent” link is in Settings and in the footer, and reopens that same message.

Cookies used:

• Session cookie: required to keep you signed in.
• Language cookie: remembers the interface language.
• Google cookies and identifiers: stored according to the decision you express in the consent message, and to the Google policy.

7. How long we keep your data

By default, what your household entrusts to the service is kept for as long as the household exists: there is no automatic expiry of documents, memories or stored originals. This duration is an operating setting: if an automatic purge were ever enabled, the application would say so where it applies rather than only on this page.

The Vault bin follows that same setting: by default, a document you move to the bin stays there until you delete it. The bin screen states the rule actually applied.

Deleting an account or a household is deferred by thirty days and can be cancelled during that period. Deleting your account does not erase the shared household: your personal identifiers, your sessions and your connections to third-party services are destroyed, and your contributions still shared with the other parents are kept without your name, address or date of birth. Deleting the household, on the other hand, erases its content for everyone.

Backups are encrypted and kept for thirty-five days under nominal operation. That duration depends on later backups succeeding: after a prolonged outage, an older restore point may remain until the next successful backup.

Technical logs are kept for as long as diagnosis requires. They are capped in size by rotation, but no automatic dated purge is in place today: we would rather write that than announce a duration nothing enforces.

Sign-in links expire in fifteen minutes, and the export archives you request expire in twenty-four hours.

8. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability. The full export of your household’s data and the deletion request are available directly from Settings. For anything else, write to [email protected] : we answer within one month.

You may also lodge a complaint with the French data protection authority, the CNIL ( www.cnil.fr).

9. Security

Traffic is encrypted (HTTPS). Imported documents are scanned by an antivirus before being kept, and file storage is private, encrypted at rest and versioned. Access to your family space requires an authenticated session: knowing a subdomain address is never enough to reach a household’s data.

10. Changes

Any substantial change to this policy will be signalled in the application. The last update date is shown at the top of this document.