Data controller
KOWEEK GLOBAL, 33 A rue de la République, 76240 Le Mesnil-Esnard, France (see the legal notice). For any question about your data: hello@pizan.app.
What we keep
- Your account: first name, email address, password (stored hashed, never in plain text), Google or Apple accounts if you sign in with them, settings (daily reminder, notifications).
- Your content: photos (the original is kept as is) and their versions, file information (date taken and, if present, GPS location), captions, answers, stories and their versions, people's profiles, comments and additions from your circle.
- Voice: for dictation and spoken conversation, your voice is streamed live to the speech recognition service. We keep the text, never the recording. What you leave behind a QR code yourself (a voice message, a video) and the voices kept during a Pizan TV evening, with everyone's consent, are kept like your photos, until you delete them.
- Usage log: the choices you make in Pizan (a layout, a style, a suggestion accepted or declined), without the content of your pages, to improve what Pizan suggests. Kept 13 months, deleted with your account. It is not an audience measurement tool: nothing leaves Pizan.
- Your circle: invited people, their permissions, requests to join.
- Purchases: plan, invoices, usage (stories written, conversation minutes), delivery address for a book. Card details stay with Stripe.
- Security: technical logs (IP address, date, errors) kept for a short time to protect the service.
Pizan performs no facial recognition. When you say who is in a photo, it is you who says so: nothing is inferred from faces.
Why, and on what basis
- Providing the service you ask for (album, writing, layout, book, account emails): performance of the contract.
- Invoicing and accounting: legal obligation.
- Securing the service and preventing abuse: legitimate interest.
- Daily reminder by notification or email, waiting list: your consent, which you can withdraw at any time in "My account" or by email.
Who has access
Your pages are private by default: you choose to share them with chosen people, with your whole circle, or to make a book readable online. On Pizan's side, only the providers below process data, on our behalf and only for the feature requested:
- Render (app and database hosting, servers in Frankfurt); Cloudflare R2 (photo storage, EU jurisdiction).
- Resend (sending emails, Ireland); Google Workspace (our hello@pizan.app mailbox, if you write to us).
- Twilio (routing phone calls to our voice assistant, United States, only if you call us).
- Anthropic (reading photos, writing and rewriting stories, transcribing documents); Mistral AI (writing and rewriting stories, reading a photo and asking questions: the photo and your answers; servers in Europe); OpenAI (spoken conversation, dictation, the phone voice assistant, numeric fingerprints of short notes from your stories to find memories that resemble each other, some cover images, writing and rewriting stories, reading a photo and asking questions, as a fallback for a plan's writing, when the first provider does not respond (the photo and your answers)); Google (Gemini: photo studio, retouching part of a photo, illustrations, spot-the-difference game, only when you ask); Higgsfield (photo enhancement and the "Bring to life" video, only with the "Enhance" and "Bring to life" buttons; for "Turn it into a drawing", Higgsfield passes the photo on to xAI); xAI (Grok Imagine, via Higgsfield: a watercolour or pencil drawing of a photo, only with the "Turn it into a drawing" button); Photoroom (background removal, only with the "Cut out" button, images not retained).
- Geoapify and komoot's Photon (Germany, OpenStreetMap data) (place search and routes: the words typed and coordinates); Visual Crossing (weather for a date and place: coordinates and date only).
- Stripe (payment and invoices); our printing partner (book files and delivery address, only when you order a book); Merci Facteur (France: printing and posting your postcards, the card and the recipient's address, only when you send a card).
- Google and Apple (only if you sign in with them or import from Google Photos / Drive); Apple, Google or Mozilla push services (only if you turn on reminder notifications).
- With no personal data at all: Wikimedia Commons, Internet Archive, Europeana, World Bank, BnF, Open Food Facts (references, archives and products).
The site's fonts and display tools are served by Pizan itself; only the map backgrounds on screen come from OpenFreeMap, and your browser then sends it your IP address. No data is sold or used for advertising, and we do not use your content to train artificial intelligence models.
Transfers outside the European Union
Some providers are based in the United States (notably Anthropic, OpenAI, Google, Stripe, Visual Crossing, Photoroom, Twilio). These transfers rely on the EU–US Data Privacy Framework for companies that have joined it, or on the European Commission's standard contractual clauses.
Phone calls
When you call +33 1 88 73 22 44 (or +1 888 667 4926, toll-free from the US and Canada), your call is answered by Louise, an AI voice assistant, who tells you so at the start of the call. She answers questions about Pizan, looks up the status of an order from its reference or from the email address you spell out, and can email you the steps to follow while you are still on the line.
- What we keep: your number (unless it is withheld), the number you called, the country and language inferred from your number, the date, how long the call lasted and a written transcript of the conversation; if you ask for an email, the address and first name you give. Pizan does not record the audio of the call.
- Why: to deal with your request and follow it up through our customer service. Legal basis: performance of a contract, or steps taken at your request before you buy, and our legitimate interest in following up the requests we receive.
- How long: 30 days. After 30 days, the call record, its transcript and your number are deleted, including from the customer service request that each call opens. The request itself stays, without them, so we can follow up: its reference, the email address and first name you gave, and any email we sent.
- Providers: Twilio (United States) carries the call; OpenAI (United States) gives the assistant her voice and transcribes the conversation; for questions about Pizan, the assistant consults the same AI as our help page; Resend sends the email. Transfers to the United States rely on the Data Privacy Framework or on standard contractual clauses (see above).
- Deletion: you can ask us at any time to delete your calls (record and transcript) by writing to hello@pizan.app with the number you called from and the date.
Google Photos and Google Drive
If you choose to import photos from Google Photos or Google Drive, Pizan uses Google's official pickers with limited permissions: photospicker.mediaitems.readonly (only the photos you pick in Google Photos) and drive.file (only the files you pick in Google Drive). Pizan does not see or browse the rest of your library.
The photos you pick are copied into your Pizan book, to be shown, organised, laid out, printed if you order the book and, if you use these features, analysed to ask you questions and write the story. The access granted by Google is not kept: it is used for the copy, then the picking session is deleted. Nothing is changed or deleted in your Google account. This data is not sold, not used for advertising, not used to train artificial intelligence models, and nobody looks at it except as you request, as required by law, or for the security of the service.
Pizan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How long
- Account and content: as long as your account exists. When the account is deleted, they are erased; technical backups disappear as they rotate.
- Invoices and accounting records: 10 years (legal obligation).
- Phone calls: 30 days for the call record, its transcript and your number, everywhere, including in the customer service request (see “Phone calls”).
- Customer service requests (emails, messages, attachments): erased together with your account if you delete it, and, while your account is active, 2 years after the last message.
- Sign-in codes: 10 minutes. Waiting list: until Pizan opens for you, or until you ask.
Deleting your account
In the app: Account, then Delete my account. Without the app: the Delete my account page, with a code sent by email. Your account is closed right away; for 30 days you can download your content or cancel by signing in again; then your account and everything you added are erased, including in your family's books, unless you choose to leave it to them. Only invoices and orders are kept (10 years, legal obligation), along with the videos and voices behind the QR codes of an ordered book: the printed book keeps playing them, as the terms of sale promise.
Your rights
You can access your data, correct it, have it erased, receive a copy in a common format (portability), restrict or object to processing, and withdraw any consent at any time. Under French law you can also leave instructions on what should happen to your data after your death: this matters for a memory album, so tell us who should look after it. Write to hello@pizan.app; we reply within one month. You can also complain to the French data protection authority (CNIL, cnil.fr) or to the authority in your country.
People in your stories
Your stories are about other people, some of them no longer alive. Write about them with respect; anyone who recognises themselves in an album can ask us to remove what concerns them, and we will discuss it with the page's author.
Children
- Accounts from age 15. You need to be at least 15 to create a Pizan account, and you confirm it with the checkbox when you sign up; we never ask for your date of birth to check it. Pizan is not directed at children under 13 and does not knowingly collect their personal information (in the United States, this is what COPPA requires).
- Younger children join through a relative's link. A child can take part in a relative's album without an account of their own, through the link that relative sends: answering a question, sharing a memory. The relative invites them with a parent's agreement and remains responsible for what is shared.
- Children in photos and stories. Births, holidays, birthdays: children are everywhere in family albums. Whatever shows them stays private unless you decide otherwise: only the people the album or book is shared with by name can see it. Pizan never uses it for advertising or to train AI models. Before showing a child beyond the family (a book put up for sale, a public post), ask their parents, and the child too once they are old enough to have a say.
- Removing and erasing. A parent can ask us at any time to remove a photo or story about their child, or to close an account opened by a child under 15: write to hello@pizan.app and we will do it straight away. Anyone can ask us to erase what was put online about them when they were a child (Article 17 of the GDPR, and of the UK GDPR).
Cookies
Pizan uses necessary cookies: a session cookie to keep you signed in, a language cookie and a country cookie on the home page and, if you arrive through a referral link, a cookie that keeps it for 30 days. Your browser also keeps a few display preferences. Pizan also counts its visits itself, with no cookie or identifier: each page view is counted by day, language and country, without keeping your network address; the page you arrived on stays in your browser for the length of the visit, so we know which pages lead to sign-ups.
No advertising tools, so there is no consent banner.
Security
Encrypted connections (HTTPS), hashed passwords, signed access links, photos served only to authorised people, backups. If a data breach put you at risk, we would tell you.
Changes
Each version of this page is dated. If we make a significant change, we will email you.