Privacy Policy

Data controller

Tom Vallat, sole trader (French "micro-entreprise"), 29 avenue Victor Cresson, 92130 Issy-les-Moulineaux, France. Contact: contact@contalya.com.

Data we collect

• The photo(s) of the child provided to create their illustrated character.
• The child's first name and age bracket.
• The narrative choices made by the parent (theme, villain, plot, or the life situation to accompany, plus an optional personal detail).
• The customer's email address, and their postal address for printed orders.

What we do with the child's photo

The photo is never saved on our servers: it's transmitted in memory, for the duration of processing, to our technical provider's image-generation API (Google Gemini), and is kept nowhere once the book is generated. It's never used to train any AI model, ours or a third party's.

Transfer outside the European Union. Image processing runs through the Google Gemini API, a service provided by Google. This processing may involve a data transfer to servers located outside the European Union, governed by the European Commission's standard contractual clauses or an equivalent mechanism under the GDPR. On our end, we keep no copy of the photo beyond the immediate processing of the order.

Purposes and legal basis

Data is processed to fulfil the order (generating and delivering the book), on the basis of contract performance. Processing a minor's photo additionally relies on explicit consent collected from the parent or legal guardian before each generation.

Retention period

The source photo is never stored. The generated book (text and illustrations) and order data are kept for as long as needed for the business relationship and legal accounting obligations, then deleted.

For a digital-only (PDF) order placed from France, the print-ready file of the already-generated book (never the original photo) is kept for up to 30 days, to allow ordering the printed edition without providing a photo again or regenerating the story, after which it is deleted.

Your rights

Under the GDPR, you have a right of access, rectification, erasure, objection, and portability over your data, as well as the right to lodge a complaint with the CNIL (France's data protection authority, www.cnil.fr) — or with your own country's equivalent authority. To exercise these rights, write to contact@contalya.com.