Privacy Policy
Last updated: 12 August 2026
This Privacy Policy explains how Nono ("we", "us") collects, uses and protects your personal data when you use our app and website (heynono.app and my.heynono.app). We take your family's privacy seriously — Nono is a keepsake, not a data business.
1. Who is responsible for your data
The data controller is:
- [TO COMPLETE — legal name / auto-entrepreneur]
- SIRET: [TO COMPLETE]
- Address: [TO COMPLETE]
- Contact: hello@heynono.app
2. What we collect
| Data | Why |
|---|---|
| Email address (via Google sign-in or email signup) | Create and secure your account |
| Children's first names (entered by you) | Label each child's board |
| The artwork photos you upload | Store and display your private gallery |
| Subscription & billing status | Manage your plan (card details are handled by Stripe — we never see or store them) |
| Basic, anonymous usage analytics | Understand what to improve |
| Technical error logs | Diagnose bugs |
3. Legal bases (GDPR)
- Performance of a contract — to provide the gallery you signed up for.
- Legitimate interest — to keep the service secure, stable and improving.
- Consent — where required (e.g. optional analytics), which you can withdraw at any time.
4. Your images and your children
Your gallery is private to your account. We do not make it public, sell it, or use your children's drawings to train anything. The background-removal (cutout) feature runs on your own device — those photos are not sent to us for processing. The account holder must be an adult (a parent or guardian) acting on behalf of their family.
5. Who processes your data (sub-processors)
| Provider | Purpose |
|---|---|
| Clerk | Authentication / login |
| Supabase | Database (account & gallery metadata) |
| Cloudflare R2 | Image storage |
| Stripe | Subscription payments |
| Vercel | Hosting & anonymous analytics |
| Sentry | Error monitoring |
Each provider processes data only to deliver its function, under its own agreements. Some may process data outside the EU under appropriate safeguards (e.g. Standard Contractual Clauses).
6. How long we keep it
We keep your data for as long as your account exists. If you delete your account, your gallery, images and personal data are permanently deleted. If your subscription ends, your gallery stays viewable and exportable but you can no longer add new pieces — until you delete the account or resubscribe.
7. Your rights
Under the GDPR you can access, correct, delete, or export your data, and object to or restrict certain processing. In the app you can do the two most important yourself, any time:
- Export my data — download everything in your account.
- Delete my account — permanently remove your account and all its data.
For anything else, email hello@heynono.app. You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).
8. Cookies
We use only what's necessary to keep you logged in and to run the service, plus privacy-friendly, anonymous analytics. We do not use advertising or cross-site tracking cookies.
9. Security
Access to your gallery is scoped to your account and brokered server-side. We use reputable infrastructure providers and industry-standard measures. No system is perfectly secure, but we work to protect your memories as if they were ours.
10. Changes
We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, notified to you.
11. Contact
Questions about your privacy? Write to hello@heynono.app.