Privacy policy
Version 1.0 of October 21, 2026 · illustrative prototype content, to be validated by a lawyer.
Illustrative text, currently being legally validated.
Controller
Xweto (a company currently being registered), publisher of Dibou, Nice. Data protection officer: dpo@dibou.app.
Data
Parent: email, first name, role. Child: first name or nickname, age, avatar. Content: drawings, voice, loved ones. Orders: delivery addresses, invoices.
Legal bases
Performance of the contract; parental consent for children’s data (Art. 8 GDPR); legal obligation for invoicing; consent for audience measurement.
Retention periods
Account: as long as it exists. Invoices: 10 years. Audience data: 13 months. Contact messages: 12 months after closure.
Recipients
Only the loved ones you authorize, our hosting, printing and delivery processors, and Apple for in-app purchases.
Your rights
Access, rectification, erasure, restriction, objection, portability, withdrawal of consent, post-mortem directives. You may lodge a complaint with the CNIL.