Privacy policy

Provisional version, under legal review. Last updated: 5 October 2026.

Your life story is personal. This policy explains what data we process on the kizunastories.com website and in the Kizuna app (kizunastories.app), why, with whom, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

The Happiness Institute, 50 avenue des Champs-Élysées, 75008 Paris, France. Contact: contact@happiness-institute.com.

2. Data processed on this website

  • Waiting list: first name, last name, email, phone (optional), offer of interest, first name of the person concerned, relationship, message, consent.
  • Contact form: the details and message you send us.
  • Questions to Emma (written or spoken): the text of your questions and the answers. They are kept to improve Emma only if you tick "I agree that my questions to Emma may be used for improvement purposes." No audio recording is kept: your voice is transmitted live for the conversation.
  • Follow-up request after a question to Emma: email, question, channel (written or voice), consent.
  • Emma usage limit (two 5-minute sessions per day): a non-reversible technical fingerprint computed from your IP address and browser, without storing the IP address itself.
  • Internal measurement: anonymous browsing events (page, button used), without cookies or identification.

3. Data processed in the app

  • Account: last name, first name, email address, password (encrypted), chosen offer.
  • Interviews: the written transcription of your conversations with Emma. After choosing a Creator or Family Treasure package in the Kizuna app, you can buy the optional €39 voice preservation service to keep your interview recordings. This option is separate from the voice demo on this website.
  • Story: memories, dates, places, chapters, corrections, photographs you add.
  • Family and relatives: first names, family ties, years of birth, appearance of characters for illustrated books.
  • Assistance: your conversations with Leo.
  • Orders: delivery address, purchase history. Bank details are processed only by the payment provider.
  • Guests: first name and relationship to the person, when you open a shared story.
  • Technical data: connection logs needed for security.

4. Sensitive data and people mentioned

When telling your life story, you may mention your health, religious beliefs or other sensitive information. We process it only because you choose to share it, on the basis of your explicit consent (Article 9.2.a GDPR), and only to write your story. You can ask at any time for a passage to be removed.

Your story mentions other people. This information is used only for your story and shared only with the relatives you choose. Anyone mentioned can exercise their rights with us.

5. Purposes and legal bases

  • Providing the service (interviews, writing, layout, printing, sharing): performance of the contract.
  • Responding to your requests (waiting list, contact, follow-up): your consent.
  • Improving Emma from your questions: your consent, which you can withdraw at any time.
  • Sensitive data you share: explicit consent.
  • Invoicing and accounting: legal obligation.
  • Security, abuse prevention (including Emma's usage limit), internal measurement: legitimate interest.

Your content is not resold to third parties or used for advertising. The paid voice preservation option lets you keep your own recordings.

6. Recipients and processors

  • Hosting of the website, app and database: Lovable and its infrastructure, in the European Union.
  • Voice conversation with Emma: ElevenLabs.
  • Emma's written answers, story writing, the Leo assistant and illustrations: artificial intelligence model providers (including OpenAI, Google and fal.ai), which receive the texts needed for each task.
  • Printing and delivery of books: Lulu Press and its printers.
  • Email sending and payment: [providers to be completed].

Each processor is bound by a contract requiring confidentiality and security. [Exact list and contracts to be checked.]

7. Transfers outside the European Union

Some providers are based outside the European Union, notably in the United States. These transfers rely on the EU-US Data Privacy Framework where the provider participates, or on the European Commission's standard contractual clauses. [To be checked for each provider.]

8. Retention periods

  • Waiting list and contact: 3 years after the last exchange [period to be confirmed].
  • Questions to Emma kept with your consent: [period to be confirmed].
  • Account, interviews and story: while the account is active, then deleted within 30 days of closure [period to be confirmed].
  • Inactive account: deleted after 3 years without login, after notifying you.
  • Invoices: 10 years (legal obligation).
  • Security logs: 12 months maximum.

9. Security

Encrypted connections, access restricted to what is strictly necessary, encrypted passwords, access rules limiting each story to its owner and invited guests.

10. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time, and to set instructions for your data after your death. Write to us at contact@happiness-institute.com. We reply within one month.

You may also lodge a complaint with the CNIL (cnil.fr, 3 place de Fontenoy, 75007 Paris, France).

11. Minors

Accounts are reserved for adults [to be confirmed]. Children's books are meant to be read by children, who do not have an account.

12. Cookies

See the cookie policy.

This English translation is provided for information only; the French version prevails.