YOUR DATA, EXPLAINED SIMPLY
PRIVACY POLICY
This policy explains which data Kandimo uses, why it is needed, and how you stay in control.
1. Data controller
Kandimo is published under the 4T Studio trade name. FamilHi, established in France, is the data controller.
3 rue de La Bruyère, 30133 Les Angles, France
contact@4t-studio.com
2. Adult account and artists
Kandimo is intended for people aged 18 or over. The account holder personally uses the app to transform and organise their family’s creations.
Artists are optional labels created and managed by the adult to organise creations, XP, and badges. They are neither accounts nor sessions intended for minors. Kandimo requests no age band.
Kandimo displays no advertising, performs no advertising profiling of children, and sells no personal data.
3. Data we use
- Adult account: email address, account identifier, display name, adult confirmation, acceptance of the Terms, and sign-in method.
- Optional artists: first name or nickname, avatar, colour, progress, XP, and badges.
- Creations: selected drawing or photo, creative prompt, style, normalised original, generated image, and thumbnail.
- AI permission: decision, notice version, language, platform, and date. This history contains no image, prompt, or artist.
- Optional voice dictation: the device’s speech-recognition service converts a short phrase into text. Kandimo stores no audio recording.
- AI result reports: generation identifier, predefined reason, status, and processing dates, with no free-text comment or copied content.
- Purchases: transaction identifier, product or subscription, status, and credits. Kandimo receives no payment card data.
- Technical data: request identifiers, generation status, timestamps, limited errors, IP address, and infrastructure security information.
- Support: email address and information the user chooses to send.
Images, portraits, and artificial intelligence
Before storage and transfer, Kandimo re-encodes the image as a JPEG from its pixels to remove EXIF data, GPS location, phone model, and capture date.
The Vertex AI request contains the normalised image, prompt, style, and safety instructions. It does not contain the email, account identifier, artist name, or an age band.
A photo may show a person. Kandimo performs no recognition or identification. Avoid full names, addresses, schools, and other visible or written personal information.
4. Why and on what basis?
- Provide the requested service: account, generation, gallery, artists, progress, credits, and purchases.
- Send a creation to Vertex AI only after the adult’s explicit permission, which can be withdrawn from My Account.
- Secure Kandimo through authentication, fraud prevention, quotas, content safeguards, security logs, and diagnostics.
- Handle reports and support, and comply with legal and accounting duties.
Depending on the activity, 4T Studio relies on providing the requested service, permission obtained before AI sharing, legal duties, or its legitimate interest in securing Kandimo.
5. Technical providers and transfers
- Supabase: authentication, database, and private creation storage.
- Google Cloud: Cloud Run backend in Europe and Vertex AI generation in the eu European multi-region.
- Vertex AI: Kandimo does not enable request-and-response logging; isolated in-memory cache may last up to 24 hours.
- RevenueCat, Google Play, and the App Store: products, purchases, restoration, and subscriptions.
- Google and Apple: sign-in when the user chooses either provider.
- System speech recognition: optional voice processing according to the device and its settings.
- OVH: public website hosting. Cloudflare: Turnstile protection for the deletion form.
Some providers may process data outside the European Economic Area. Such transfers rely on applicable legal mechanisms and the provider’s contractual commitments.
6. Retention periods
| Data | Period |
|---|---|
| Account and artists | For the life of the account, then deleted at the user’s request. |
| Creations and gallery | Until the creation, relevant artist, or account is deleted. The original and result are then deleted and technical job data is scrubbed. |
| Vertex AI cache | Up to 24 hours in an isolated in-memory cache. |
| Google Cloud logs | 30 days for ordinary logs; 400 days for Google Cloud’s required administration logs. |
| Transactions and purchase records | Required records may be retained for up to 10 years, with minimisation or anonymisation. |
| Support requests | 2 years after closure; attachments deleted within 90 days unless specifically needed. |
| AI reports | Up to 24 months, without a copy of the image, prompt, or artist. The link to a deleted creation is removed. |
Deleting an artist removes their creations and progress without deleting the account, other artists, credits, or subscription. Deleting the account removes its identity, artists, and creations. A subscription must be cancelled separately in the store.
7. Your rights
You may request access, correction, deletion, restriction, or portability of your data and object to certain processing by writing to contact@4t-studio.com. You can delete an artist or your account in Kandimo; the public page remains available without reinstalling the app.
A complaint may also be submitted to the CNIL, the French data protection authority.
8. Security and updates
Communications use HTTPS, files are private, and access is restricted by role. 4T Studio regularly reviews these safeguards and may update this policy as Kandimo or its providers evolve.
Version — 3 September 2026