Privacy policy
Version 1.1 · Last updated: 8 November 2026
Your child's health information is personal and deserves the highest care. This policy explains, in plain words, what Carnet vivant does with your data and your child's data, and what rights you have.
Carnet vivant is a prototype. It is not yet hosted by a certified health-data host (HDS). You decide what you upload: if you prefer, start with a sample page or leave out details such as your child's surname.
1. Who is responsible for your data?
Soo Yeon LEE, publisher of carnetvivant.fr, is the data controller. Contact: contact@carnetvivant.fr. No data protection officer has been appointed.
2. What data do we collect?
- Your account: email address, password (stored encrypted), language
- Your children: first name and date of birth
- Health records you add: photos of carnet de santé pages, prescriptions, doctor's notes or vaccine stickers, and the information read from them (vaccines, growth measurements, medications, doctors' names, dates)
- Co-parents you invite: their email address and access rights
- Feedback and surveys: ratings, comments, and your email only if you choose to give it
- Proof of consent: the date, time and version of the consent you gave
- Usage statistics: anonymous counts of actions (for example, number of uploads), with no name, identifier or health content
3. Why do we use it, and on what legal basis?
| Purpose | Data | Legal basis | Kept until |
|---|---|---|---|
| Create and manage your account | Email, password, language | Performance of the contract (GDPR art. 6.1.b) | You delete your account or 3 years of inactivity |
| Store, read and search your child's health record | Children's details, photos, extracted entries | Your explicit consent (GDPR art. 9.2.a and 6.1.a) | You delete the records or your account or 3 years of inactivity |
| Share a record with a co-parent | Co-parent's email, access rights | Your consent (GDPR art. 9.2.a and 6.1.a) | You remove access or delete your account |
| Collect feedback and surveys | Ratings, comments, optional email | Your consent (GDPR art. 6.1.a) | You delete your account |
| Prove that consent was given | Date, time, version | Legitimate interest in proving compliance (GDPR art. 6.1.f) | One year after your account is deleted |
| Improve the prototype | Anonymous usage counts | Not personal data | End of the prototype |
We never sell your data, never use it for advertising, and never use it for any purpose other than those listed here.
4. Do you have to give this data?
An email address is needed to create an account. Health records are needed for the service to work. You can stop at any time.
5. How is AI used?
When you upload a photo, it is sent to an AI service (OpenAI, through our host Lovable's AI Gateway) to read the handwriting and stickers. The result is shown to you as a suggestion. Nothing is saved until you check it against the original and confirm it. The AI makes no decision about you or your child.
6. Who receives your data?
- Lovable (Lovable Labs Sweden AB, Stockholm), which hosts the application
- Supabase, Inc., which stores the database and files for Lovable, in the European Union (Ireland)
- OpenAI, L.L.C. (United States), through Lovable's AI Gateway, which reads uploaded photos
- Co-parents you choose to invite
- If you email contact@carnetvivant.fr, your message is forwarded by OVH to the publisher's email service (Google)
No one else has access, unless required by law.
7. Does your data leave the European Union?
Your account data, children's records and photos are stored in the European Union (Ireland). Some providers, such as OpenAI (the AI service) and Lovable's own platform services, are based in the United States and may process data there. In that case, transfers rely on the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. You can ask for details at contact@carnetvivant.fr.
8. Children's data
Accounts are for adults who hold parental authority over the children they add. One parent's agreement is enough to create a child's record; the other parent may object or ask for deletion by writing to contact@carnetvivant.fr. When your child turns 18, they can ask to receive or delete their record.
9. Your rights
You can access, correct, delete, restrict, receive a copy of (portability) or object to the use of your data. You can withdraw your consent at any time, as easily as you gave it, by deleting a child's records or your account in your account settings. Withdrawal does not affect what was done before. Under French law, you can also give instructions about your data after your death.
You can download a copy of your data as a PDF or CSV file from the app.
Write to contact@carnetvivant.fr. We reply within one month.
If you think your rights are not respected, you can complain to the CNIL: www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
10. Security
Connections are encrypted (HTTPS), passwords are stored encrypted, and each account can only access its own records and those shared with it. Because the prototype is not hosted by a certified health-data host, please upload only what you are comfortable entrusting to it. If a data breach affects you, we will inform you and the CNIL as the law requires.
11. Cookies and usage statistics
We only use the cookies needed to keep you signed in. We count actions in the app anonymously, with no identifier, no health content and no advertising tracker.
12. Changes to this policy
Each version has a number and a date. If we make an important change, we will tell you in the app or by email before it applies.