Privacy Policy

At Carnets, we believe your travel memories are personal, permanent, and should belong exclusively to you. This policy outlines how we collect, use, and protect your data when you use our service.

1. Who we are

Carnets is operated by Couronne de Charlemagne Conseil SAS, a company incorporated in France, 878 760 735 R.C.S. Marseille.
Directeur de la publication: M. Vincent Piche
Address: 1, chemin de Ceyreste, 13260 Cassis, France
Contact: hello@carnets.app

2. Data we collect

We only collect the data necessary to provide our service:

• Instagram Export Data: When you upload your ZIP file, we process the posts, stories, and metadata to generate your journal.
• Email Address: Used for account creation, sending your journal link, and important service updates.
• Payment Information: Processed securely via our payment providers (e.g., Stripe). We do not store your credit card details on our servers.

3. How we use your data

Your data is used solely to generate, host, and allow you to edit your Carnet.

• We never sell your personal data.
• We never use your content to train generative AI models.
• We never share your content with third parties for advertising purposes.

4. AI Processing

We use the Anthropic (Claude) API to help polish captions and extract location data. This processing is governed by Anthropic's commercial terms, which state that data submitted via their API is not used to train their models. You can refer to the Anthropic API Terms for more details.

5. Data Retention

• Raw Uploads: Your uploaded Instagram ZIP file is automatically deleted from our processing servers within 7 days of upload.
• Account Data: We retain your generated Carnet and account details as long as your account is active, to allow you to access and share your memories.

6. Your Rights (GDPR)

As a European-based service, we fully respect your rights under the GDPR:

• Access & Portability: You can request a copy of the data we hold about you.
• Rectification: You can edit your data directly in the app.
• Erasure ("Right to be forgotten"): You can delete your account and all associated Carnets at any time.

To exercise these rights, please contact us at hello@carnets.app.

7. Cookies

Carnets uses a small number of cookies that are strictly necessary for the service to function. We do not use tracking cookies, advertising cookies, or any technology that follows you across other websites.

The cookies we set are:

• Session cookie — set when you create an account and sign in. It keeps you authenticated so you don't have to log in on every visit. It expires when you sign out or after a period of inactivity.
• Upload token — a temporary identifier set when you upload an Instagram export, before you create an account. It links your upload to your account when you sign up. It is deleted immediately after your account is created, or expires automatically after 24 hours.
• Bot protection — a short-lived cookie set by Cloudflare Turnstile to verify that uploads are initiated by a human. It contains no personal information and is not used for tracking.

Because these cookies are strictly necessary for the service to operate, they do not require your consent under GDPR. You can disable cookies entirely in your browser settings, but the service will not function correctly if you do so.

We do not use Google Analytics, Meta Pixel, or any third-party advertising or analytics cookies.

8. Data Residency

All primary user data is stored on secure servers located within the European Union (Supabase in the Paris region, Cloudflare EU nodes).