Privacy policy

The short version

• We never collect data about your child. The generator's inputs are designed to stay anonymous — no names, photos, addresses or medical records.
• An account is an email + a nickname + a password. That's it.
• No ads, no data selling, no cross-site tracking.

What we process

Account data (email, nickname, hashed password) to operate your account. Content you create (generated sequences you save, forum posts) to provide the service. Technical data (IP-based quotas, security logs) to keep the service free and safe. Analytics only with your consent (the cookie banner), used in aggregate to improve the product.

“My binder”: documents and deadlines

The deadlines, meetings and documents you put into « My binder » (plans, decision letters, assessments, clinical reports) are stored on our servers, so that your binder follows you from one device to the next and does not disappear if you clear this site’s data. That is how the feature works: if you would rather these documents were not hosted, do not use « My binder » — the rest of the site works without it.

• What it is. These documents are health data. Filing one counts as accepting that hosting; the date of your first upload and the version of this page in force at that moment are recorded. You keep the right to delete all of it at any time, below.
• Where it is. Amazon Web Services, Paris region (France), for every user wherever they live. Files are encrypted at rest with a dedicated key, and every access is logged.
• Who can reach it. Your binder is tied to your account. Nothing in it is public, and no share link exists — not even a temporary one. When you hand documents to a school or an agency, you print them or download them yourself; we never send anything on your behalf.
• Who else sees it. The host, and nobody else. No content of your binder is sent to a third party, and none of it reaches an artificial-intelligence model — not to read your documents for you, not to summarise them, not to train anything. Competing products parse your plan with an AI; we do not, and we do not intend to.
• Minimisation. The filename you upload never appears in the name of the stored object, and the type of document appears in no log. We ask for no surname and no date of birth: the product has no use for either.
• Deleting. Deleting one document moves it to a recoverable bin. Deleting the whole binder really erases the files and the data, and the result is shown to you.
• Legal note for US readers. We are not a health care provider, a health plan or a clearinghouse, so HIPAA does not apply to us and we do not claim to be “HIPAA compliant” — that claim would be meaningless here. FERPA binds schools, not us. What does apply is the GDPR, which we apply to every user regardless of where they live, plus the breach-notification duties described below.

Where it lives

PictoExpress is operated from France and hosted on Amazon Web Services in the European Union (Paris region). Your data is processed under the EU General Data Protection Regulation (GDPR), which applies to all our users regardless of where they live — including US users, who benefit from the same rights.

Your rights

You can access, correct, export or delete your data at any time. Deleting your account (account settings) removes your personal data; forum posts are anonymized. For any request: contact@pictoexpress.com. EU residents may also contact the French supervisory authority (CNIL).

Children's privacy (COPPA note)

PictoExpress is a tool for adults (parents and caregivers). We do not knowingly collect personal information from children under 13, and the product is deliberately designed so that no child's personal information is needed to use it.

AI processing

The text you type into the generator is sent to Microsoft Azure OpenAI to produce your sequence and its illustrations. Azure OpenAI is contractually prohibited from using what we send it to train or improve any model. Type only anonymous descriptions — the interface reminds you never to include identifying details.

We never use your data commercially

We never sell, rent or license your data. We do not use it for advertising, targeted marketing or profiling, and we never use it to train AI models. No advertising trackers run on this site.

How long we keep things

Your data is used only to provide and improve this educational service, and for no other purpose. Your account and your saved library are deleted when you delete your account. IP addresses used for rate limiting are kept 24 hours and error logs 30 days. Our content delivery network keeps an access log for 30 days — date, requested address, response code, declared browser or bot, and IP address — used solely to measure how search engines and AI crawlers reach the site. It is never linked to an account, never used for profiling, and is deleted automatically. Generated sequences are kept in a private internal archive, used only to improve the quality and safety of the generator, and are automatically deleted after 24 months. You can ask us to delete yours sooner at contact@pictoexpress.com.

Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Passwords are hashed, never stored in clear. Access follows least privilege, with multi-factor authentication required on administrative accounts. Everything is hosted on Amazon Web Services in the European Union (Paris region).

If something goes wrong

We maintain a written incident response plan. If personal data is ever breached, we notify the people affected, and any partner organization concerned, without undue delay and within 72 hours of confirming the incident — along with what happened, what data was involved, and what we did about it. EU residents can also report an incident to the CNIL.