Privacy policy

Who we are

Kikinous is a baby registry service operated from France. When this policy says "we", it refers to the Kikinous team - the data controller for your personal data under the GDPR.

What we collect

• Your email and first name, to create your account and send you a sign-in code.
• Your list information: baby's name, due date, items added, notes left by your loved ones.
• Minimal technical data (device type, language) so the app works correctly.
• The product links you paste, just long enough to extract the title, price, and image.

Why we use it

• To let you create, share, and manage your baby registry.
• To let your loved ones reserve a gift and leave you a note.
• To send essential emails: sign-in code, reservation notifications, baby-arrival message.
• To improve the app via anonymous statistics (never your personal content).

What we don't do

• No ads, ever. Your data is not a product.
• No reselling to third parties, no commercial profiling.
• No advertising tracking cookies.

Who we share with

We rely on a few technical providers to run Kikinous (hosting, email delivery, Google sign-in if you choose it). They only access what's strictly necessary and are contractually bound by the GDPR. The current list of subprocessors is available on request.

Cookies and local storage

We only use cookies that are essential to the site: your sign-in session and your preferred language. No pixels, no third-party trackers.

How long we keep your data

Your list stays active as long as you need it. You can delete it at any time from your account settings. Once deleted, your data is erased within 30 days, except where legal obligations apply (billing, security).

Your rights

You can access, correct, export, delete, or object to processing of your data at any time. Just write to us - we'll reply within 30 days at most. You also have the right to lodge a complaint with your local data protection authority (CNIL in France).

Security

Your data is encrypted in transit (HTTPS) and at rest. Access is limited to team members who strictly need it. If an incident affects your data, we'll notify you without delay.