Privacy Policy

Last updated: June 13, 2026

This policy describes how your personal data is processed when you use:

the showcase website accessible at dahlikit.fr and dahlikit.com (hereinafter “the Website”);
the pti’planning software, in its “Discovery” (free) and “Sérénité” (paid) versions, for computers as well as the companion mobile application (hereinafter “the Application”).

It is drafted in accordance with Regulation (EU) 2016/679 (“GDPR”) and the amended French Law No. 78-17 of January 6, 1978 (“Informatique et Libertés”).

1. Who is responsible for your data?

The data controller for the data collected via the Website and the Application is:

Dahlikit, a sole proprietorship operated by 〈RAISON SOCIALE EI〉
Registered under number SIREN 〈SIREN / SIRET〉, RCS of 〈RCS + VILLE〉
Registered address: 〈ADRESSE POSTALE〉
Contact: contact@dahlikit.com

Dahlikit has not appointed a data protection officer (DPO), as this appointment is not mandatory with respect to its activity. For any questions regarding your data, please write to contact@dahlikit.com.

2. Our guiding principle: local operation by default

pti’planning has been designed according to the principle of privacy by design. By default, the data you enter into the Application (child records, first names, photos, schedules, daily reports) are saved only on your computer. They are neither hosted, nor accessed, nor backed up on Dahlikit’s servers.

There are, however, limited exceptions, specific to certain features you trigger voluntarily, where precise data leaves your device: AI help, weather, sending reports, mobile sync, and license validation. They are described in detail in Article 4. Outside of these features, the Application runs 100% offline.

Allocation of responsibilities

When you enter information in the Application concerning the children you care for, you act as the data controller for this data within the framework of your professional activity as a childminder. When this data transits through an online feature of the Sérénité plan, Dahlikit and its providers act as data processors, meaning they process this data solely to execute the feature you requested and strictly according to your instructions.

3. Data processed via the Website (dahlikit.fr / dahlikit.com)

Processing	Data concerned	Purpose	Legal basis	Retention
Navigation	IP address, connection data and technical logs	Provide and secure the Website, prevent abuse	Legitimate interest (art. 6.1.f)	Up to 12 months
Contact form / email (contact@, bonjour@)	Name, email address, message content	Answer your request, request a demo	Pre-contractual measures / legitimate interest (art. 6.1.b and f)	3 years after last contact
Group license request (RPE, communities)	Identity, structure, contact details	Establish a quote and commercial follow-up	Pre-contractual measures (art. 6.1.b)	3 years after last contact

The Website uses no advertising trackers or invasive audience measurement tools (see article 6).

4. Data processed via the pti’planning Application

4.1. Data entered into the Application (all versions)

Child records, first names, dates of birth, hours, rituals, equipment photo library, schedules, daily moods, tracking sheets.

Storage: exclusively local, on your computer.
Dahlikit has no access to it and keeps no copy.
Backing up this data is your responsibility; you can export, print, or delete it at any time.

4.2. Purchase and management of the Sérénité subscription

Payments and subscriptions are processed by Stripe (Stripe Payments Europe, Ltd., Ireland), a PCI-DSS certified payment provider. Stripe collects and directly processes payment data (name, email, billing address, credit card details) to execute the transaction. The vendor is Dahlikit, which issues the invoice; Dahlikit is subject to the VAT exemption regime (VAT not applicable, art. 293 B of the French General Tax Code).

Dahlikit never receives your credit card details. Dahlikit only receives information necessary to issue and track your license (email, transaction ID, subscription status).
Purpose: execution of the subscription contract, delivery of the license key, support, accounting and tax obligations.
Legal basis: execution of the contract (art. 6.1.b) and legal obligation for invoicing (art. 6.1.c).
Retention: duration of the subscription; accounting documents are kept for 10 years (legal obligation).
Processing by Stripe: see its privacy policy on stripe.com.

4.3. Features assisted by artificial intelligence (Sérénité plan only)

The following features require an internet connection and transmit data to an AI provider in order to generate a result:

tailored activity creation (based on children’s age, your themes, your equipment);
“another idea?” button;
equipment recognition from a photo;
filtered web search for ideas.

Transmitted data: the content of your request (e.g. ages, themes, equipment type) and, for recognition, the photo you submit.

Purpose: generate the requested suggestion or recognition.
Legal basis: execution of the Sérénité contract (art. 6.1.b); the processing is triggered solely at your initiative.
Providers: Dahlikit and Google (Gemini API from Google LLC, United States). Operation: to avoid having to provide your own access key, these requests transit through a secure relay operated by Dahlikit (hosted on Vercel), which transmits them to Google with Dahlikit’s access key. Dahlikit acts here as a data processor: the relay only routes your request and the response, without permanently storing the content or your photos. Processing by Google is governed by the Gemini API terms; according to these terms (paid API), transmitted data is not used to train Google’s models.

Important — photos and children: the recognition feature is for equipment. You remain responsible for the photos you submit. We recommend that you do not transmit any photos allowing the identification of a child through this feature.

4.4. Integrated weather (Sérénité plan)

To suggest activities adapted to the weather, the Application queries an online weather service.

Transmitted data: an approximate location (municipality or zip code). No child data is transmitted.
Purpose: display forecasts and adapt activity suggestions.
Legal basis: execution of the contract (art. 6.1.b).
Provider: Open-Meteo (open-meteo.com). The service is queried without an account or advertising identifier; only an approximate location is transmitted to get forecasts.

4.5. Sending daily reports to parents

The Application allows exporting a daily report as a PDF or sending it by email to parents.

Mechanism: the email is sent from your own email account, via the SMTP settings you configure in the Application (e.g. your Gmail, Orange, OVH address…). The report and the recipient’s address therefore transit through your email provider, exactly like an email you would send yourself.
No sending server of Dahlikit is used; Dahlikit receives neither the report nor the parents’ address. Your SMTP password is stored locally, in your operating system’s secure credentials manager (never in plain text, never transmitted to Dahlikit).
As a childminder, you are responsible for informing parents and having the legal basis for this sending (care contract, consent).

4.6. Synchronization with the companion mobile application

To access your data on your phone, the Application offers synchronization via your own personal cloud space (Google Drive). The operation, designed so that your data remains with you, is as follows:

You connect your own Google Drive account from the Application (OAuth authorization). The Application requests the most restricted access possible (drive.file): it can only access files it creates itself, in a dedicated folder Pti'Planning Sync, and nothing else on your Drive.
Your data (child records, equipment, schedules, photos) is deposited in YOUR Google Drive, not on a Dahlikit server. Dahlikit has no access to this folder or to your synchronized data.
Access tokens to your Drive are encrypted and stored locally on your devices; they do not transit through Dahlikit.
Google acts here as the host of your personal space; the processing is governed by your Google account terms. See Article 5 (recipients) and Article 7 (transfers).
Synchronization is optional: if you do not connect a cloud, the Application remains 100% local.

4.7. Activation and license validation

The Sérénité version requires validation of a license key. This verification is performed via a relay operated by Dahlikit (hosted on Vercel), which compares your license identifier against your subscription status (from Stripe). The exchange is strictly limited to the license identifier and subscription status; no child data is involved.

5. Recipients and processors

Your data is never sold. They may be shared with the following providers, strictly for the purposes described:

Provider	Role	Country
Vercel Inc.	Showcase website, mobile app and secure relay hosting (AI + license validation) — app.dahlikit.fr	United States
Stripe Payments Europe, Ltd.	Payment and subscription (payment data)	Ireland (EU) — potential subprocessors in the United States
Google LLC — Gemini API	AI features of the Serenity plan, via Dahlikit’s secure relay	United States
Google LLC — Google Drive	Hosting of your personal cloud for mobile synchronization (at your sole initiative)	United States
Open-Meteo	Weather service (Sérénité plan)	Switzerland / European Union

Note: sending reports by email does not use any provider of Dahlikit: it uses your own email provider (see Article 4.5). Similarly, data synchronized to Google Drive is stored in your own Google account, under your contractual relationship with Google. Administrative or judicial authorities may also receive data when required by law.

6. Cookies and tracking

The Website does not use advertising or analytical cookies requiring your consent.

Only cookies strictly necessary for the shopping cart’s operation (Stripe Checkout) may be placed when you make a purchase. In accordance with CNIL guidelines, these cookies are exempt from consent as they are essential to provide the service you request.

If audience measurement tools were to be added, they would only be activated after obtaining your consent through a dedicated banner.

7. Data transfers outside the European Union

Some providers (notably Vercel and Google — for hosting, the editor relay, AI features and Google Drive synchronization) are established in the United States; Stripe contracts via its Irish entity (EU) but may use subprocessors in the United States. Corresponding transfers are framed by appropriate safeguards under Articles 44 et seq. of the GDPR:

standard contractual clauses of the European Commission (SCC); and/or
certification under the EU-U.S. Data Privacy Framework (DPF), when the provider participates (which is the case for Google).

The weather service Open-Meteo is established in Switzerland, a country benefiting from an adequacy decision by the European Commission; no additional safeguard is required for this transfer.

For AI features, requests transit through Dahlikit’s relay and are then transmitted to Google (Dahlikit’s key); for synchronization, data goes into your own Google Drive, which falls under your direct relationship with Google. You can obtain a copy of the applicable safeguards by writing to contact@dahlikit.com.

8. Retention periods

Data	Duration
Connection logs of the Website	12 months maximum
Contact / commercial requests	3 years after last contact
Customer and license data	Duration of subscription
Accounting and invoicing documents	10 years (legal obligation)
Data entered in the Application	Under your sole control, locally
Data transmitted to AI / weather features	Not permanently stored by Dahlikit

9. Security

Dahlikit implements appropriate technical and organizational measures: encryption of exchanges (HTTPS/TLS), recourse to compliant providers (PCI-DSS for payment), minimization of transmitted data, and default local storage on the Application side. Since no system is infallible, we recommend that you regularly back up your local data.

10. Data concerning minors

The Application processes information relating to the children cared for (first name, age, equipment photos, reports). This data is entered and controlled by the user childminder, acting as the data controller within the scope of their activity. It is their responsibility to inform legal representatives and to have an appropriate legal basis. Dahlikit does not access this data, except for limited transit through the online features of the Sérénité plan, where it acts as a processor and under the instructions of the user.

11. Your rights

In accordance with the GDPR, you have the following rights: access, rectification, erasure, restriction, objection, portability, as well as the right to define directives regarding the fate of your data after your death.

For data entered in the Application: since it is stored locally, you exercise these rights directly (modification, export, deletion, uninstallation).
For other processing (contact, license, billing): address your request to contact@dahlikit.com, accompanied by proof of identity if necessary.

We reply within one month, extendable by two months for complex requests.

12. Complaints to the supervisory authority

If you believe your rights are not respected, you can file a complaint with the National Commission for Information Technology and Civil Liberties (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

13. Policy updates

This policy may be updated to reflect legal, technical, or feature changes. The applicable version is the one published on the Website at the date of your consultation. The date of the last update appears at the top of the document.