Privacy of the Picturale account

What the Picturale account — the single sign-on shared by Vision Picturale, Maison Picturale and Calibration Flow — does with your data, in plain language.

Last updated: September 29, 2026.

1. Who is responsible for your data

The "Picturale account" is the single identity (single sign-on, or SSO) that lets you sign in to Vision Picturale (visionpicturale.com), Maison Picturale (maisonpicturale.com) and Calibration Flow (app.calibrationflow.com), from picturale.app.

The data controller for this account is Vision Picturale, a French SARL (limited liability company), SIREN 829 325 489, registered office at 53 rue Charles Duflos, 92270 Bois-Colombes, France.

When you buy something or send a request, the company handling your order is the one behind the service concerned:

• Vision Picturale, SARL, SIREN 829 325 489 — online shop and non-toxic chemistry.
• Maison Picturale, SAS, SIREN 914 961 297 — workshop and prints.
• Tristan Sidem, sole proprietorship, SIREN 528 977 275 — Calibration Flow.

For any question about your data, regardless of the service involved, write to support@picturale.app.

2. What data we collect

Your account identity

Email, display name, profile photo and the username you choose. This is what identifies you across the ecosystem.

Contact details and addresses

If you fill in your profile or order from Maison Picturale: phone number, shipping address, billing address.

Orders and payments

Order number, amount, currency, status — for Maison Picturale prints as well as the Calibration Flow Pro subscription. Payment itself is processed by Stripe or the App Store; we never receive your card number.

If you buy from Vision Picturale, your order goes through Vision Picturale's own Shopify cart and payment tunnel, governed by Vision Picturale's privacy policy — distinct from this page, which covers the shared account.

Invoices

Name, email and address at the time of purchase, amounts — kept to meet our accounting and tax obligations.

Luminograph device

Your Luminograph's serial number and the email used at purchase, to activate device-related features.

Linked accounts

If you link a second Picturale account to yours: its email, display name and photo, so you can switch between them quickly. You can unlink at any time from your account settings.

Profile picture

The image you choose to upload (10 MB maximum), if you'd rather not keep the one provided by Google or Apple.

Community content (Calibration Flow)

If you publish a curve or preset to the shared library: your username, the content you share, and a thumbnail — publicly visible to the Calibration Flow community.

High-definition media (Calibration Flow)

Scans and images you generate in the app, which may show your personal photographs — stored to run the calibration tool.

Contact form (Maison Picturale and NOEME)

First name, last name, email, phone (optional) and your message — sent by email to handle your request, whether it's a Maison Picturale contact form or a NOEME creator application / B2B inquiry. This form is not saved to our database: it reaches us by email only.

Roles and access rights

A technical set of permissions (role per app, Pro status) that determines what your account can do. It lives in your sign-in token, not in a visible database.

Anti-abuse

A timestamp and your email, used to prevent the sign-in link from being resent too often (at least 45 seconds between sends).

Technical logging

Like most online services, our servers keep technical logs that may contain your email or an identifier, to diagnose issues.

Sync with NOEME

NOEME (noeme.app), our community platform, runs on a separate Google project. For your account to work there too, when you go to NOEME, a signed link valid for a few minutes passes it your account identifier, email, display name, username, photo and sign-in method (Google, Apple or email). After that, whenever your name, photo or Pro status changes, the change is relayed to NOEME; your Pro status is also rechecked automatically every 30 minutes.

3. Why we use it

Most of this processing is necessary to perform the contract between us: identifying you, processing your order, managing your subscription, activating your device. Keeping invoices meets a legal obligation. Linking a second account or publishing to the community library relies on your explicit consent — something you choose, and can withdraw. Anti-abuse security and technical logging rely on our legitimate interest in running the service correctly and keeping it secure.

Providing your email is required to create a Picturale account: without it, you cannot sign in. Likewise, order and billing data are required to complete a purchase; without them, we cannot process your order.

4. Signing in with Google

When you choose "Continue with Google", we only request basic permissions ("scopes"): your identifier, your email and your public profile — never access to your Drive, contacts, calendar or other Google data.

The only information we receive from Google and store is your name, your email and your profile photo URL. It's used solely to create and identify your Picturale account, and to recognize you automatically across Vision Picturale, Maison Picturale, Calibration Flow and NOEME.

This data is never sold, never shared for advertising purposes, and never used to train an AI model. Picturale's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5. Who we share it with

We never sell your data. We only share it with the providers needed to run the service:

• Google Firebase / Google Cloud — hosting, authentication, database, server functions, file storage, logging.
• Stripe — payment for the Calibration Flow Pro subscription and Maison Picturale prints.
• Apple — "Sign in with Apple" and subscriptions purchased on the App Store.
• Resend — sending the email containing your sign-in link, as well as the content of the Maison Picturale and NOEME contact forms.
• Google Fonts — loading the site's typeface.
• Shopify — cart and payment for the Vision Picturale shop, governed by its own privacy policy (see above).
• NOEME — another application in the Picturale ecosystem, not an external third party, connected through a secure bridge.

We never pass your email or contact details to advertising platforms.

6. Transfers outside the European Union

Your account database and the files you upload (profile picture, scans) are hosted by Google Cloud in the United States; some of our server functions run in Europe (Belgium), others in the United States. Our other providers (Stripe, Apple, Resend) also run international infrastructure and may process data outside the European Union. Loading the site's typeface (Google Fonts) also sends your browser's IP address to Google.

These transfers are covered by the safeguards provided for by the GDPR: the standard contractual clauses adopted by the European Commission and, for certified providers, the EU–U.S. Data Privacy Framework. You can obtain a copy of these safeguards by writing to support@picturale.app.

7. How long we keep it

Unless stated otherwise below, your data is kept for as long as your Picturale account exists, then erased on request (see section 11).

• Invoices — 10 years, the retention period for accounting records required by French law.
• Linked account — until you click "unlink".
• Content published to the Calibration Flow library — visible to the community until you remove it; once removed, only you and the administrator can still see it, and it is kept for as long as your account exists, then erased on request (see section 11).
• Sign-in link anti-abuse timestamp — not automatically deleted yet: kept until you ask us to erase it.

8. Cookies and browser storage

We don't use advertising cookies. Your browser keeps a few technical pieces of information locally:

• picturale.lang — the language you chose (French or English).
• picturale_emailForSignIn and picturale_redirectAfterSignIn — while you complete sign-in via the magic link.
• picturale_known_user — a 90-day timestamp that lets us recognize you automatically on our other sites without asking you to sign in again.
• picturale_auth_guest and picturale_sso_checked — avoid re-checking your sign-in status on every page.
• A technical store used by the Firebase SDK (IndexedDB) that keeps your session open.

You can clear this information at any time from your browser settings; you'll then need to sign in again.

9. Security

The site is served over HTTPS, with security headers (HSTS, anti-clickjacking, a restrictive permissions policy). Access to your data in our database is protected by Firebase security rules.

10. Your rights

Under the GDPR, you have the right to access your data, have it corrected or erased, receive a copy in a reusable format (portability), object to processing, request that it be restricted, and withdraw at any time any consent you have given. Write to us at support@picturale.app to exercise any of these rights; we'll respond within the legal one-month deadline.

If you believe your rights are not being respected, you can file a complaint with the French data protection authority, the CNIL — cnil.fr.

11. Deleting your account

From your account settings, the "Delete my account" button closes your access immediately, after confirmation.

That button does not, on its own, erase the data attached to your account (orders, devices, published content, linked NOEME account, sign-in link anti-abuse timestamp). To have it erased, write to support@picturale.app: we delete it within one month, except for invoices, which the law requires us to keep.

12. Changes to this policy

We may update this page to reflect a change in our services or in the law. The date at the top of the page shows the last update; we'll let you know of any significant change.