Ethics charter

Filomy is not a social network. There is no public news feed here, no algorithm promoting your memories, no like counter, no recommendations from strangers. Your spaces, your books, your birthday walls and your cards are only visible to the people you invite. A memory shared on Filomy stays within the circle you have chosen — family, loved ones, guests — and nowhere else. Our goal: a calm, private place to store what matters, shielded from exposure and the race for attention.

As a matter of principle, no one at Filomy browses the content you upload. Your texts, photos, audio messages and videos are not read, listened to or viewed by our team in the normal course of the service. Access to your content by our team is only possible in two strictly framed cases: — At your request: when you ask for our help (technical support, exercising your GDPR rights, a dispute). We then only open up the scope necessary for your request. — On alert: when a piece of content is flagged as potentially unlawful and must be examined (see below). Outside these two cases, access is technically locked. And whenever access does take place, it is systematically logged: who accessed it, which content, on what date, and on what grounds. This traceability binds us as much as it protects you.

Your data belongs to you. You keep control at all times to erase it: — Partial deletion: you can delete a specific piece of content (a photo, a message, a contribution) or an entire space, without deleting the rest of your account. — Full deletion: you can delete your account and all associated data, from your dashboard (Profile tab) or by writing to bonjour@filomy.com. Deletion is immediate and permanent. Only the data that the law requires us to keep (for example accounting information linked to an order, for the legal retention period) is kept, in anonymised form as soon as possible. Everything else disappears.

We do not sell your data. We do not rent it. We do not hand it over to any data broker or any third party for profiling purposes. The only exception is measuring the effectiveness of our own advertising campaigns: on a purchase or an account creation, a limited, hashed (non-reversible) signal is sent to Meta via its Conversions API, solely to count our conversions — never for profiling, resale or third-party targeted advertising. You may object to this (see our Privacy Policy). The only third parties that process part of your data are our technical subprocessors strictly necessary for the service to work (hosting, email delivery, payment, manufacturing of the physical products you order). Each is contractually bound to confidentiality and uses your data only for the task we entrust to them, never for their own purposes. The full list of these subprocessors, what they process and where, is detailed in our Privacy Policy.

Respect for your privacy is not a shelter for illegal content. Filomy reserves the right to examine a piece of content when an alert flags a potential breach of the law (for example manifestly unlawful content or a report). In that specific case, and only in that case, the review of the content concerned is unlocked for our team — in a targeted way, limited to that content, and always logged. If the offence is established, we may remove the content and, where applicable, make the reports required by law. This mechanism protects all users and ensures that Filomy remains a safe space.