Privacy policy

The Pimi service is published by Julien LENNE EI, 17 D rue Rabelais 79000 Niort FRANCE (SIRET 89449704900029), the controller of your personal data. For any question or to exercise your rights: contact@heypimi.com.

• Twitch account (at sign-in): username, Twitch id, profile picture and e-mail address. This information is kept in an encrypted session cookie on your device, not in our database. Your profile picture may be cached temporarily on our servers to be displayed.
• Subscription (paid plans): Twitch id, plan, status, period and cancellation dates, Stripe customer and subscription ids. Your card details are entered at Stripe and never reach us.
• Usage counters: number of voice commands per minute, per day and per month, linked to your Twitch id, to apply your plan's limits.
• Usage statistics: for each day, your Twitch id and username, your plan and the number of voice commands sent or refused by the limits. They are only used to spot abnormal use (bots, abuse of the free plan) and are only seen by the publisher.
• Onboarding progress: the dates of the first steps completed (overlay opened, sound tested, microphone started, first command, Stream Deck) and of hiding the "Premiers pas" list, linked to your Twitch id. No content, only dates.
• Settings: your preferences ("Hey Pimi" sensitivity, dashboard and overlay language, suggested by your browser on your first visit and changeable in the settings), linked to your Twitch id.
• Counters: the counters you create (name, value, color, emoji), linked to your Twitch id. Your counters' names are sent along with your voice commands to Gemini, so it knows which counter to change.
• Wheels: the wheels you save (name, options, elimination mode and options already drawn), linked to your Twitch id. Your wheels' names are sent along with your voice commands to Gemini, so it knows which wheel to spin.
• Channel points (only if you connect them): the Twitch authorization you give Pimi to manage its rewards on your channel (encrypted access tokens) and the rewards Pimi created (title, cost, action). The name of the viewer who redeems points is shown on your overlay and in your dashboard, but is never stored. Twitch sends Pimi every channel point redemption on your channel (including those of your other rewards, with the viewer's name and any text they typed): those that don't concern a Pimi reward are discarded at once, without being kept.
• Channel context: the game currently played on your Twitch channel (public information), used to better understand your commands.
• E-mail exchanges: if you write to us, your message and your address.

The "Hey Pimi" wake word is detected entirely in your browser: nothing is sent until it is said. Only the audio of the command that follows is sent to our servers, then to Google's Gemini API to be understood.

The audio is never kept: it only exists in memory while it is processed, then it is deleted. Neither the audio, its transcript nor the answer is stored in our database or in our technical logs. The transcript is only sent back to your own dashboard to show you what was understood.

Google processes these requests as a processor under the paid Gemini API offering: it does not use them to improve its products and only keeps them for a limited time, to detect abuse.

• Providing the service (sign-in, understanding commands, display on the overlay): performance of the contract.
• Managing subscriptions and payments: performance of the contract; keeping invoices: legal obligation.
• Applying usage limits, preventing abuse and securing the service: legitimate interest.
• Guiding you through onboarding and improving it: legitimate interest.
• Answering your messages: legitimate interest.

No data is used for advertising or sold.

• Google Cloud France SARL: website hosting (European Union (europe-west1 region, Belgium)).
• MongoDB, Inc. (MongoDB Atlas): database, hosted in Belgium.
• Google (Gemini API): understanding voice commands.
• Google (Cloud Text-to-Speech): turning Pimi's answers into speech. Only the answer's text is sent, never your voice.
• Twitch Interactive, Inc.: sign-in to your account and, if you connect them, managing your channel points.
• Stripe Payments Europe, Ltd.: payment and subscription management. Stripe also acts as a controller for its own obligations (fraud prevention, financial regulation).
• ImprovMX and Google (Gmail): receiving e-mails sent to contact@heypimi.com.

The website and the database are hosted in the European Union. Some providers (Google, Twitch, Stripe) may process data in the United States or other countries; these transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

• Command audio and transcript: never kept.
• Usage counters: deleted automatically (2 minutes for the per-minute counter, 2 days for the daily counter, 40 days for the monthly counter).
• Usage statistics: deleted automatically after 40 days.
• Onboarding progress: deleted automatically 1 year after you last used Pimi.
• Settings: deleted automatically 1 year after your last dashboard sign-in.
• Counters: deleted automatically 1 year after your last dashboard sign-in.
• Wheels: deleted automatically 1 year after your last dashboard sign-in.
• Channel points: the Twitch authorization is deleted as soon as you disconnect your channel points (you can also remove it from Twitch's settings), and at the latest 1 year after it was last used; the rewards, 1 year after your last dashboard sign-in.
• Sign-in session: 30 days at most, or until you sign out.
• Subscription data: for the whole subscription, then 3 years after it ends; invoices are kept 10 years (accounting obligation).
• Technical logs: no personal data, limited in size and continuously replaced.
• E-mails: as long as needed to handle your request, then 3 years at most.

Pimi uses no advertising cookies and no audience measurement tools. Only strictly necessary cookies are set: sign-in session, protection against attacks (CSRF) and the page to return to after signing in. Your theme preference (light or dark) is kept in your browser's local storage. As these are essential to the service, they don't require your consent.

If you choose the website's language (FR / EN button or language banner), this choice is kept in a NEXT_LOCALE cookie ("fr" or "en") for 1 year. It is only set when you make that choice, contains nothing else and is not used to track you: as it only remembers a preference you asked for, it doesn't require your consent either.

You have the right to access, rectify, erase, restrict, object to the processing of and port your data. To exercise them, write to contact@heypimi.com; you will get an answer within one month. You can cancel your subscription at any time from your dashboard.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (French data protection authority).

See also the terms of sale and the legal notice.