Astrolino

Privacy Policy

Last updated: 12 July 2026

1. Who we are

Astrolino is a supervised AI chat and filtered web browser for children aged 7 to 15, used under parental supervision. The service is self-hosted in the European Union.

Publisher (data controller): DOLPHINN EURL — 96 rue Paradis, 13006 Marseille, France. SIRET 931086177 (Marseille). Publication director: Guillaume MARTIN. Contact: .

2. Parental consent (COPPA / GDPR-K)

Astrolino is set up by a parent using their own Google account. The parent adds each child by declaring the child's email address; the child then signs in with their own Google account. This process constitutes the parent's verifiable consent for the child's use of the service. There is no anonymous access, and the parent can review, correct or delete their child's data at any time.

3. Data we process

We do not collect location, contacts, photos, camera, biometrics, or advertising identifiers. No advertising, no third-party analytics, no tracking.

4. Voice dictation

If your child uses the optional microphone to dictate a message, the audio is sent to the speech-recognition service of the device or browser (Google on Android and Chrome, Apple on iOS and macOS, Microsoft on Windows) to be converted into text. This processing happens live and the audio is not stored on our servers. Dictation is optional — your child can simply type instead.

5. Artificial intelligence

Chat replies are generated by Google Cloud Vertex AI in a European Union region. Message content is processed by Vertex AI to produce a reply and is not used to train third-party models.

6. Subprocessors

7. Where data is stored & international transfers

All application data is hosted in the European Union and encrypted in transit (TLS). Two exceptions may involve transfers outside the EU: voice recognition (see §4) and emails sent through the website contact form. These transfers rely on the providers' contractual safeguards.

8. Legal basis

We process children's data on the basis of parental consent, and on our legitimate interest in providing a safe, filtered environment (content filtering and abuse prevention). You may withdraw consent at any time by deleting the account.

9. Retention

Account and activity data are kept for at most one (1) year after the last sign-in, after which they are deleted. A parent can also clear the AI's memory or delete the account (and all associated data) at any time, which erases the data immediately.

10. Your rights & account deletion

Parents can review a child's activity, clear the AI's memory, delete a specific child, or delete the whole account and all associated data — from the parent space in the app, or via our account & data deletion page. You may exercise your rights of access, rectification, erasure, restriction and portability, and lodge a complaint with a supervisory authority (in France, the CNIL). To contact us: .

11. Security

Data is encrypted in transit (TLS), access is authenticated (session tokens), and each child's data is isolated from other families. The parent account has no access to the chat or browser (anti-circumvention).

12. Changes

We may update this policy; the "last updated" date above reflects the latest version. Material changes will be communicated by reasonable means.