Privacy Policy
Last updated: 13 June 2026
Caliu turns a WhatsApp chat export into a personal data-art poster. We built it privacy-first, and this page explains honestly what happens to your data: what never leaves your device, and the small amount that does when you decide to buy.
Who we are
This site (caliuprints.com, “Caliu”, “we”) is operated by Pau Mullerat, based in Barcelona, Spain, the data controller for the data described below. You can reach us at any time at hello@caliuprints.com.
Your chat is processed on your device
When you upload a WhatsApp .txt export, it is parsed, analysed and rendered into a poster entirely inside your own browser. The raw chat (your messages, the full text of your conversation) is never uploaded, transmitted or stored on our servers. If you close the tab without buying, nothing about your chat ever reaches us.
What we store when you buy
The raw chat still never leaves your device. What we do receive, and only at the moment you choose to purchase, is the derived poster data needed to deliver your file:
- Aggregated statistics computed from your chat (message counts, activity by day/month, timing and mood tallies).
- Your design choices (template, colour mode, title and the names/initials shown on the poster).
- The short texts you personally selected as “moments”, which can include words you wrote and may contain personal content you chose to feature.
This package contains no full chat transcript. It is sent to our backend only when you start checkout, stored on our hosting provider’s infrastructure (Netlify Blobs) under a random, unguessable token, and used to render and re-deliver the exact poster you paid for. It is retained for up to 90 days so you can re-download from any device, after which it expires. You can ask us to delete it sooner (see Your rights).
Payment data
Purchases are handled by Polar (Polar Software Inc.), acting as our Merchant of Record. Polar is the seller of record for your order: it collects your email and billing details, processes the payment, handles EU VAT and issues your invoice. Caliu never sees or stores your card details. Polar’s handling of your data is governed by Polar’s privacy policy.
After a successful payment, we receive your email address from Polar and use it solely to send your order confirmation and a secure re-download link (valid for 90 days). These emails are delivered through our email provider, Resend.
Cookies & analytics
The app itself uses only the minimal browser storage it needs to function, which is never used to track you.
To understand whether our advertising works, we use the Meta Pixel (Facebook/Instagram). It loads only if you accept it in the consent banner, and even then the single thing it records is that a purchase happened, with the order value, so we can measure our ads. Your chat, your messages and your poster content are never sent to Meta. If you decline, the pixel never loads and no advertising cookie is set. You can change your mind any time by clearing this site’s data in your browser. Meta’s processing is governed by Meta’s privacy policy.
Legal basis (GDPR)
- Performance of a contract: to render and deliver the poster you purchased, and to enable re-downloads.
- Legal obligation: Polar retains transaction and tax records as required by law.
- Legitimate interest: to keep the service secure and prevent abuse.
- Consent: for the Meta advertising pixel, which loads only if you accept it and which you can decline at any time.
Your rights
Under the GDPR you can request access, correction, deletion (“right to be forgotten”), restriction or portability of your data, and you can object to processing. To exercise any of these, including deleting your stored poster data before the 90-day window, email hello@caliuprints.com with your order id. You also have the right to lodge a complaint with your local data protection authority.
Data retention & location
Poster data expires from our storage after up to 90 days. Payment and invoice records are kept by Polar for the period required by law. Our processors (Netlify, Polar, Resend, and Meta if you accept the pixel) may process data in the EU and the United States under appropriate safeguards.
Children
Caliu is not directed at children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy as the product evolves. The “last updated” date at the top always reflects the current version. Material changes will be highlighted on the site.
Contact
Questions about your privacy? Write to hello@caliuprints.com. A real person reads it.