Your stories. Your terms.

1. Who we are

VIXI DIXI is operated by 8lueberry Inc., a company incorporated in Québec and based in Montréal. “We”, “us” and “VIXI DIXI” mean 8lueberry Inc.

2. Our Privacy Officer

Under Québec’s Loi 25, the person responsible for protecting personal information at VIXI DIXI is our President, acting as Privacy Officer.

• Title: President and Privacy Officer, 8lueberry Inc.
• Email: privacy@vixidixi.com
• Mail: 5155 Av. Earnscliffe, Montréal, Québec H3X 2P7, Canada

We answer privacy requests within 30 days.

3. What we collect, and why

We collect only what we need to run the service.

• Account information: name, email, and phone number if you give it, so you can sign in and we can reach you. Someone invited to tell stories in the phone app can use an invitation code instead, with no email or phone (see “The phone app” below).
• Contact details of the people you invite: when you invite someone, you may type their email address or phone number. We use it to send them the invitation and to recognise them if they already tell stories in your project. We keep it with the invitation, and delete it with the project.
• Stories: audio you record or import, text you type, photos and files you upload. This is the heart of the product.
• Generated content: transcripts, themes, chapters, books, and your edits.
• Storyteller profile: a description of how you tell a story, built from your recordings. It is what makes the book read in your voice. See section 7.
• Order information: shipping name and address for printed books, and your order history.
• Technical data: device and browser type, app version, error logs and technical events, to keep the service working. The app itself carries no analytics.
• Payment information: handled by our payment processor. We never see or store your full card number.

The phone app

The VIXI DIXI app for iPhone and Android is a recorder for the stories you tell.

• It records only after you tap Record, and only while the app is open on your screen. It never listens in the background.
• It collects your name, your recordings and the stories made from them. If you sign in with a phone number or an email address, it collects that too.
• It has no analytics, no advertising and no tracking.
• Joining with a code. You join by invitation, with the code the person who invited you gives you (four words), or by opening the link they send. The code is your login: you do not need an email address or a phone number. Each invitation code gives you a separate login on the device, used only for that person’s project. You can add an email address or a phone number later if you want to. From then on you sign in with it, and the code stops working.
• Your device. When you enter an invitation code, the app sends us a random identifier stored on your device (on Android, the Android ID the system gives the app), the device model and the platform (iPhone or Android). We use them to keep you signed in, to recognise your device if you reinstall the app, to show the person who invited you which devices are connected (model and last use), and to limit wrong code attempts. We store the identifier only in a scrambled (hashed) form. We never use it for advertising, and we never link it to an advertising identifier. We keep the record of each device while the login exists, including devices that were removed, and delete it with the account.
• Wrong code attempts. To stop people guessing codes, we record each wrong attempt with a scrambled form of the device identifier and of your internet (IP) address. These records are deleted after 24 hours.
• New device notice. When a new device starts using your login, we email the person who invited you the device model and the time, so they can remove it if they do not recognise it. The email contains no code and no address.
• You can turn off its access to the microphone at any time in your phone’s settings.
• You join by invitation. The stories you record for the person who invited you are kept in their project. That person can see them; other members of the project cannot.
• Me > Delete account in the app deletes your account and your stories, after the 15 days described in section 10. You can also ask on the web at my.vixidixi.com/delete-account.

4. Sensitive information and your consent

Your stories often contain sensitive information: health, end of life, family conflict, beliefs, and details about other people. Under Loi 25 this requires your express consent.

When you create your account, we ask for that consent separately from our terms, with a checkbox that is never pre-checked. We keep a dated record of each consent you give, including which version of this policy you accepted. You can withdraw it at any time. The recording features will then stop working, but you keep access to everything you have already made.

5. People who speak in your recordings

When you interview someone, or import a recording of someone else’s voice, that person is sharing personal information too.

• Before an interview starts, the app asks the person speaking to agree to be recorded. If they cannot use the app themselves, you confirm that you asked them and that they agreed.
• For imported recordings of people who have died or cannot be asked, you confirm you have a reasonable basis to use them, for example as a member of their family.
• If someone asks us to remove or correct their voice or information, we tell you, and we act directly where the law requires.

6. How we use your information

Only for these purposes:

• To run the service: store, transcribe, organise by theme and turn your stories into the books you ask for.
• To keep your archive, so you can make new books later.
• To talk to you: account messages, order updates, support.
• To keep the service safe and working: prevent abuse and fraud, fix bugs.
• To meet our legal obligations: tax, accounting, lawful requests.

We never sell, rent or share your data for advertising. We never use your stories to train AI models, ours or anyone else’s. Any research use, including anonymised research with academic partners, would require a separate opt-in that you can refuse.

7. Automated processing and your storyteller profile

We use automated tools, including third-party AI services, to transcribe recordings, group stories by theme and draft chapters. A person can review any result on request, and you can edit everything.

The storyteller profile describes how you tell stories. It reads your recordings against the five traits researchers use most (openness, conscientiousness, extraversion, agreeableness and emotional range) and uses the result to shape how your book is written.

This is profiling, and we ask for it in plain words when you create your account, alongside everything else and never pre-ticked. It is required, because it is what the product is: without it a book can still be assembled from your words, but it is written in the flat, tidy register that gives machine-written prose away rather than in your voice. You can withdraw it at any time. Recording then stops, along with the rest, and everything you have already made stays yours and stays readable. To give it again you answer the whole form again, so that what you agree to is what the policy says today.

8. Your voice

We store your audio to transcribe it, to keep it in your archive and, if you order one, to produce your audiobook. We do not create a voiceprint and we do not use your voice to identify you.

The audiobook is not available yet. If we introduce one that narrates in a synthetic voice built from your own recordings, that is biometric information: we would ask for your express consent separately before producing a single one, and you could refuse and still buy the book. Before launching any feature that uses biometric data, we would notify Québec’s Commission d’accès à l’information at least 60 days in advance, as the law requires.

9. Service providers and where your data goes

Your audio and stories are stored in Canada. To transcribe them and write your book, the relevant parts are sent to our AI service providers, OpenAI and Anthropic, in the United States, where they may be accessible to US authorities under US law. We assess the privacy impact of each transfer outside Québec and review it every year. Each provider’s terms allow it to use your data only to provide its service to us; our AI service providers do not train their models on it and delete it within the period set out in their terms.

10. How long we keep your data

• Stories, audio and generated books: kept as a permanent archive for as long as your account exists, because preserving them is the point of VIXI DIXI. When you delete something, it leaves our live systems within 7 days and our backups within 90 days.
• Inactive accounts: we do not delete an archive because an account is inactive, and never without writing to you first.
• Your account: until you close it. After you ask, it is kept 15 days in case you change your mind, then permanently deleted with everything in it. We keep an anonymised record of each purchase (amount, date, country and province, with no name or contact details) for 6 years under Canadian tax law. If you tell stories in someone else’s project, deleting your account deletes them too, except those already in a finished book. Stories other people told in your projects go back to them.
• Consent records and access logs: kept as long as the data they relate to, so we can show how it was handled.
• Technical logs: 30 days. Records of automated processing requests: 90 days.
• Phone app devices: as long as the login exists, then deleted with it. Wrong code attempts: 24 hours. A login made with a code that was never used to join a project is deleted after 7 days.
• Backups: copies age out within 90 days, so deleted data leaves them within that time.
• Support emails: 24 months after your last message.

11. When a storyteller dies

You can write to us to name the person who should get access to your archive after your death, or to ask that it be deleted. When we receive proof of death, we follow your instructions. Without them, we give access only to the liquidator (executor) of your estate, within the limits set by law.

12. How we protect your information

• Encryption in transit (TLS) and at rest.
• Development and testing never use real user data.
• Access to production data is limited to named team members. They may listen to a recording or read a story only when it is needed to provide support or fix a problem, never out of curiosity.
• Every administrative access to user data is logged and reviewed.
• Providers are reviewed before we start using them.
• New features ship with the most private settings on by default.

Our internal privacy governance policy sets out who is responsible (the Privacy Officer), who may access production data, how long each kind of information is kept and how it is destroyed, how we handle requests and complaints within 30 days, how providers are assessed before we use them, and how incidents are handled and recorded. It is reviewed every year.

13. Your rights

Under PIPEDA and Loi 25 you have the rights below. Write to privacy@vixidixi.com to exercise any of them. We answer within 30 days.

• Access: get a copy of your information and of what we do with it.
• Correction: fix information that is inaccurate or incomplete.
• Deletion and stopping dissemination: have information deleted, or no longer shared.
• De-indexing: limit how findable information is, when exposure causes you serious harm.
• Portability: receive your information, including your audio, in a common format.
• Withdrawing consent: change your mind at any time.
• Automated decisions: learn how an automated result was produced, and have a person review it.

14. Cookies and analytics

Our public website sets no cookies of its own. It keeps one small choice in your browser’s storage, the language you picked, and that never leaves your device.

To see how many people visit and which pages they read, the site uses a privacy-friendly analytics service. It sets no cookies, does not identify you and does not follow you across other sites: it counts visits without collecting personal information, and processes them in the United States. We do not run advertising cookies, we do not buy or sell audience data, and the app itself carries no analytics at all. You can block the analytics script with a content blocker, and the site works exactly the same.

15. Children

Accounts are for people 18 and over. Children may appear in stories, or be interviewed by a parent or guardian who consents on their behalf when they are under 14. If you believe a child gave us information without that consent, write to us and we will delete it.

16. Privacy incidents

If an incident creates a risk of serious harm, we notify the people affected and the Commission d’accès à l’information du Québec without delay, and the Office of the Privacy Commissioner of Canada where required. We keep a register of all incidents.

17. Changes to this policy

We tell you in advance, by email or in the app, about any change that affects you. We keep every past version and send any of them on request, and your consent is always tied to the version you accepted. A new purpose for your data always requires new consent. The “Last updated” date at the top of this page reflects the version in force.

18. Complaints

Write to privacy@vixidixi.com first. If you are not satisfied, you can contact:

• Commission d’accès à l’information du Québec, for Québec residents: cai.gouv.qc.ca.
• Office of the Privacy Commissioner of Canada, federally: priv.gc.ca.

19. Language

This policy is published in French and in English. Both versions are equally valid.

See also our terms of service, which explain what the service does, what things cost and how refunds work.

© 2026 VIXI DIXI · Fait à Montréal 🇨🇦