Privacy policy
We take children's privacy seriously. This page explains, in plain language, what we collect and what we do with it.
What we collect
- Photos you upload — used solely to create your personalized book.
- Child details you enter — first name, age, and gender selection, used only to personalize the story text and illustrations.
- Account and order details — email address, shipping address, and order history.
- Payment details — handled entirely by Stripe; we never see or store card numbers.
How photos are used
Before uploading, you confirm you are the child's parent or guardian (or have their permission), and we record when you gave that consent. Uploaded photos are stored in private, access-controlled storage and are used only to illustrate your book. We never use your photos to train AI models, never share them for marketing, and never make them public.
Who processes data for us
We only share what each service needs to do its job:
- Together AI (with Replicate as a backup) receives your child's photo and the story art to create the illustrations in your book.
- Supabase stores account data, books and photos (UK/EU region).
- Vercel hosts the website and Railway runs the service that assembles your book.
- Stripe processes payments. Gelato receives the finished book file and your shipping address to print and deliver it.
- Resend sends our emails. Google is used only if you choose “Sign in with Google”.
We never sell personal data.
How long we keep things
- Previews that aren't purchased, and their photos, are deleted after 30 days.
- For purchased books, the original photo is deleted 14 days after your book is finished. The finished pages are kept so you can read it online and order reprints.
- Order receipts are kept as long as the law requires for accounting.
Deleting your data
Signed in, you can delete any book, remove a finished book's original photo, or delete your whole account from your dashboard at any time; deletion is immediate. If you made a book without an account, contact us with your order number and we'll delete it within 30 days.
Contact
Questions about privacy? Reach us through the contact page and we'll help.