Privacy policy

Who is responsible

[Company name], [address], company code [code]. Questions about privacy: [privacy@your-domain].

What we collect

• Your account: your email address and a protected form of your password (never the password itself). If you sign in with Google or Facebook: your name and profile picture from them.
• The photos you upload, and the drawings we make from them.
• Your book: its title, the texts you add to pages, and the age and style you choose.
• Your orders: what you bought and their status. Payments go through Stripe; we never see your card details.
• Sign-in sessions, with the IP address and browser they came from, to keep your account safe.

Who helps us

• [Hosting provider], in [country]: runs our website and database.
• Cloudflare (R2): stores the photos and drawings.
• Google (Gemini API): turns one photo at a time into a drawing. It gets the picture only, without its metadata.
• Stripe: handles payments.
• Lulu (Lulu Press, Inc., United States): prints and ships your printed book.
• Resend: sends our emails.
• Google and Facebook: only if you choose to sign in with them.

Why we use it

To make, print and send your book and to run your account (our contract with you, GDPR Art. 6(1)(b)); to keep sign-in safe and stop abuse (our legitimate interest, Art. 6(1)(f)); and to keep order records as accounting law requires (legal obligation, Art. 6(1)(c)). We don’t sell your data, and we don’t use your photos for anything but your book.

Where your data is, and which law applies

We are based in the European Union, so the EU’s General Data Protection Regulation (GDPR) applies to everything we do with your data, wherever you live. Some of the providers above process data in the United States. Data that leaves the EU this way is protected by the EU–US Data Privacy Framework or the EU’s standard contractual clauses.

How long we keep it

Original photos: deleted automatically 30 days after your book has shipped. Unfinished books: until you delete them or your account. Your account: until you delete it. Order records (without photos): as long as accounting law requires.

Your rights

Wherever you live, you can see, correct, download and delete your data. You can delete your account at any time on your account page. For anything else, write to [privacy@your-domain]; we answer within 30 days. You can also complain to a data protection authority, for example in [the EU country where we are established].

Notice for US residents

We collect the information listed above (contact details, account information, photos you upload, order and payment records, and technical data) only to make and deliver your book and run your account. We don’t sell your personal information and don’t share it for targeted advertising. You have the rights described above whatever state you live in, and we won’t treat you differently for using them.

If you signed in with Facebook

When you remove our app in your Facebook settings (Apps and websites), Facebook tells us and we delete the data we received from Facebook. If Facebook was your only way to sign in, your whole account is deleted as described above. Facebook shows you a confirmation code and a link where you can check the status.

Children

Our service is for adults: you must be 18 or older to create an account, and we don’t knowingly collect personal information from children under 13. Many books show children: their photos are uploaded by their parents or guardians, or with their permission, are used only to make the book, and are deleted as described above. If you think a child has given us personal information, write to [privacy@your-domain] and we will delete it.