Privacy

What data we process

Account: name, email, password hash, interface language.

Child profile: first name, age in years, optional gender, interests. We deliberately do not ask for surname, date of birth or address.

A child's photo — only after the parent's separate, explicit consent given right before upload.

Generated content: avatars, book texts and illustrations, PDF and audio files.

Technical data: product usage events (an anonymous identifier before sign-in).

An order can be started without signing up. We still create an account in that case — there is nowhere else to keep the child profile and the draft — but a temporary one: no password, a technical address. We ask for a real email once, at the payment step. An unfinished guest order is deleted after 7 days in full: the child profile, the photo and the draft.

How we handle photos

The photo is used only to create the avatars and illustrations of your book. We ourselves never use it to train models, for advertising, or anything else.

To draw the hero, the photo is sent to an outside image-generation service. It is a third-party company: we do not set its processing rules and cannot speak for it.

If you ordered a cartoon, the frames are animated by another outside service. What goes there is not your photo but an already-drawn frame of the book: that service never receives the photo itself.

The narration is read by an outside speech-synthesis service. It receives only the text of the story — which contains the child's name, but neither the photo nor a link to it.

Uploaded photos are automatically deleted from our servers after 7 days. The “Delete photos and avatars now” button in settings erases them instantly.

Files are stored outside public access and served only via signed, expiring links.

Before storing, the image is re-encoded — which also removes camera metadata, including the location where it was taken.

Your rights and buttons

Download all your data as a single JSON file — in settings.

Delete photos and avatars instantly — in settings.

Delete the whole account: child profiles, photos, avatars, projects and books are removed; payment records are kept anonymized for accounting.

Cookies

Essential cookies: sign-in, interface language and your choice about statistics. The site does not work without them and they cannot be switched off.

Anonymous statistics are optional. If you allow them, you get an anonymous identifier that shows the path through the site: at which step orders get abandoned. If you decline, no identifier is set, any earlier one is erased, and no events are sent at all. You can change your mind by clearing the site cookies in your browser.

There are no third-party advertising trackers or counters: statistics are counted on our own server and go nowhere else. The photo, its address, the child's name, date of birth, the wish text and your email never reach statistics — that is enforced in code, not only by policy.

We do not record screens: the service has no tools that capture mouse movement or page contents.

Access and logging

Operations on photos and data, as well as administrator access to user data, are recorded in an audit log.