Privacy Policy

What we collect

Because you gave it to us

• Your email address, and your name if you provide one
• Your child’s first name, age, gender, interests and personality details
• Family member names and relationships you choose to include
• Photographs you upload as illustration references
• A dedication or gift message, and gift recipient details if it’s a gift
• Your shipping address, for printed orders
• Your phone number, only if you opt in to text updates

Because you used the site

• Order history, approvals, and any change requests you make
• A sign-in session cookie, so you stay logged in
• Basic technical logs (IP address, browser, timestamps) used for security and rate limiting

What we never see

Your card number. Payments are handled entirely by Stripe; we receive only a payment reference and the result. We never receive, store or have access to your card details.

Why we use it

• To make your book. Your child’s details drive the story text; your photographs drive the illustrations’ likeness.
• To let you review and approve it before anything is printed.
• To fulfil and deliver — payment, printing, shipping, and the emails or texts that tell you where your order is.
• To keep the service safe — screening uploads and free-text for harmful content, and limiting abuse.
• To improve future books. When you tell us what was wrong with a page, we extract a general lesson from that feedback. Those lessons are generic craft notes and never contain your child’s name, your details, or your photographs.

Automated processing and AI

Making your book involves automated systems: a language model writes the story from the details you provide, an image model illustrates it, a vision model reads your photographs to describe appearance, and text-to-speech and music models produce the optional audio.

We do not permit any of these vendors to use your content to train their models. No automated decision is made about you that has a legal or similarly significant effect — a person can always review anything you’re unhappy with, and you approve the finished book before it prints.

Who else sees your information

Only the vendors that make the product work, and only the part each one needs:

• Stripe — payment processing
• Our print partner — the book file and your shipping address, for printed orders only
• AI providers — story text, illustrations, photo description, narration and music
• Email and SMS providers — to send order updates you asked for
• Our hosting and database providers — to run the site and store your order

We may also disclose information if the law requires it, or to protect someone’s safety. If the business is ever sold or merged, your information may transfer with it — we would tell you first, and this policy would continue to apply until replaced.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

How long we keep it

• Uploaded photographs — deleted within 90 days of the order completing or being cancelled, sooner on request
• Your finished book — while you have an account, so you can re-download or reorder
• Order and payment records — as long as tax and accounting law requires
• Sign-in sessions — 30 days, then you sign in again
• Sign-in links — 15 minutes, single use

Your rights

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or send you a copy. Depending on where you live you may also have the right to object to or restrict certain processing, to withdraw consent, and not to be discriminated against for exercising any of these rights.

Email hello@kidfablebooks.com from the address on your account. We respond within 30 days and never charge for it.

Security

Traffic is encrypted in transit. Sign-in is passwordless and links expire. Photographs and finished books are served only to the signed-in account that owns them and are never placed on a public URL. Card details never touch our systems.

No system is perfectly secure. If a breach ever affects your information, we will tell you and the relevant regulator as required by law.

International transfers

We operate from the United States and our vendors may process data there and elsewhere. If you order from outside the US, your information will be transferred to the US, where privacy law differs from your own.

Changes

If we change this policy materially we will update the date at the top and, for significant changes, email account holders. Continuing to use the service after a change means you accept the updated policy.