Privacy Policy

1. Who is responsible for your data

The controller of your personal data is [completed before launch], tax code (CUI) [completed before launch], trade register number [completed before launch], [completed before launch] ("we"). For anything about your data, write to [completed before launch] or use "My requests" in your account.

We wrote this policy to be short and plain. It explains what we collect, why, who helps us, how long we keep it, and your rights.

2. The short version

• Accounts are for adults (parents and guardians). Children never have accounts.
• Your child's photo is used only to draw their character and is then deleted automatically. It is never used for anything else: no training of AI models, no marketing, no sharing.
• Stories are made with AI. To make them, your child's first name, age, appearance and your story choices are sent to the AI providers listed below, under contracts that do not let them train their models on your data.
• We use no tracking or advertising cookies and no session recording.
• You can see, download or delete your data at any time from Settings.

3. What we collect and why

Your account. Email address, password (stored only in encrypted, one-way form), language, your confirmation that you are 18 or over, the versions of the Terms and this policy you accepted, your email preferences, and, if you use it, your two-step login setup. Why: to run your account and to show we have your consent (legal basis: the contract with you and our legal obligations).

Your children and characters. First name or nickname, birth month and year, appearance answers (for example hair and skin colour), and the characters you save (family members, pets, toys) with a short description. Why: to make the stories you ask for (legal basis: the contract; for any health detail you choose to add, such as a condition the story is about, your explicit consent, which you give in the story flow and can withdraw).

Photos. The photos you upload of your child or of other characters. Before saving, we remove hidden data such as location. An automatic safety check looks at each photo, and no person views it. Why: only to draw the character (legal basis: your consent, given at upload). The photo is deleted automatically as soon as the character is drawn, and at the latest 7 days after your first purchase, or 30 days after upload if you buy nothing. We warn you before. You can delete it yourself at any time.

Stories. The stories, pictures and PDFs made for you, your reading progress and reader settings. Why: so you can read and download them.

Orders and payments. What you bought, the price, the date, your withdrawal consent and its wording version, the invoice, and the payment status from Stripe. We never see your full card number. Why: the contract, accounting and tax law.

Gifts. The recipient's first name and email address, your name and message, and the date to send it. Why: only to deliver the gift. They are never used for marketing and are deleted or anonymised when the gift is finished.

Support requests. What you write to us and our answers. Why: to help you.

Marketing emails. Only if you tick the separate box (unticked by default), we send occasional reminders and ideas. Every such email has a one-click unsubscribe. We keep a record of each consent and change.

Newsletter. If you sign up in the footer, we keep your email address, language, the date, your confirmation that you are 18 or over and the wording you agreed to, only to send the newsletter (legal basis: your consent). Every newsletter has a one-click unsubscribe, and you can ask us to erase your address at any time.

Reviews. If you review one of your stories, we keep your rating, your words and the first name you choose. With your consent they are shown on our website after we check them; your child's name is never shown. You can ask us to remove your review at any time.

Invitations. If you share your invite link, we record which new account joined through it and whether its first purchase stands after 14 days, only to give both families the credits (legal basis: the contract). The family you invited never sees your details, and you see only counts.

Partners and affiliates. If you apply to our partner program or open an affiliate account, we keep your name, how to reach you, where you share our link, the agreement version you accepted and, once approved, your payment details and the commissions earned (legal basis: the contract; accounting law for payments). If you bought through a partner's code or link, we record that the order came through that partner; the partner sees only counts and amounts, never who you are. We count how many times each partner or affiliate link is opened per day, without cookies and without anything about the visitor.

Where you came from. If you arrived from an ad or a link with campaign tags, we save those tags (for example "facebook / potty") on your account and orders. They contain no personal data. Why: to know which campaigns work (legal basis: our legitimate interest).

Technical data. Server logs (IP address, browser, time) kept for a short time for security and to fix errors.

Beta testers. If you take part in the test before launch, we also keep your answers to the test questions (with no child name or photo). Your account, characters and stories stay after the test; test photos are deleted when the test session ends and within 7 days.

4. Who helps us (processors)

We share data only with the providers we need, under data processing agreements where they offer them:

• Supabase (EU, Ireland): database, sign-in and file storage. Receives all account and story data.
• Lovable and its hosting partners (EU and US): run the website. Receive the pages you visit and technical data.
• Make.com / Celonis (EU): connects the steps that make a story. Receives your story choices, your child's first name, age and appearance, and photo links while the character is drawn.
• AI text and image providers (currently OpenAI and Google Gemini; others may be added after testing, and this list will be updated) (EU and US): write the story and draw the pictures. Receive your story choices, your child's first name, age and appearance, and the photo while the character is drawn.
• Stripe, and Klarna if you choose it (EU and US): payments. Receive your email, the order amount and the payment details you enter with them.
• Resend (EU and US): sends our emails. Receives the email address and the email content.
• A Romanian invoicing service (EU): issues invoices. Receives your name, email and order details.

When data goes outside the European Economic Area, it is protected by the European Commission's standard contractual clauses or an adequacy decision (such as the EU–US Data Privacy Framework). We choose AI providers whose business terms say that your data is not used to train their models, with the shortest retention they offer.

We do not sell your data and do not share it with advertisers.

5. How long we keep it

• Child photos: see section 3 (deleted once the character is drawn; at the latest 7 days after the first purchase or 30 days after upload).
• Account, children, characters and stories: while you have an account. When you close your account, everything is deleted 30 days later (you can change your mind until then).
• Unfinished story choices: 30 days.
• Orders and invoices: as long as accounting law requires (currently up to 10 years), without the story content.
• Gift details: until the gift is redeemed or expires, then deleted or anonymised.
• Support requests: up to 2 years after they are closed.
• Consent records: as long as needed to prove consent.
• Server logs: a few weeks.

6. Cookies and browser storage

We use only what the site needs to work:

• Sign-in cookies (names starting with sb-): keep you signed in securely. They cannot be read by scripts on the page.
• bds_lang: remembers your language (1 year).
• bds_consent: remembers your cookie choice.
• Browser storage: your text size, reader settings and, before you sign in, the story choices you made (kept only in this browser).

We use no analytics, advertising or social media cookies and no session recording. If this ever changes, we will ask for your consent first, and you will be able to change your choice under "Cookie settings" at the bottom of every page.

7. Your rights

You have the right to access your data, correct it, delete it, restrict or object to its use, take it with you (portability), and withdraw consent at any time (without affecting what was done before).

• Download my data and Delete my account are in Settings.
• For anything else, use "My requests" or write to [completed before launch]. We answer within 30 days.
• You can complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro, B-dul G-ral. Gheorghe Magheru 28-30, Bucharest), or to the authority in the country where you live.

8. Children's data

We process children's data only on the instructions of their parent or guardian, who is our customer. Stories appear only in the parent's account; nothing about a child is ever public. Our safety checks keep every story free of frightening, inappropriate or unsafe content.

9. Security

Data is encrypted in transit and at rest. Photos and stories sit in private storage and are shown only through short-lived links. Staff use two-step login, have only the access their work needs, and every access to a customer's account is recorded.

10. Changes

If we change this policy, we publish the new version here with its date and tell you by email when the change matters to you.