Privacy Policy

Our Commitment to Your Privacy

At My Little Storybooks, we take your privacy and the privacy of your children extremely seriously. We understand that you are trusting us with sensitive personal information, including photographs of your children, and we treat that trust with the utmost respect and responsibility.

We will never sell, rent, or give away your personal data or your children's data to any third party. We share limited data only with the service providers listed in this policy, strictly to operate and improve the Service.

1. Information We Collect

Account Information

When you create an account, we collect:

• Your email address
• Your display name (if provided)
• Authentication data through Firebase (Google OAuth or email/password)

Child Profile Information

When you create a child profile, we collect:

• Child's first name
• Child's age
• Child's interests and favorite things (as provided by you)
• A photograph of the child (optional, uploaded by the parent/guardian)

Order Information

When you place an order for a printed book, we collect:

• Shipping address
• Payment information (processed securely through Stripe; we do not store card details)

Usage and Analytics Data

We collect usage analytics including pages visited, features used, and session duration to improve the Service. We also use Meta Pixel (Facebook) to track page views and conversion events (such as sign-ups, checkout, and purchases) to measure the effectiveness of our advertising. Meta Pixel may collect device identifiers and browsing activity in accordance with Meta's own data policy.

2. How We Use Your Information

We use the information we collect to:

• Authenticate your account and provide access to the Service
• Generate personalized storybook content and illustrations for your child
• Transform uploaded photographs into cartoon-style character representations
• Fulfill and deliver printed book orders
• Process payments through our secure payment provider
• Communicate with you about your account, orders, and Service updates
• Measure the effectiveness of our advertising through conversion tracking (via Meta Pixel)
• Improve and maintain the quality of the Service

We do not sell your personal data to third parties, share it with data brokers, or use child profile information (names, photos, interests) for advertising purposes. Conversion tracking through Meta Pixel shares limited event data (such as page views and purchase events) with Meta, but does not transmit your children's names, photos, or profile details.

3. How We Protect Your Data

We implement robust security measures to protect your personal information:

• All data is transmitted over encrypted HTTPS connections
• Authentication is managed through Firebase, a secure identity platform by Google
• Payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment provider
• Uploaded photographs and generated content are stored in secure cloud storage with access controls
• Database access is restricted and protected with strong credentials
• We regularly review our security practices and update them as needed

4. Photo Privacy

We understand that photos of your children are especially sensitive. Here is exactly what happens with photos you upload:

• Photos are uploaded to our secure storage and processed through our AI service provider (OpenAI) solely to create a cartoon-style character representation and book illustrations
• Photos are never shared with other users, advertisers, or data brokers
• Photos are never used to train AI models
• Photos are never sold, licensed, or distributed for any purpose
• Photos are never displayed publicly or made accessible to anyone other than the account holder
• Photos are not sent to Meta or any advertising platform
• You may delete any uploaded photos at any time by removing the child profile

5. Data Sharing

We want to be clear about how we handle your data:

• We do NOT sell your personal information to anyone
• We do NOT provide your data to data brokers
• We do NOT trade or rent your personal information
• We do NOT share your children's profile information (names, photos, interests) with advertisers or advertising platforms

We do share limited data with the service providers listed in Section 6 to operate the Service. Our operational providers (OpenAI, Stripe, Lulu, Firebase) process data solely on our behalf to deliver their specific function. Meta receives limited event data through Meta Pixel for advertising measurement and may use that data in accordance with its own privacy policy.

We do use Meta Pixel for advertising conversion tracking, which shares limited event data (page views, sign-up events, purchase events) with Meta (Facebook). This data helps us measure the effectiveness of our advertising but does not include your children's names, photos, or personal profile information. For details on how Meta handles this data, see Meta's Privacy Policy.

6. Limited Third-Party Services

We use a small number of trusted service providers strictly necessary to operate the Service. These providers only receive the minimum data required to perform their specific function:

• Firebase (Google) - Authentication only. Receives your email and authentication credentials.
• OpenAI - AI content generation. Receives child profile details (name, age, interests) and photo data solely to generate stories and illustrations. We use their API with data privacy protections.
• Stripe - Payment processing only. Receives payment details necessary to process transactions. We never see or store your full card number.
• Lulu - Book printing and fulfillment. Receives the book content and shipping address necessary to print and deliver your order.
• Meta (Facebook) - Advertising analytics only. We use Meta Pixel to track page views and conversion events (sign-ups, checkout, purchases) to measure the effectiveness of our advertising. Meta Pixel does not receive your children's names, photos, or profile details. Meta may use this data in accordance with its own privacy policy.

Each of these providers is bound by their own privacy policies and data protection obligations. We have selected them for their strong privacy and security practices.

7. Children's Privacy (COPPA Compliance)

We comply with the Children's Online Privacy Protection Act (COPPA). Our Service is designed for use by parents and guardians, not by children directly.

• We do not knowingly collect personal information directly from children under 13
• All child-related data is provided by and controlled by the parent/guardian account holder
• Parents can review, modify, or delete their child's information at any time
• Child data is used exclusively for creating personalized storybooks and for no other purpose

8. Data Retention

We retain your personal data only for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained while your account is active
• Child profiles and associated photos are retained until you delete them or your account
• Generated storybook content is retained until you delete the book or your account
• Order records may be retained for a reasonable period for legal and accounting purposes
• Upon account deletion, all personal data, child profiles, photos, and generated content will be permanently deleted within 30 days

9. Your Rights

You have the right to:

• Access all personal data we hold about you and your children
• Correct any inaccurate information in your account or child profiles
• Delete your account and all associated data at any time
• Delete individual child profiles and their associated photos and content
• Request a copy of your data in a portable format
• Withdraw consent for data processing (which may result in inability to use the Service)

10. Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

• Essential cookies - Required for authentication and the basic functioning of the Service (e.g., Firebase session cookies).
• Advertising and analytics cookies - We use Meta Pixel, which may set cookies and use similar technologies to track page views and conversion events. This data is shared with Meta (Facebook) to measure advertising effectiveness. Meta may use this information for its own advertising purposes in accordance with its privacy policy.

By using the Service, you acknowledge the use of these tracking technologies as described above. Most web browsers allow you to manage cookie preferences through their settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the Service or via email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at privacy@mylittlestorybooks.com. We take every privacy inquiry seriously and will respond promptly.