Privacy notice

Data we process

Account: your email address, name or preferred greeting, language and optional marketing consent.

Books: the details you enter to personalise a book (a first name or nickname, age, chosen look or pet details, two short traits) and the resulting story text and illustration settings.

Purchases: order records (book pack, amount, currency, status, dates). Card details never reach our servers.

Usage: anonymous counts of events such as opening a sample book or starting checkout, without names, photos, book content or identifiers.

Analytics cookies (only if you allow them): if you click Accept in the cookie banner, we use Google Analytics to understand which pages are visited. Google sets cookies (_ga) and receives your IP address, browser and device type, the page address without any query string or identifiers, and the referring site. We don't send page titles of private pages, book content, names, photos or your email, and advertising features are off. You can change your choice at any time via Cookie preferences in the footer; if you decline, Google Analytics is not loaded.

Photos stay on your device

If you add a photo in the creator, it is checked and stored only in your browser on that device to help you choose the look. It is not uploaded to our servers or sent to third parties. You can remove it at any time.

Why we process data

To provide your account and books (contract), to take payments and keep accounting records (legal obligation), to keep the service secure (legitimate interest), and to send marketing emails only if you opted in (consent, which you can withdraw).

Who helps us (processors)

Hosting: Microsoft Azure. Sign-in and account data: Supabase. Analytics (only with your consent): Google Analytics (Google Ireland Limited / Google LLC). Emails: Resend. Payments: Creem, which acts as Merchant of Record and processes your payment and billing details as an independent controller under its own privacy policy. We send Creem only an internal order reference and your account email — never your child's or pet's details.

International transfers

Some providers may process data outside your country. Where required, transfers rely on appropriate safeguards offered by the provider. Details are available on request.

How long we keep data

Books and account data: until you delete them or your account. Payment and refund records: as long as accounting and tax law requires. Security logs: for a limited period and without passwords, tokens or email links.

Your rights

You can access, correct or delete your data, object to certain processing, withdraw consent and request a copy. Many actions are available in your account; for anything else contact support@kidleobooks.com. You can also complain to your data protection authority.