Privacy Notice
Last updated: 24 August 2026
This service is provided by Tinkadoo, which is the data controller for the personal data described here. This notice explains what we collect, why, who we share it with and what rights you have.
What we collect and why
- Account data - your email address, display name and login credentials, used to create and secure your account and to contact you about your orders. Legal basis: performance of our contract with you.
- Book details - your child's first name, age band, chosen theme and options, plus the books generated from them. We deliberately ask for nothing else about your child: no surname, no birthdate, no photos, no address. Used to produce and store your books. Legal basis: performance of our contract with you.
- Support messages - what you write to our support assistant or team, used to answer you. Legal basis: contract and legitimate interests.
- Usage and device data - pages visited, time on page, referring site, campaign tags, device type, approximate country and IP address, used for security, fraud prevention and to understand and improve the product. Legal basis: legitimate interests.
- Credit and order records - which credits were granted or spent and when, used for billing accuracy and legal record-keeping. Legal basis: contract and legal obligation.
Card and billing details are collected and processed by Paddle, not by us; we never see or store your card number.
Who we share data with
- Service providers - hosting, database, storage and email providers, and the AI providers that generate book text and artwork, acting on our instructions.
- Paddle.com - our reseller and Merchant of Record, for the sale of our products, subscription management, payments, invoicing and tax compliance.
- Professional advisers - legal and accounting advisers where needed.
- Authorities - where we are required to disclose by law.
We never sell personal data, and we do not use your child's name for advertising.
International transfers
Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
How long we keep it
Account, book and credit records are kept while your account is open and for a reasonable period afterwards so you can return and re-download. Order records are kept as long as tax and accounting law requires. Analytics data is kept in aggregate. When data is no longer needed it is deleted or anonymised. You can ask us to close your account and delete your books at any time.
Your rights
Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent where we rely on it. Contact us through the support widget and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your data protection supervisory authority.
Security
We use appropriate technical and organisational measures: encrypted connections, access controls, row-level database security so one account can never read another's books, and private storage for generated artwork and PDFs.
Cookies and similar technology
We use essential cookies and local storage to keep you signed in and to remember your place in the book wizard, plus a first-party analytics identifier that measures visits and time on page. We do not use third-party advertising or marketing cookies. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.
See also our Terms & Conditions and Refund Policy.
