Privacy Policy

1. Who we are

Tiny Tale Tots ("we", "us") makes personalised children's storybooks at tinytaletots.com. We are responsible for the personal data described here.

Tiny Tale Tots, 555 Rue Chabanel O, H2N 2J2, Montreal, QC, Canada. Email: hello@tinytaletots.com

2. Who the service is for

Tiny Tale Tots is for parents, grandparents and other adults aged 18 or over. It is not meant to be used by children. You may only upload photos of a child if you are their parent or legal guardian, or have the parent's or guardian's permission. Before any photo is uploaded we ask you to confirm this.

3. What we collect

• Your email address, when you create an account (we send you a sign-in code; there is no password).
• About your child: first name, age, whether they are a boy or a girl, and the topic you choose for the story. We don't ask for a surname, birthday or school.
• Photos of your child that you upload to draw the character (see section 4).
• What we make for you: the character drawing, the story text, the page pictures and the cover.
• Orders: what you bought, the amount, your email, and for printed books the shipping name, address and phone number. Card details go straight to Stripe; we never see or store them.
• Technical data: basic device and browser information, pages visited, and error reports. Analytics and session recording only run if you allow them (see section 9).

4. Your child's photos and AI

To draw your child as a storybook character, we send the photos you upload to Google's Gemini AI image service. Google processes them to return the drawing, under its API terms as our service provider. The story text is also written by Gemini, using your child's first name, age and the topic you chose.

• The original photos are stored privately and are never shown to anyone else.
• We delete them as soon as you approve the drawing. Photos from a preview you don't finish are deleted automatically within 24 hours of upload.
• We don't use your photos for anything else, and we don't use them to train AI models.
• The drawing and book pictures made from them are kept with your book so you can read it again, until you delete the book or your account.

5. Why we use your data (legal basis)

• To make and deliver your book, and to run your account: this is needed to provide the service you asked for (contract).
• Your child's photos: your consent, which you give with the checkbox before uploading. You can withdraw it at any time by deleting the book or your account.
• Analytics and session recording: your consent, through the cookie banner.
• Keeping the site safe and fixing errors: our legitimate interest in a working, secure service.
• Order records: our legal duty to keep accounting and tax records.

6. Who helps us run the service

We share data only with the companies that help us provide the service, and only what each one needs:

• Amazon Web Services (USA): hosting, storage, sign-in and sending our emails.
• Google Gemini (USA): making the character drawing, pictures and story text.
• TinyPNG (Netherlands): making the finished pictures smaller so pages load quickly. Your original photos are not sent to TinyPNG.
• Stripe: taking payments.
• Gelato: printing and shipping hardcover books (they receive the book file and your shipping details).
• Sentry: error reports, so we can fix problems.
• Google Analytics and Microsoft Clarity: anonymous usage statistics and session recordings, only if you allow them. Clarity hides what you type.

We may also share information if the law requires it. We never sell or rent personal data, and we don't share it for advertising.

7. How long we keep it

• Uploaded photos: deleted when you approve the drawing, and always within 24 hours.
• Books, drawings and pictures: until you delete the book or your account.
• Free previews made without signing in: deleted automatically after 30 days.
• Your account: until you delete it.
• Order records and receipts: as long as tax and accounting law requires (usually up to 7 years).
• Error reports: up to 90 days.

8. Your rights

Wherever you live, you can:

• see the information we hold about you and your child, and get a copy;
• correct it;
• delete it: use My account to delete your account and every book, or delete a single unpaid book in My books;
• withdraw your consent for photos or analytics at any time;
• object to or restrict how we use your data.

Email hello@tinytaletots.com for anything else and we'll answer within 30 days. If you are in the EU or UK you can also complain to your data protection authority. If you are in California, you have the right to know, delete and correct your data, and we do not sell or share personal information.

Parents (COPPA): we collect information about a child only from a parent or guardian, or an adult acting with their permission, and only with their consent, to make the book. You can review or delete your child's information at any time as described above.

9. Cookies

We use a few cookies that the site needs to work, for example to keep you signed in. With your permission we also use Google Analytics and Microsoft Clarity cookies to understand how the site is used. You choose in the banner on your first visit, and you can change your mind with the "Cookie settings" link at the bottom of every page.

10. Security and where data is stored

Data is encrypted in transit and stored privately with Amazon Web Services in the United States. Photos and pictures are only reachable through short-lived private links. If you use the service from outside the US, your data is transferred to the US, protected by our providers' standard contractual safeguards.

11. Changes

If we change this policy we'll update the date at the top, and tell you by email if the change is important.

12. Contact

Tiny Tale Tots, 555 Rue Chabanel O, H2N 2J2, Montreal, QC, Canada. Email: hello@tinytaletots.com