Skip to main content

Effective 2 September 2026

Privacy Policy

This policy explains what personal data Childbook.ai processes, why it is needed, who supports that processing, and the choices available to you.

Controller and contact

Childbook.ai is operated from Poland and is registered under REGON 363032711 and TIN PL9691603940. Childbook.ai is the controller for the personal data described here unless a separate business agreement states otherwise. Contact [email protected] for privacy requests. See the Company page for the published operator and contact details.

Data we process

  • Account and profile information, such as name, email address, login details, subscription status, and organization membership.
  • Project content, including story text, prompts, uploaded photos, character details, logos, book layouts, generated illustrations, and exported files.
  • Transaction and fulfillment information, such as subscription or order identifiers, billing country, tax information, delivery address, print specification, and order status. Payment-card details are handled by the payment provider rather than stored directly by Childbook.ai.
  • Support, sales, feedback, and other communications submitted to us.
  • Technical and usage information, including IP address, device and browser data, page activity, consent choices, attribution data, errors, and security logs.

Purposes and legal bases

  • Contract: create and manage accounts, provide subscriptions and credits, process requested books, generate files, obtain print quotes, fulfill orders, and provide support.
  • Legitimate interests: secure the service, prevent abuse, diagnose errors, improve reliability, understand product use, and answer business inquiries, balanced against user rights.
  • Consent: optional analytics, advertising measurement, newsletters, and other processing where consent is requested. Consent can be withdrawn for future processing.
  • Legal obligations: maintain required tax, accounting, transaction, fraud-prevention, and compliance records and respond to lawful requests.

Photos and children’s information

The service is intended to be operated by adults. You must have authority to upload every photo and to request the relevant personalization. Uploaded photos and character information are used to provide the requested generation and editing functions, not to identify or contact the child.

You can remove photos through available account or project controls or request help from support. Uploaded photos are deleted no later than 14 days after the related subscription ends, except where shorter deletion is requested and technically available or longer retention is legally required. Generated illustrations and project output may remain with the project until deleted or the account is closed, subject to limited backups and legal retention.

Service providers and recipients

We disclose only the data needed for service providers to perform their role. Provider categories include payment and tax processing, cloud hosting, databases and file storage, email delivery, authentication, analytics and error monitoring, AI generation, customer support, print production, and shipping. A print or shipping provider receives order details only when a print quote or order requires them.

Data may also be disclosed when required by law, to protect users or the service, in connection with a corporate transaction, or at your direction. Childbook.ai does not sell uploaded photos or generated project content.

International transfers

Some providers process data outside Poland or the European Economic Area. Where required, transfers rely on an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism. Contact support for information relevant to a specific processing activity.

Retention

Data is kept only as long as needed for the purpose collected. Account and project data is generally retained while the account is active and for a limited period needed for recovery, support, security, or deletion processing. Transaction, tax, and accounting records are retained for legally required periods. Support and sales communications are retained while the request is handled and as needed to document the relationship. Security logs and backups expire according to operational retention schedules.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing. You may withdraw consent without affecting earlier lawful processing and object to direct marketing at any time. We may need to verify your identity before completing a request.

Send requests to [email protected]. You may also complain to the Polish data protection authority, Urząd Ochrony Danych Osobowych, or another competent supervisory authority.

Security and automated decisions

We use organizational and technical safeguards appropriate to the service, but no internet service can guarantee absolute security. Childbook.ai does not use the personal data described here to make solely automated decisions that produce legal or similarly significant effects about you.

Cookies and external links

Necessary storage supports login, account security, checkout, and user choices. Optional analytics or advertising technologies operate according to the consent controls shown to you. External websites have their own privacy practices, and their policies apply after you follow an external link.

Policy changes

This policy may be updated when the service, providers, or legal requirements change. Material changes will be highlighted through the service or another appropriate channel, and the effective date above will be updated.