Privacy Policy
Last updated: August 10, 2026
You are about to hand us a picture of your child, so here are straight answers. The buttons — cookie settings, a copy of your data, deletion — live on Your Privacy Choices.
Who we are, and how to reach us
KindFable is a personalized children’s storybook service, operated from Coquitlam, British Columbia, Canada. In this policy “KindFable”, “we” and “us” mean the operator of the service, and we are the controller of the personal data described here. For anything on this page, email privacy@kindfable.com — a monitored mailbox and the fastest route to a person.
We do not currently sell in the European Economic Area, the United Kingdom or Switzerland — browsing and the free preview stay open everywhere; see “Where we can sell” in our Terms. KindFable is meant to be used by a parent or guardian on a child’s behalf — never by a child.
What we collect
- A photo you upload to create a cartoon avatar. We never write the original to our storage, our database or our logs — see “Your child’s photo” below for exactly where it does go.
- Child details you provide: first name, age, interests, and the short “what happened this week” note used to write the story.
- Derived content: the cartoon avatar, illustrated pages and story text generated for you — plus, if you create them, narrated audio and the story’s song and lyrics — and notes the system keeps to make future stories more personal.
- Account & payment: your email, and payment status handled by our payment processor, Stripe. We never see or store your full card number.
- Delivery details: if you order a printed book, the shipping name and address we pass to our printer.
- Sign-in details: if you sign in with Google, we receive your name, email address, and profile picture from your Google Account.
- Messages you send us: support emails and their attachments, and anything you type to our in-app assistant.
- Technical records: IP address, browser user-agent, sign-in events and rate-limit counters, kept to secure accounts and stop abuse.
Why we use it, and our legal basis
Everything we do with your data, what it uses, and what makes it lawful — in one table.
| What we do | What it uses | Legal basis |
|---|---|---|
| Write, illustrate and deliver the book you asked for | Your child’s first name, age, interests, your week note, the story and pictures produced from them | Performance of a contract with you |
| Turn the photo into a cartoon avatar | The uploaded photo, and the avatar drawn from it | Your consent as parent or guardian, given at upload and withdrawable |
| Take payment, print and ship | Email, order details, shipping name and address | Performance of a contract; keeping the tax and accounting record is a legal obligation |
| Safety and moderation checks on what is uploaded | The uploaded photo, the text you type, your IP address | Our legitimate interest in protecting children and the service from abuse, and our legal obligations around illegal material |
| Answer your support messages | Your email, your message and anything you attach | Performance of a contract, and our legitimate interest in running a service people can get help with |
| Advertising, analytics and referral measurement | Pages visited, campaign parameters, order value, a one-way hash of your email | Your consent — off until you give it (see “Cookies and advertising”) |
| Keeping accounts secure and preventing fraud | IP address, browser user-agent, sign-in and abuse-check logs | Our legitimate interest in the security of the service and our customers |
| Emailing you about your book, your order and delivery | Your email address and order status | Performance of a contract |
We do not sell your child’s data, and no child’s photo, avatar or story is ever used for advertising.
Your child’s photo — the part that matters most
When you choose a photo, we re-encode it in memory, which strips embedded metadata such as GPS location. To draw the avatar, the picture is sent to the AI provider that writes and illustrates your book, which processes it in the United States, where it sits under United States law while it is being handled. It is sent three separate times, at different moments:
- When you pick the photo — a quick check that there is a person in the picture at all.
- When your book starts being made — an automated safety check before any illustration work begins.
- At that same point — the drawing call that paints the avatar.
In between, the picture stays on your device. KindFable never writes the original photo to our storage, our database or our logs. Only the cartoon avatar is kept.
That provider handles what it receives under its own terms and may hold API inputs briefly for abuse monitoring — we have not verified zero retention, so we will not claim it. And if you email a photo to support, that copy stays with your ticket until you ask us to remove it.
The avatar is a drawing, not a face record. We build and store no face template, and we perform no face matching, face search or face-based identification — on anyone. It is still a picture of your child, so we still ask your permission before it goes anywhere.
If you add a companion — a grandparent, sibling, friend or pet — from a photo, that picture goes to the same provider twice, both at the moment its avatar is made.
We describe our AI providers by the job each does rather than by name. Want the actual company? Email privacy@kindfable.com and we will tell you.
Consent, and taking it back
Before your child’s photo is sent, you tick one box in the create flow confirming three things: that you are the child’s parent or guardian, that we may send this photo to our AI provider in the United States to draw the avatar, and that you accept our Terms and this policy. A companion’s photo has its own box, attesting that person’s permission — or their parent’s, if they are a child. Nothing is transmitted until the box is ticked, and we keep a record of which wording you agreed to and when.
You can withdraw that consent at any time by deleting the book, or by emailing privacy@kindfable.com — which is also how you have your whole account deleted; we confirm by email when it is done. Withdrawing stops any further use and removes the avatar and pages; it cannot undo generation that already happened.
Signing in with Google
You can create your KindFable account and sign in with your Google Account. Google then shares your name, email address, and profile picture with us, and we use them for a single purpose: to create and secure your account — so your books are saved to your library, you can sign back in, and we can email you about your books and orders.
We request only basic sign-in permissions and do not access any other Google data — no Gmail, Drive, Contacts or Calendar. We never sell your Google account information, and we share it only with the service providers that run KindFable (for example, our authentication provider Supabase and our email provider). If you buy a book and you have accepted advertising cookies, a one-way hashed form of your email goes to the advertising partners listed below so the sale can be matched to the ad you clicked; that hash cannot be reversed. If you have not accepted, nothing is sent. KindFable’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect KindFable at any time in your Google Account permissions, and you can delete your KindFable account and data at any time (see “Your rights”).
The assistant you chat with
If you talk to our in-app assistant, we keep the conversation linked to your account (or your browser session) so it can remember the thread, so we can help if it becomes a support request, and to catch abuse. Your messages go to the AI provider used for the in-app assistant (in the table below), in the United States, to produce a reply; we do not permit them to be used for advertising. Please do not type anything you would not want kept. You can delete any conversation from the chat itself, and deleting your account deletes them all.
Who else touches your data
The companies that process your data on our behalf, and what each one receives. Our AI providers and our print partner are described by the job each does — email privacy@kindfable.com for the company behind any row; the rest are named outright.
| Provider | What it receives | Where it is processed |
|---|---|---|
| The AI provider that writes the story and paints the illustrations | The uploaded photo (three sends, above); your child’s first name, age, interests and your note; the story text and the images it draws | United States |
| The text-to-speech provider that records the narration | The finished story text and your child’s first name, to read the book aloud | United States |
| The music provider that composes the story song | The song lyrics written from your story, and the musical style | United States, via an API intermediary |
| The AI provider used for quality review, support drafting and the in-app assistant | Finished pages when we review a book’s quality before print; support emails when we draft a reply; your messages to the in-app assistant | United States |
| The print partner that prints and ships your book | Your finished book file, and your full shipping name and address | United States, with printing partners worldwide |
| Stripe — payments | Your email, the amount, and your card details, which go to Stripe directly and never through us | United States and Ireland |
| Supabase — database, sign-in and file storage | Everything we store: your account, your books, avatars and page images | United States |
| Vercel — hosting | Requests to the site, including IP address and browser user-agent | United States |
| Inngest — the queue that runs long jobs | Only the reference numbers of the work to be done — a book id, an avatar id, your account id. No photo, no story text and no name is ever placed in a queued job | United States |
| Google Places — address suggestions at checkout | Only what you type into the shipping-address box, while you type it. Skip the suggestions and nothing is sent | United States |
| Resend — email delivery | Your email address and the contents of the emails we send you | United States |
| Google, Meta, TikTok, Pinterest, Rewardful — advertising and analytics | Only if you accept: pages visited, campaign parameters, order value, a one-way hash of your email. Never a photo, an avatar or story text | United States |
Each of these companies may use its own sub-processors in other countries, and we disclose data where the law compels us to or to protect a child from harm. Wherever you live — including in Canada, where we are — your data is transferred to the United States, which may not offer the same legal protection as your own country. Ask us what safeguard applies to a specific provider and we will tell you.
Cookies and advertising
Advertising and analytics are off until you turn them on — everywhere, for everybody. Until you answer the banner, no ad or analytics cookie is set and nothing is shared with any partner; declining is one click, in the same size button as accepting, and the site works the same either way. The only always-on cookies are the strictly necessary ones: sign-in, a guest’s way back to their book, your cookie answer, and security.
If you accept, these partners may set cookies or receive events about your visit: Google (Analytics and Ads), Meta (Facebook and Instagram), TikTok, Pinterest, and Rewardful, our referral partner. Accepting also lets us keep a first-party attribution cookie for up to 90 days (campaign parameters and the site you arrived from), keep a one-time copy of it with your account when you sign up so we know which campaign brought you, and report the order value plus a one-way hashed (irreversible) form of your email address when you buy, so a sale can be matched to the ad you clicked. Decline and none of that happens — the purchase report is suppressed too, not just the cookie.
We never send your child’s photo, their avatar or any story text to an advertising partner, with or without consent — and on the page where you upload a photo, advertising and analytics scripts are blocked outright, whatever you accepted.
Changing your mind. Reopen the panel any time with or from the footer of any page; withdrawing expires the attribution cookie immediately. If your browser sends the Global Privacy Control signal, we honour it: a purchase from that browser is never reported to an advertising partner. Sharing activity with advertising partners may count as a “sale” or “share” under some US state laws; declining is your opt-out, and GPC is honoured as described above. See Your Privacy Choices.
Decisions made automatically
Three checks run without a human looking first — none profiles you, but one can stop you using the site:
- The photo check when you pick a picture. It can only stop you for one reason: there is no person in the photo at all. Anything else is at most a gentle tip, and if the check errors or is unsure, the photo passes.
- The content safety check on uploaded photos and typed text before generation — a flag refuses that upload.
- An automatic block. Three severe safety flags from the same internet address within 24 hours block it for 30 days; the block expires by itself and an administrator can lift it.
If one of these goes against you wrongly, email privacy@kindfable.com — a person will review it and reverse a mistake. A flagged photo leaves only categories and a timestamp, never a copy of the image; flagged text keeps a short excerpt for human review.
How long we keep things
These are the periods our systems actually run today. Where something has no automatic expiry yet, we say so.
| What | How long |
|---|---|
| The original photo you upload | Never written to our storage, database or logs — it exists only while being processed. The AI provider that draws the avatar keeps what it receives under its own terms, which may include holding API inputs briefly for abuse monitoring |
| A book started without an account, never paid for and never saved to one | Deleted automatically 14 days after it was made, together with its avatar and page images — by a job that runs every day |
| An avatar made without an account and never used in a book | Same 14-day sweep |
| Books, avatars, audio and notes in your account | Kept until you delete the book or your account — we will not quietly delete a keepsake you paid for |
| A book you bought as a guest, without signing up | Kept until you ask us to delete it. Because you paid for it, the 14-day sweep deliberately never touches it |
| Conversations with the in-app assistant | Until you delete the conversation, or delete your account |
| Support emails and anything attached to them | Kept with the support ticket, and currently they survive account deletion. No automatic expiry yet — ask us and we will delete your support history |
| Order, payment and tax records | Kept as long as tax and accounting law requires |
| Consent records | Kept as proof that permission was given — wording version, a hash of it, and the timestamp. Your IP address and device details are erased from them when you delete your account |
| Safety flags and security logs | Kept for fraud prevention and defence against abuse; de-identified when you delete your account. No automatic expiry yet |
| Cookies | Your cookie answer: 6 months. Attribution cookie: up to 90 days, expired immediately if you withdraw. Sign-in cookie: until you sign out or the session expires |
Storage and security
Data is stored with our infrastructure provider and is encrypted at rest and in transit. Child imagery lives in private storage and is served only via short-lived signed links — never on a public URL. Access to the admin console is restricted, and advertising and analytics scripts never load there.
Your rights
You can ask us to:
- Access — send you a copy of everything we hold about you and your child.
- Correct — fix anything that is wrong or out of date.
- Erase — delete your data, including your child’s.
- Restrict — pause what we do with it while a question is being sorted out.
- Port — hand you a machine-readable copy, or send it to another service.
- Object — tell us to stop processing that we base on legitimate interests.
- Withdraw consent — for the avatar, or for advertising and analytics, at any time.
To use any of these, email privacy@kindfable.com and tell us which one. We reply within 30 days, free of charge; we may verify who you are before handing over a copy of a child’s data. Deleting your account permanently removes your children’s details, books, generated images, avatars, your notes, and your conversations with our assistant.
What survives deletion: a de-identified consent receipt (wording version, hash, timestamp — IP and device details erased), support history (ask and we delete that too), your email on our do-not-contact list, order and tax records the law requires, and security logs.
The sample books on our site
Every example book on our marketing pages is one we made ourselves. No real customer’s child appears in them, and by design none ever can — your book is private to your library.
Changes to this policy
If we change how we handle your data, we update this page and its date. A significant change — a new category of data, a new advertising partner, a new purpose — is announced by email or in the app before it takes effect, with fresh consent where the law requires it.
Contact
Anything on this page worrying you, or something not right? Come straight to us — email privacy@kindfable.com and we will sort it out. For orders, refunds and everything non-privacy, support@kindfable.com.
See also our Terms of Service and Your Privacy Choices.