Privacy Policy

Last updated: 17 June 2026

Draft for review. This policy is a working draft and is not legal advice. Have it reviewed by a qualified professional (or generate a compliant version via a service like Termly/Iubenda) before launch. Placeholders in [brackets] must be completed.

BraveBound Books ("we", "us") creates personalized children's books. This policy explains what information we collect, how we use it, and the choices you have. Our service is directed to parents and guardians, not to children.

Who we are

Data controller: BraveBound Books, [legal entity name], [business postal address]. Contact: hello@braveboundbooks.com.

Information we collect

From you (the parent/guardian): email address, and—if you purchase—billing and shipping details processed by our payment and print partners.
About the child, provided by you: first name, age, optional physical traits, and the fear to be featured in the story. You provide this on the child's behalf.
Generated content: the story text and illustrations created for you.
Technical data: basic usage data needed to operate the site.

How we use your information

To generate, store, and deliver your personalized preview and full book.
To process payments and fulfill physical print orders.
To send you service emails (order confirmation, your download link/attachment).
To send marketing emails only if you opt in; you can unsubscribe at any time.

Legal bases (GDPR/UK GDPR)

We process data to perform our contract with you (creating and delivering your book), with your consent (marketing emails), and for our legitimate interests in operating and improving the service.

Service providers we share data with

We share data only with providers that help us run the service:

Supabase — database and secure file storage.
Stripe — payment processing (we do not store card numbers).
Google (Gemini) — AI generation of story text and illustrations.
Lulu — print-on-demand and shipping of physical books.
[Email provider] — sending transactional and (with consent) marketing emails.

Children's privacy (COPPA)

Our service is intended for use by adults. We do not knowingly collect information directly from children. The child-related details (name, age, traits, fear) are supplied by a parent or guardian for the sole purpose of personalizing the book. If you believe a child has provided us information directly, contact us and we will delete it.

Data retention

We keep your stories and order data for as long as your account is active or as needed to provide the service and meet legal obligations. You can request deletion at any time.

Your rights

Depending on your location (e.g. GDPR/UK GDPR, CCPA), you may have the right to access, correct, delete, or export your data, and to withdraw consent. To exercise these rights, email us at hello@braveboundbooks.com.

International transfers

Our providers may process data in the United States and other countries. Where required, appropriate safeguards are used for international transfers.

Changes

We may update this policy. Material changes will be reflected by the "last updated" date above.