Privacy Policy | Kidoory — Data Minimisation by Design

Our promise in plain English: We built Kidoory around data minimisation. Memories-page photos are embedded in your browser and never leave it; the optional illustration photo is used once, never stored, and immediately discarded. The story details you type are sent to named AI partners only to create your book — never to train AI, never sold. We keep only what's needed to print, deliver, and account for your order. We never advertise. We never track. We never sell data. Ever.

Who We Are

Kidoory is a trading name of Solo Digital Ltd, registered in England & Wales (Company No. 17220868). We operate the website kidoory.com and provide personalised AI-generated children's storybooks.

For privacy questions, contact us at: support@kidoory.com

What Information We Collect

Your photos — two features, both private

Memories-page photos (the optional scrapbook page) are embedded into your book entirely in your browser — they are never transmitted to us or anyone else.

Optional illustration photo: if you choose the photo-to-illustration feature, that photo is sent over encrypted HTTPS and passed to Google Gemini solely to paint your child's watercolour portrait. It is never saved to any storage, database, or log — it is discarded immediately after the illustration is created.

Information sent to our AI partners to create your book

To write and illustrate your story, the text details you enter are sent securely (over encrypted HTTPS) to our AI partners — Google (Gemini) and Anthropic (Claude). This includes:

Your child's name, age, and personality description
Friends' or pets' names, interests, dreams, and memories you choose to share
The story theme and any special message

This data is used solely to generate your story and illustrations. Under our API terms with these providers, your data is not used to train their AI models. Preview stories are assigned a reference ID and retained for up to 30 days for customer support, then automatically deleted. When you purchase, your finished story (including the personalisation details inside it) is stored securely on our infrastructure so we can print your book, regenerate your downloads and audio narration, and assist with support — and it is deleted on your request at any time — and in any case automatically deleted 12 months after your book is delivered (or 12 months after purchase for digital-only orders).

Information we do collect

We collect only what is strictly necessary to fulfil your order:

Shipping address — passed directly to our print partner (Gelato) to deliver your book
Email address — used only to send your order confirmation and tracking information
Order reference number — so you can track your order
Payment confirmation — we receive only a confirmation from Stripe. We never see or store your card details
Your story and personalisation details — for purchased books, the finished story (including your child's first name) is stored securely so we can print your book, provide re-downloads and audio, and help with any support query. Deleted on request.

How We Use Your Information

We use the information we collect solely to:

Print and ship your personalised book
Send you order confirmation and tracking emails
Handle any customer service queries about your order
Process refunds if required

We never use your information for marketing, advertising, analytics, or any purpose beyond fulfilling your order.

Our Technology Partners

We are transparent about every technology partner involved in your order:

Google Gemini (AI — story text & illustrations) — Your story is written and illustrated using Google's Gemini models via the Gemini API. The text details you enter are sent to Google solely to generate your book. Under the paid Gemini API terms, this data is not used to train Google's models. Gemini API Terms → · Google Privacy Policy →

Anthropic Claude (AI — backup story writer) — As a fallback and for our support assistant, story generation may use Claude, created by Anthropic. Your personalisation data is sent to Anthropic's API solely to generate the story. Anthropic does not train on data submitted via its API. Anthropic Privacy Policy →

Stripe (Payments) — Card payments are processed by Stripe, Inc. Kidoory never sees, stores, or has access to your payment card details. Stripe is PCI DSS Level 1 certified — the highest level of payment security. Stripe Privacy Policy →

PayPal & Razorpay (Payments) — Depending on your region and choice, payment may instead be processed by PayPal or Razorpay (cards & UPI in India). Kidoory never sees or stores your payment details with any provider. PayPal Privacy → · Razorpay Privacy →

ElevenLabs & Google Cloud (Audio narration) — If you add audio narration, your story text is sent to ElevenLabs or Google Cloud Text-to-Speech solely to create the narration MP3. It is not used to train their models. ElevenLabs Privacy → · Google Cloud Privacy →

Gelato (Printing & Shipping) — Your shipping address and book PDF are shared with Gelato, our global print partner, solely to print and deliver your book. Gelato operates print facilities in 32 countries. Gelato Privacy Policy →

Cloudflare (Hosting & Security) — Our website is hosted on Cloudflare Pages. Cloudflare provides CDN, DDoS protection, and security services. They process connection metadata as part of normal internet infrastructure. Cloudflare Privacy Policy →

Resend (Email) — Order confirmation and tracking emails are sent via Resend. Only your email address and order details are shared. Resend Privacy Policy →

No Advertising. No Tracking. No Cookies.

Kidoory does not:

Use advertising networks or display ads
Use analytics tools (Google Analytics, Facebook Pixel, or similar)
Use tracking cookies
Participate in data brokers or data marketplaces
Sell, rent, or share your data with any third party for commercial purposes
Build profiles about your behaviour or preferences
Retarget you with ads on other websites

We use only three essential cookies — order session, theme preference, and language preference (full table below). No consent banner is needed because we use no non-essential cookies.

Children's Privacy (COPPA & GDPR-K)

We take children's privacy with the utmost seriousness. Our service is directed at adults (parents and gift-givers) who are creating books for children. Kidoory does not knowingly collect any personal data from children directly.

Memories-page photos are processed only in your browser; the optional illustration photo is transmitted once, solely to create the artwork, and is never stored. The text details you provide are sent to our AI partners (Google, Anthropic, and ElevenLabs (for audio narration)) solely to generate the book, are not used to train their models; purchased stories are retained securely only to fulfil and support your order, and preview stories auto-delete within 30 days. The child's first name stored for printing is not linked to any other personal information. If you are in the UK/EU and wish to exercise any data rights, contact support@kidoory.com.

Cookies — Honest Disclosure

We use the minimum number of cookies possible. Here is exactly what we use and why:

🍪 What cookies Kidoory uses

Cookie	Purpose	Duration	Essential?
Session cookie	Maintains your order session	Session only	✅ Yes
kidoory-theme	Remembers your dark/light mode preference	1 year	✅ Yes
kidoory-lang	Remembers your language preference	1 year	✅ Yes

We use zero advertising cookies, zero tracking cookies, and zero analytics cookies. No third-party cookies are placed by us. Stripe may place their own payment security cookies during checkout — see Stripe's Privacy Policy.

Currency & Language Detection — How It Works

To show you prices in your local currency, we detect your approximate country using Cloudflare's built-in country signal (the standard CF-IPCountry header derived from your connection). Here is exactly what this means:

We determine only your two-letter country code — not your city or precise location
This is provided by Cloudflare as part of normal hosting; no separate third-party lookup service is used
We do not store this on our servers — it is held in your browser's session memory only
Detection happens once per visit

You can always override your currency and language using the switchers in the navigation. Your preference is saved in your browser (not our servers).

AI-Generated Content — Important Disclosure

⚠️ Please read before ordering: Stories and illustrations on Kidoory are generated by AI — primarily Google's Gemini models, with Anthropic's Claude as a backup writer. While we take great care to produce wonderful, appropriate stories, AI-generated content can occasionally contain inaccuracies, unexpected phrasing, or content that doesn't perfectly match your expectations.

We strongly encourage you to read your child's complete story preview before placing any order. Once an order is placed and printing begins, we cannot modify the story content.

Learn more about AI limitations from Anthropic →

Your Rights (GDPR)

If you are based in the UK or EU, you have the following rights:

Right of access — You can request what data we hold about you
Right to erasure — You can request deletion of your data
Right to portability — You can request a copy of your data
Right to rectification — You can correct inaccurate data
Right to object — You can object to our processing

To exercise any of these rights, email support@kidoory.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Data Retention

We retain order data (shipping address, email, order ID) for 7 years as required by UK financial regulations for tax records. After 7 years, all order data is permanently deleted. Preview stories are automatically deleted within 30 days. For purchased books, story content and personalisation data are retained securely so we can provide re-downloads, audio narration, and customer support — and are deleted at any time on your request. All purchased-order content is in any case automatically deleted 12 months after delivery (digital-only orders: 12 months after purchase).

Security

All data is transmitted over encrypted HTTPS connections. Our infrastructure is hosted on Cloudflare, which provides enterprise-grade security. We conduct regular security reviews and follow security best practices.

Changes to This Policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of Kidoory after changes constitutes acceptance of the updated policy.

Contact Us

For any privacy concerns or questions:

Email: support@kidoory.com
Company: Solo Digital Ltd, Registered in England & Wales, Company No. 17220868