Privacy Policy

Last updated: February 28, 2026

1. Overview

BookWorm-Me ("we," "us," or "our") is committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our personalized children's book creation service.

2. Information We Collect

Account Information

  • Name and email address (when you create an account)
  • Password (stored in hashed form; we never store plain-text passwords)

Photos

  • Photos you upload of family members for book personalization
  • Photos are used exclusively to generate your personalized book illustrations
  • Photos are stored securely in encrypted cloud storage (Cloudflare R2)

Book Creation Data

  • Character names and attributes you provide
  • Story preferences (lesson, interest, age range, art style)
  • Generated stories and illustrations

Payment Information

  • Payment processing is handled entirely by Stripe
  • We do not store credit card numbers or full payment details on our servers
  • We receive only a transaction confirmation and order reference

Shipping Information

  • Shipping addresses for printed book orders (US addresses only)
  • Used solely to fulfill your order

3. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Generate personalized stories and illustrations for your books
  • Process payments and fulfill print orders
  • Improve our AI models and service quality (using anonymized, aggregated data only)
  • Send order confirmations and shipping updates
  • Respond to your support requests

4. Photo Privacy

We take the privacy of your family photos very seriously:

  • No sharing: Your photos are never shared with other users or third parties for marketing
  • Limited processing: Photos are sent to our AI generation providers solely to create your book illustrations
  • Secure storage: Photos are stored in encrypted cloud storage with access controls
  • Deletion: You can delete your photos at any time from your account. Deleted photos are permanently removed from our storage
  • No training: Your photos are not used to train general-purpose AI models

5. Children's Privacy (COPPA Compliance)

BookWorm-Me is designed for use by parents and guardians, not directly by children:

  • We do not knowingly collect personal information from children under 13
  • All accounts must be created by adults (parents or legal guardians)
  • Photos of children must be uploaded by their parent or guardian
  • If we learn that we have collected information from a child under 13 without parental consent, we will delete that information promptly

6. Data Sharing

We share your information only with the following service providers, and only as needed to provide our Service:

  • Google (Gemini AI): Story text generation and image creation
  • Stripe: Payment processing
  • Cloudflare: Hosting, storage, and content delivery
  • Print fulfillment partners: Printing and shipping your physical books

We do not sell your personal information to anyone. We do not share your data with advertisers.

7. Data Security

We implement industry-standard security measures including:

  • HTTPS encryption for all data in transit
  • Encrypted cloud storage for photos and generated content
  • Salted password hashing (passwords are never stored in plain text)
  • JWT-based authentication with token expiration
  • Rate limiting to prevent abuse

8. Your Rights

You have the right to:

  • Access: View the personal information we hold about you
  • Correction: Update or correct your account information
  • Deletion: Delete your account and all associated data
  • Export: Download your book data
  • Withdraw consent: Stop using the Service at any time

To exercise any of these rights, contact us at support@bookworm-me.com.

9. Cookies and Local Storage

We use browser local storage to save your authentication state, draft book data, and preferences. We do not use third-party tracking cookies or analytics trackers. Your book drafts are stored locally in your browser and are not transmitted to our servers until you explicitly save or generate your book.

10. Data Retention

We retain your account data and generated books for as long as your account is active. If you delete your account, all personal data, photos, and generated books will be permanently deleted within 30 days. Anonymized, aggregated usage statistics may be retained for service improvement purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@bookworm-me.com.