Privacy Policy
Version 2026-10-22.draft1. Last updated October 22, 2026.
Draft for legal review. Items in brackets are still being decided by our lawyers.
The short version
Bookworms Publishing helps a child talk a picture book into being with Pip, our bookworm character, and helps a parent print it. The parent holds the account. A child never has one. We collect as little as we can, we never sell personal information, and a parent can see and delete everything at any time.
This is a draft written in plain language. It is being reviewed by our lawyers before we open to families. [COUNSEL: confirm final wording and effective date]
Who we are
Bookworms Publishing [COUNSEL: legal entity name, registered address and country] runs bookwormspublishing.com. You can reach us at privacy@bookwormspublishing.com.
What we collect from parents
- Your name and email, to run your account and send consent, book and order emails.
- The record of your consent: what you agreed to, which version, and when.
- For a printed book: the shipping name, address, phone number and email, and the message you write inside the cover.
- Payment status for your orders. Card details stay with the payment processor.
- On marketing and parent pages only: anonymous visit counts through an analytics tool, with IP anonymization on.
How we use it
- To make the book your child tells, and to print and ship it when you order.
- To keep the story safe for a child, with automatic checks on words and pictures.
- To send account, consent, book ready and order emails.
- To prevent abuse and keep costs in check, for example daily picture limits.
- We do not sell personal information and we do not show ads.
- Our legal bases for using this information [COUNSEL: legal bases if serving the EU or UK]
Children's privacy
Our service is made for children aged 3 to 10, used with a parent or legal guardian. A child can only use Kid Mode after the parent gives verified consent by email. We follow the approach of the US Children's Online Privacy Protection Act (COPPA). [COUNSEL: confirm COPPA notice requirements are met, and any state or international children's privacy laws that apply]
What we collect from a child
- A first name or nickname, typed by the parent.
- An age band (3 to 5, 6 to 7 or 8 to 10). Never a birthdate.
- An illustrated avatar the parent picks. Never a photo.
- The child's voice, streamed live to our voice provider only while the child talks to Pip. Recording is switched off, and we never store the audio.
- The words of the story, kept as text, and the pictures made from them.
Pip never asks for and does not keep a last name, address, school, phone number or email. There is no account, no chat with other people, no ads and no third party analytics anywhere a child can reach.
Why
Only to make the child's book: to hold the conversation, turn the child's words into pages, draw the pictures and, if the parent orders, print it.
How long we keep it
- Story text and pictures: until the parent deletes them, the child, or the account.
- Voice conversation transcripts at the voice provider: 30 days, then deleted by the provider. When a parent deletes a child we also ask the provider to delete that child's conversations right away. [COUNSEL: retention period for transcripts]
- Live audio: not kept.
- Inactive accounts [COUNSEL: retention period for inactive accounts]
Who processes it
The AI providers that run the conversation and make the story and pictures, and, only for a book that is ordered, the printing partner. Each is listed in "Who helps us" below. [COUNSEL: confirm zero data retention agreements are signed with each AI provider before launch]
A parent's rights
- Review everything we hold about your child in your parent area at any time.
- Delete one child and everything they made from Settings, or delete your whole account.
- Withdraw consent at any time, which stops Kid Mode for that child.
- Refuse further collection while keeping what has already been made.
If a paid order exists we keep only what accounting and shipping need: the order record with the book title. [COUNSEL: accounting record retention period]
How to contact us
Email privacy@bookwormspublishing.com with any question about your child's information. We answer within [COUNSEL: response time commitment].
Who helps us
These companies process information for us under contract, only to provide the service.[COUNSEL: confirm data processing agreements are in place with each one]
| Who | What they do | What they receive |
|---|---|---|
| OpenAI | Writes and checks story text, plans and draws the pictures | Story words and picture descriptions. Never the parent's email or address. |
| ElevenLabs | Runs the live voice conversation with Pip | The child's voice, streamed live during the conversation. Recording is off. Text transcripts are kept by this provider for 30 days. |
| fal.ai | Enlarges finished pictures to print quality after an order is paid | Finished pictures only. Never the child's words. |
| Lulu | Prints and ships the book | The print files, and the shipping name, address, phone number and email. |
| Stripe | Takes card payments | Payment details, the order amount and the parent's email. We never see full card numbers. |
| Lovable and its cloud partners | Hosts the site, the database, file storage and sends account and order email | Everything stored in the parent account. |
| Google Analytics | Counts visits on marketing and parent pages | Page visits with IP anonymization. Never Kid Mode, never child names, story text or ids. |
How we keep it safe
Data is encrypted in transit, files are stored privately, and each family can only read its own records. No system is perfect. If something goes wrong we will tell affected parents [COUNSEL: breach notification commitment].
Your rights
You can see, correct, export and delete your information. Some places give extra rights, such as California, the EU and the UK. [COUNSEL: state and international rights wording, and the countries we serve]
Where data is stored
Our database is in the Americas. Some helpers process data in other countries. [COUNSEL: international transfer mechanism]
Changes to this policy
We will post any change here with a new version number and email parents about important changes before they take effect. Current version: 2026-10-22.draft1.