Privacy policy

Policy version: 2026-09-18-provider-retention. Updated 18 September 2026.

What we use and why

We use your email address for sign-in, order updates and PDF delivery. We use the selected family members’ names, roles, pronouns and photographs to check photo eligibility and create personalised Storybook illustrations. Only a parent with authority for the child and permission from each selected caregiver should upload photographs. Storybooks and photographs are private; public sharing is not offered.

OpenAI receives family images

OpenAI processes photographs for safety checks before generation consent, and processes photographs, story details and generated images for illustration generation and review after consent. Please read this notice before choosing photographs.

Under OpenAI’s default policy, abuse-monitoring logs may contain prompts, responses and other request content for up to 30 days. Retention can be longer when required by law or reasonably necessary to protect its services or others from harm. Images flagged as potential child sexual abuse material may be retained for manual review, including under enhanced retention controls. We have not verified Zero Data Retention for this app.

We send images inline. We cannot request or verify deletion of an individual inline request from OpenAI’s abuse-monitoring records. A request setting that disables stored responses does not disable those records. Our deletion receipt never certifies that OpenAI’s copies are gone, including after 30 days.

See OpenAI’s data controls and retention policy for the provider’s terms and exceptions.

Deletion from our storage

Our Source photograph and likeness reference copies expire within 24 hours after upload. We delete rejected photo copies from our storage immediately. Temporary illustrations expire within 24 hours. Our completed Storybook images and PDF access expire five days after the first successful delivery email for that version; email retries do not extend this time. A narrowly scoped Legal hold for child-safety investigation or legal reporting can delay deletion.

We delete stored photo objects, destroy their encryption keys and revoke usable likeness references. We retain limited records of consent, provider processing, deletion attempts, orders and safety obligations separately from the images to operate the service and demonstrate what happened. Backups must not extend the media deadlines and restored data must respect deletion records.

Your choices

You can stop before uploading. The photo guidance asks you to authorise safety checks and acknowledge provider retention. A separate agreement authorises Storybook generation and temporary storage. The receipt records the wording version you accepted. Earlier agreements are not treated as acceptance of this policy.

Use the privacy receipt to withdraw consent and delete Source photographs from our storage. Withdrawal stops further use of those photographs by the app and revokes likeness references. Failed local deletion remains pending for retry. It does not erase OpenAI’s retained records, delivered Storybook copies, or attachments already in your mailbox or downloaded to a device. Use the Storybook deletion option for stored completed Storybooks.

For feedback, concerns or refund requests, email storybook.support@gmail.com. Payment and email delivery providers process the information needed for their services; photo deletion does not delete payment records or retract email. We do not collect payment card details in the Storybook app.