Privacy Policy

Your family's privacy matters to us

Last updated: February 14, 2026

Information We Collect

We collect information necessary to provide our personalized storybook services. The types of information we collect include:

  • Account Information: When you create an account through our authentication provider (Clerk), we receive your name, email address, and basic profile information. We do not store your password — authentication is handled entirely by Clerk.
  • Child Profiles: To personalize stories, you may provide your child's name, age, and optional details such as interests or favorite things. This information is used solely for story customization.
  • Photos: You may upload photos of your child for AI story generation. Photos are used exclusively to create personalized illustrations and are not shared with third parties beyond our AI image generation service.
  • Payment Information: Payments are processed through Lemon Squeezy, our Merchant of Record. We do not store credit card numbers, bank details, or other sensitive financial data on our servers. Lemon Squeezy handles all payment processing and tax compliance.

How We Use Your Information

We use the information we collect for the following purposes:

  • To create and deliver personalized storybooks featuring your child.
  • To manage your account, process orders, and provide customer support.
  • To communicate with you about your orders, account updates, and important service changes.
  • To improve our services, including the quality of AI-generated stories and illustrations.
  • To ensure the safety and security of our platform and its users.

Third-Party Services

We use the following third-party services to operate our platform. Each has its own privacy policy governing how they handle your data:

  • Clerk — Provides authentication and account management. Clerk processes your login credentials and profile data securely.
  • Lemon Squeezy — Acts as our Merchant of Record for payment processing. They handle all financial transactions, tax calculations, and payment compliance.
  • Google Cloud AI Services — Powers our AI story and image generation, as well as text-to-speech narration. Photos and text prompts are sent to these services for content creation.

Children's Privacy

Magical Hekaya is designed for use by parents and guardians on behalf of their children. We do not knowingly collect personal information directly from children under 13. All data about children is provided by and managed through a parent or guardian's account. For more details, please see our COPPA Compliance page.

Data Retention & Deletion

We retain your personal information and generated content only for as long as necessary to provide our services. You have the right to delete your data at any time:

  • Parents can delete child profiles, uploaded photos, and generated books from their account dashboard at any time.
  • You can request full account deletion by contacting us. We will remove all associated data, including generated content, within 30 days.
  • Uploaded photos used for story generation are not retained beyond the generation process unless saved as part of a completed book.

Your Rights

Depending on your location, you may have specific rights regarding your personal data:

Under GDPR (European Economic Area):

  • Right of Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.

Under CCPA (California):

  • Right to Know: Request disclosure of what personal information we collect, use, and share.
  • Right to Delete: Request deletion of your personal information.
  • Right to Opt-Out: Opt out of the sale of your personal information. We do not sell personal information.

Security

We implement industry-standard security measures to protect your personal information. This includes encryption of data in transit and at rest, secure authentication through Clerk, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your information, please contact us at hello@magicalhekaya.com.