What we hold, and for how long

TaleForMe is operated by Conjora Limited, Ireland, which is the data controller for everything described here. Contact us at hello@taleforme.com.

• Your account: email address, a password (stored only as a hash), and the first name you give us.
• What you tell us about your child: their first name, age, how they like to be referred to, optional appearance details, personality, favourite things, the names and relationships of family, friends and pets, and anything you write in the free-text boxes.
• An optional photograph of your child — see below, because it is treated differently from everything else.
• The books themselves: the story text, the illustrations, your title and dedication, and how far you have read.
• Orders: what you bought, when, and a delivery address for printed books. Card details are handled entirely by Stripe and never reach us.
• Basic analytics: which pages are visited and which buttons are pressed, without cookies and without identifying anybody. Never your child’s name, age, appearance, photograph or anything you typed about them.
• An email address, if you ask to be told when printed books open. Kept for that one email and nothing else — no newsletter, no other list, and the address is stored on its own, not attached to your child or a book.

This is the most sensitive thing the product touches, so it has the strictest rule:

• A photograph is optional. Most books are made without one.
• It is stored in private storage that has no public address and that no other customer can reach.
• It is used once, in a single step: to note hair, colouring and eyewear in writing, and to draw one original illustrated character from it.
• Every page of the book is drawn from that drawing, never from the photograph. The photo reaches an illustrator exactly once, through a link that expires in ten minutes.
• The result is a stylised character in the book’s illustration style — it carries their look, it is not a reproduction of their face.
• It is deleted immediately afterwards — usually within seconds. If a book is abandoned before it is made, an automated sweep deletes the photo anyway: it may be held for at most 30 minutes, and the sweep runs often enough that the true worst case is 50 minutes. Within the hour, always.
• It is never used to train any model, never shared, and never published.

To make and deliver the book you asked for — that is the performance of a contract with you. You give us details about your child as the person with parental responsibility, and you can withdraw them at any time by deleting the book or your account.

Analytics run on our legitimate interest in knowing which pages work, which is why they are cookieless and never carry anything about a child.

• Our hosting and database providers (Vercel, Supabase), who store the data on our behalf.
• The model providers that write the story and draw the illustrations. They receive the story brief and the illustration briefs. They do not receive your email address, your account, or your child’s photograph.
• Stripe, for payment. They take the card details directly; we only ever see the outcome and the last four digits.
• The printer, for a physical order: the book file and the delivery address, and nothing else.

We do not sell data, and we do not share it with advertisers.

And anyone you send a share link to. A book you have bought can be turned into a private link. Anyone holding that link can read the whole book — the story, the illustrations and your child’s first name on the cover — without an account. Nothing else goes with it: not their age, not their photograph, not the details you told us about them. Those pages are marked so search engines do not index them, the link is a long random secret rather than a guessable address, and switching sharing off makes every link you have already sent stop working. Sharing is off until you turn it on, one book at a time.

• Photographs: seconds in the normal case, and under 50 minutes in the worst.
• Books and the details behind them: until you delete them, or your account.
• Order records: six years, because tax law requires it.
• A deleted book: removed from your library at once, and permanently deleted within 30 days.
• A printed-books waitlist address: until that email is sent, or until you ask us to remove it — whichever comes first.
• A share link: until you switch it off, or the book is deleted.

You can ask for a copy of everything we hold, ask us to correct it, ask us to delete it, or object to any of it. Email hello@taleforme.com and we will answer within 30 days. You can also complain to the Irish Data Protection Commission at dataprotection.ie.

To delete everything at once: email us and we will remove your account, your books and everything behind them.

TaleForMe is sold to adults. Accounts are for parents, guardians and gift-givers, and we do not knowingly let children under 16 create one. The books are for children; the service is not.