Privacy

Privacy Policy

Effective 26 October 2026. Includes our notice about children's privacy and our data retention policy.

The short version

1. Who we are

Thinkybooks (thinkybooks.com) is a storybook maker for families. Grown-ups make picture books, choose-your-path books and audiobooks, with AI pictures and narration, and can order printed copies.

In this policy, "Thinkybooks", "we" and "us" mean the operator of Thinkybooks. "You" means the grown-up who holds the account.

Operator: Thinkybooks. Contact: help@thinkybooks.com. Write to us about anything in this policy, including a child's information.

2. Who Thinkybooks is for

Accounts are for adults 18 and over: parents, guardians, grandparents, teachers and other grown-ups who make books.

Children use the reading side, with a grown-up's account. The library reader and Kid mode are made for children. They have no sign-up, no typing boxes, no microphone, no camera and no chat. A child never gets an account.

Accounts are for adults. Thinkybooks accounts are for parents, guardians, teachers and other grown-ups. Children use Thinkybooks through a grown-up's account, for example in Kid mode.

3. What we collect and why

We collect what we need to make, store, read, narrate and print your books, and to keep the service running. Each table says what, why, who processes it, and how long we keep it. "Companies that help us" are listed in full in section 5.

Your account

WhatWhyWho processes itHow long
Name, email address and profile picture from Google sign-inTo create your account and sign you inUs; Supabase (sign-in and database); Google (sign-in)Until you delete your account (or it is deleted after 24 months unused)
A profile picture you upload insteadTo show on your profileUs; Cloudflare (file storage)Until you change it or delete your account
That you confirmed you are 18+, and whenThe age checkUs; SupabaseWith your account
Credit balance and credit historyTo show your balance and what you spent it onUs; SupabaseWith your account
Settings (for example whether your profile is public)To remember your choicesUs; SupabaseWith your account

Photos you upload to make a character

WhatWhyWho processes itHow long
A photo of a person (often your child)To paint a storybook character who looks like themGoogle Gemini only. No other image company receives it.Not stored. Used for that one painting, then discarded.
Your permission for that photoFor a child's photo we ask you to confirm you are their parent or guardian (or have their parent's permission) and keep a record of thatUs; SupabaseWhile the character exists, and removed with your account
A selfie for a narrator pictureTo paint a picture of you as the narrator of your voiceGoogle GeminiNot stored. Only the painting is kept.

Photos stored by older versions of Thinkybooks (before 26 October 2026) are being removed.

Characters (the paintings)

WhatWhyWho processes itHow long
Painted portraits, their names and descriptions, other poses and stylesTo keep the character the same on every page of every bookUs; Supabase; Cloudflare. A painting (never your photo) is sent with a page request to whichever image company paints that page.Until you delete the character or your account
A smaller check copy of each picture we generateSo we can look into misuse reports and safety problemsUs; Cloudflare90 days, and deleted with your account

Voices (voice clones)

WhatWhyWho processes itHow long
A recording of someone reading a short scriptTo make a voice that can read your books aloudFish Audio (makes the voice). It passes through our servers on the way.Not stored by us. Sent to Fish Audio, then discarded.
The voice model, its name, and a short preview clip spoken with itTo narrate your books in that voiceFish Audio (holds the voice model, privately); us; Supabase; CloudflareUntil you delete the voice or your account. Deleting it also deletes the model at Fish Audio.
Your consent for that voiceSee Children's privacy for a child's voiceUs; SupabaseWhile the voice exists, and removed with your account

"Tell it out loud" (telling a story into the microphone)

WhatWhyWho processes itHow long
The recording of the story being toldOnly to turn the spoken words into written wordsElevenLabs (speech to text), or Fish Audio if ElevenLabs is unavailableNot stored. Discarded as soon as the words come back.
The written words (transcript)To shape them into pages; they become your book's textOpenRouter and the AI writing model it routes toAs part of your book

Stories and books

WhatWhyWho processes itHow long
What you type (ideas, names, your own story, notes) and everything the AI writes and paints for the bookTo make, save and show your bookUs; Supabase; Cloudflare. Story text goes to OpenRouter (writing and checking). Picture descriptions and paintings go to the image company that paints each page. Page pictures go to fal.ai if you animate a page.Until you delete the book or your account
Working copies made while a book is being written or builtSo a book keeps building even if you close the pageUs; SupabaseEmptied 7 days after the job finishes

Narration

WhatWhyWho processes itHow long
Audio of each page read aloud, its word timings, and the reader's nameTo read your book aloud with words highlightedThe page text goes to Fish Audio, ElevenLabs or Deepgram (through OpenRouter), depending on the voice. Clips are stored with us and Cloudflare.Until you delete the book or your account

A clip read in a cloned voice is a recording of that voice, so we treat it the same way as the voice.

Books you share or publish

WhatWhyWho processes itHow long
The book, its title, and the author name you typeSo people with the link, or library readers, can read itUs; Supabase; CloudflareUntil you unpublish or delete it, or delete your account
Your agreement when publishingYou confirm you are the parent or guardian of any child named, pictured or heard in the book and agree it can be publicUs; SupabaseWhile the book is published, and removed with your account

Payments

WhatWhyWho processes itHow long
Card details and the email you give at checkoutTo take paymentStripe. Your card never reaches us.Held by Stripe under its own rules
What you bought and your account idTo add credits or place your orderUs; Stripe; SupabaseWith your account (credit purchases); 7 years (print orders)

Print orders

WhatWhyWho processes itHow long
Name, shipping address, phone number and email; a gift recipient's name and gift messageTo print and deliver the bookStripe (address and gift details are attached to the payment); Lulu (name, address, phone, email); us; Supabase7 years, for tax and accounting. If you delete your account, the order is kept but no longer linked to you.
The print file (a PDF of the whole book)So the printer can print itLulu; us; CloudflareWith the order

Reading activity, including Kid mode

WhatWhyWho processes itHow long
Which books were opened, how far they were read, which were finished; stars and favouritesTo remember progress, count reads, and find and fix problemsUs; SupabaseReading events: 365 days. Progress, stars and favourites: with your account.
A random identifier stored in the browser, and one per visitTo keep a session working and tell visits apart when counting reads and errorsUs; SupabaseEvents that carry it: 365 days. On the device until browser storage is cleared.

When a child reads in Kid mode, we record the same reading activity, linked to the grown-up's account if the device is signed in. We use it only to run the service (keeping the session, counting reads, fixing errors). We never use it to profile a child or show them ads, and we collect nothing else from them.

Device and technical information

WhatWhyWho processes itHow long
IP address and browser type for each sign-in sessionKeeping your account secureSupabase (our sign-in provider) records these. We don't store them ourselves.Held by Supabase with the sign-in session
Short-lived web request logsRunning and securing the websiteVercel (our host)Short-lived, under Vercel's rules
The page you arrived on and the website that sent you (its name only)Understanding how people find usUs; Supabase365 days
Error reports (what went wrong, where in the app)Fixing bugsUs; Supabase365 days
Records of each AI request (which feature, which provider, cost, credits), not its contentBilling, costs and fixing problemsUs; Supabase365 days

Your IP address is also used for a moment to stop abuse (rate limits). We don't save it.

Messages to us

WhatWhyWho processes itHow long
Feedback you send in the app, and emails to help@thinkybooks.comTo answer you and improve ThinkybooksUs; Supabase (in-app feedback); our email providerIn-app feedback: with your account. Emails: as long as needed to help you.

AI agent connections

If you connect an AI assistant to your account (Profile → Connect an agent), we keep the connection's name, when it was made and last used, when it expires, the last four characters of the token, and a one-way scrambled copy of the token, never the token itself. We also record what each connection spent. These are kept until you delete your account.

4. Children's privacy (our COPPA notice)

The US Children's Online Privacy Protection Act (COPPA) protects the personal information of children under 13. Thinkybooks is used by families, so we follow these rules for any child, of any age, whose information is in an account.

What children's information we handle, and where it comes from

Children don't give us information. It comes from you, the grown-up. You may put your child in a book. That can include:

We treat all of it as your child's personal information, whoever pressed the button.

The permission we ask for

WhatWhat we ask before we collect it
A child's photoFor each photo, you confirm: "This is my child and I'm their parent or legal guardian" (or that you have their parent's permission). We keep a record of that. The photo goes only to Google Gemini to paint the character and is never stored.
A child's voiceHere the child is speaking, so we verify that a parent is giving permission, using a card payment. Your account must have bought a credit pack by card (a method the FTC recognises), and you confirm on the voice form that you are the child's parent or guardian. A child's voice can never be shared with other families. (A grown-up's own voice can be cloned without a purchase.)
"Tell it out loud"A child may be the one speaking. We use the recording only to turn speech into words, never store it, and discard it as soon as the words come back. The COPPA rule allows this without separate consent. We tell you this in the app, next to the microphone, and here.
Publishing a book to the public libraryYou confirm you are the parent or guardian of any child named, pictured or heard in the book, and that you agree it can be public.

Each consent record holds who gave it, what kind it is, which item it covers, how it was given, when, and which version of the wording you saw. Deleting the item withdraws the consent.

What we don't do

Your rights as a parent

You can do all of this yourself in the app, without asking us:

Prefer to ask? Email help@thinkybooks.com from the email on your account. If you write from another address, we'll need to confirm you hold the account before we act. We answer within 30 days.

If you think a child under 18 has made an account, or we hold a child's information without a parent's permission, tell us and we'll delete it.

5. Companies that help us (service providers)

We use these companies only to run Thinkybooks features. They receive only what the feature needs. We don't sell personal information, and we don't share it for advertising.

CompanyWhat it receivesPurpose
SupabaseEverything stored in our database; your sign-in details (name, email, picture, and IP address and browser type per sign-in session)Database and sign-in
CloudflareStored files: paintings, narration audio, voice previews, print filesFile storage and delivery
VercelEvery request to our servers passes through it, including uploads on their way to a providerWebsite hosting
Google (Gemini)The only company that receives a child's photo. Also selfies for narrator pictures, picture descriptions, and paintings used as referencesPainting characters and pages
Black Forest Labs, Fireworks AI, fal.ai (including OpenAI's image model through fal.ai)Picture descriptions and paintings used as references. Never your photos.Painting pages when you pick one of their models
fal.ai (video)A painted page and a short descriptionAnimating a page, if you ask for it
OpenRouter, and the AI writing models it routes to (such as Anthropic, Google, OpenAI, xAI, DeepSeek, Zhipu, Alibaba Qwen and Moonshot)Story text, names, "Tell it out loud" transcripts, picture descriptions; page paintings when you ask for a picture reviewWriting, checking and planning stories; reviewing pictures on request. Text requests go only to hosts with zero data retention; picture reviews only to hosts that don't keep the data
Fish AudioVoice recordings, including a child's, to make a voice; the voice model; page text to narrate; "Tell it out loud" audio if ElevenLabs is unavailableVoice clones, narration, speech to text
ElevenLabs"Tell it out loud" audio, which may be a child speaking; page text for Pro voicesSpeech to text; narration
Deepgram (through OpenRouter)Page textNarration with Standard voices
StripeCard and checkout email (entered on Stripe's page); your account id; for print orders, the shipping address, gift recipient name and gift messagePayments
LuluName, shipping address, phone and email; the print file of your bookPrinting and shipping
Google (sign-in and fonts)Sign-in through your Google account. Our pages load fonts from Google, so Google sees your IP address and browser type when a page loads.Sign-in; fonts

Most of these companies are in the United States. We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of Thinkybooks (and this policy would still apply to it).

6. Data retention policy

This is our written policy for how long we keep information, including children's information. We keep it only as long as we need it for the reason we collected it, then delete it.

InformationHow longWhy we keep itWhat deletes it
Voice recording used to make a cloneNot storedSent to Fish Audio to make the voiceDiscarded once sent
"Tell it out loud" recordingNot storedTurned into wordsDiscarded when the words come back
Photo used to paint a character or narrator pictureNot storedUsed for one paintingDiscarded after that painting
Voice clone (the voice model) and its preview clipUntil you delete itTo narrate your booksDeleting the voice, or your account
Painted portraits, books, narrationUntil you delete themThey are your booksDeleting the item, or your account
Consent recordsWhile the item they cover existsTo show permission was givenDeleting the item, or your account
Check copies of generated pictures90 daysLooking into misuse and safety reportsAutomatic at 90 days, or deleting your account
Working copies while a book is built7 days after the job finishesFinishing the build if you leaveAutomatic
Site and reading events365 daysRunning the service, fixing problemsAutomatic at 365 days, or deleting your account
AI request records (feature, provider, cost; no content)365 daysCosts and fixing problemsAutomatic at 365 days. Deleting your account unlinks them from you.
Account, credit history, settings, feedbackWhile the account existsRunning your accountDeleting your account, or 24 months without a sign-in
Inactive accounts24 months without a sign-inWe don't keep accounts no one usesAutomatic deletion of the account and everything in it
Print orders, including shipping address7 yearsTax and accounting lawAutomatic after 7 years. Deleting your account unlinks the order from you.
Copies in our providers' logs and backups after you delete somethingUp to 30 daysBackups and logs roll over on their own scheduleAutomatic

7. Your choices and rights

We give these rights to everyone, wherever you live.

8. What can be public

9. How we protect it

We keep a written information security program. In short:

No system is perfectly secure. If you see a problem, tell us at help@thinkybooks.com.

10. Cookies and your device

We don't set cookies of our own, and we run no third-party analytics or advertising tools. The app keeps a few things in your browser's storage so it works: your sign-in session, settings (theme, text size, narration speed, music), Kid mode, reading progress, a random identifier for counting visits, and your recent pictures. Clearing your browser's site data removes them.

Our pages load fonts from Google, and signing in uses Google. Google sees your IP address and browser type when that happens.

11. If you live outside the US

We're based in the United States and so are most of our providers. Your information is processed in the US. You have the same rights as everyone else (section 7).

If the GDPR or UK GDPR applies to you:

12. US state privacy rights

Some US states (including California, Colorado, Connecticut, Virginia and others) give residents rights to know what personal information is collected, to get a copy, to correct it, and to delete it. We give these rights to everyone (section 7). We don't sell personal information or share it for targeted advertising, and we don't use sensitive information to infer things about you. We won't treat you differently for using your rights. You may use an authorised agent; we'll ask them to show they act for you.

13. Changes to this policy

If we change this policy, we'll update the date at the top. If a change is important, we'll tell you in the app or by email before it takes effect. We won't use a child's information in a new way without first asking for a parent's permission.

14. Contact us

Questions, requests or worries about privacy, including about a child: help@thinkybooks.com.

See also our Terms of Service.