Privacy
Privacy Policy
The short version
- Accounts are for grown-ups (18 and over). Children read books with you. They don't sign up, sign in, pay or upload.
- You decide what goes into a book. If you add your child's name, photo or voice, we treat it as your child's information and ask for your permission first.
- We don't keep the photos you upload. A photo is used once to paint a character, then thrown away. We keep the painting.
- A child's photo goes to one AI provider only (Google Gemini). A child's voice goes only to Fish Audio, to make the voice.
- No ads. No selling. No tracking for advertising. We use other companies only to run the features you use.
- You're in charge. See what we hold, download it, and delete any character, voice, book or your whole account yourself, in the app. Or email help@thinkybooks.com.
- We don't keep things forever. Accounts unused for 24 months are deleted. The full schedule is in Data retention.
1. Who we are
Thinkybooks (thinkybooks.com) is a storybook maker for families. Grown-ups make picture books, choose-your-path books and audiobooks, with AI pictures and narration, and can order printed copies.
In this policy, "Thinkybooks", "we" and "us" mean the operator of Thinkybooks. "You" means the grown-up who holds the account.
Operator: Thinkybooks. Contact: help@thinkybooks.com. Write to us about anything in this policy, including a child's information.
2. Who Thinkybooks is for
Accounts are for adults 18 and over: parents, guardians, grandparents, teachers and other grown-ups who make books.
Children use the reading side, with a grown-up's account. The library reader and Kid mode are made for children. They have no sign-up, no typing boxes, no microphone, no camera and no chat. A child never gets an account.
Accounts are for adults. Thinkybooks accounts are for parents, guardians, teachers and other grown-ups. Children use Thinkybooks through a grown-up's account, for example in Kid mode.
3. What we collect and why
We collect what we need to make, store, read, narrate and print your books, and to keep the service running. Each table says what, why, who processes it, and how long we keep it. "Companies that help us" are listed in full in section 5.
Your account
| What | Why | Who processes it | How long |
|---|---|---|---|
| Name, email address and profile picture from Google sign-in | To create your account and sign you in | Us; Supabase (sign-in and database); Google (sign-in) | Until you delete your account (or it is deleted after 24 months unused) |
| A profile picture you upload instead | To show on your profile | Us; Cloudflare (file storage) | Until you change it or delete your account |
| That you confirmed you are 18+, and when | The age check | Us; Supabase | With your account |
| Credit balance and credit history | To show your balance and what you spent it on | Us; Supabase | With your account |
| Settings (for example whether your profile is public) | To remember your choices | Us; Supabase | With your account |
Photos you upload to make a character
| What | Why | Who processes it | How long |
|---|---|---|---|
| A photo of a person (often your child) | To paint a storybook character who looks like them | Google Gemini only. No other image company receives it. | Not stored. Used for that one painting, then discarded. |
| Your permission for that photo | For a child's photo we ask you to confirm you are their parent or guardian (or have their parent's permission) and keep a record of that | Us; Supabase | While the character exists, and removed with your account |
| A selfie for a narrator picture | To paint a picture of you as the narrator of your voice | Google Gemini | Not stored. Only the painting is kept. |
Photos stored by older versions of Thinkybooks (before 26 October 2026) are being removed.
Characters (the paintings)
| What | Why | Who processes it | How long |
|---|---|---|---|
| Painted portraits, their names and descriptions, other poses and styles | To keep the character the same on every page of every book | Us; Supabase; Cloudflare. A painting (never your photo) is sent with a page request to whichever image company paints that page. | Until you delete the character or your account |
| A smaller check copy of each picture we generate | So we can look into misuse reports and safety problems | Us; Cloudflare | 90 days, and deleted with your account |
Voices (voice clones)
| What | Why | Who processes it | How long |
|---|---|---|---|
| A recording of someone reading a short script | To make a voice that can read your books aloud | Fish Audio (makes the voice). It passes through our servers on the way. | Not stored by us. Sent to Fish Audio, then discarded. |
| The voice model, its name, and a short preview clip spoken with it | To narrate your books in that voice | Fish Audio (holds the voice model, privately); us; Supabase; Cloudflare | Until you delete the voice or your account. Deleting it also deletes the model at Fish Audio. |
| Your consent for that voice | See Children's privacy for a child's voice | Us; Supabase | While the voice exists, and removed with your account |
"Tell it out loud" (telling a story into the microphone)
| What | Why | Who processes it | How long |
|---|---|---|---|
| The recording of the story being told | Only to turn the spoken words into written words | ElevenLabs (speech to text), or Fish Audio if ElevenLabs is unavailable | Not stored. Discarded as soon as the words come back. |
| The written words (transcript) | To shape them into pages; they become your book's text | OpenRouter and the AI writing model it routes to | As part of your book |
Stories and books
| What | Why | Who processes it | How long |
|---|---|---|---|
| What you type (ideas, names, your own story, notes) and everything the AI writes and paints for the book | To make, save and show your book | Us; Supabase; Cloudflare. Story text goes to OpenRouter (writing and checking). Picture descriptions and paintings go to the image company that paints each page. Page pictures go to fal.ai if you animate a page. | Until you delete the book or your account |
| Working copies made while a book is being written or built | So a book keeps building even if you close the page | Us; Supabase | Emptied 7 days after the job finishes |
Narration
| What | Why | Who processes it | How long |
|---|---|---|---|
| Audio of each page read aloud, its word timings, and the reader's name | To read your book aloud with words highlighted | The page text goes to Fish Audio, ElevenLabs or Deepgram (through OpenRouter), depending on the voice. Clips are stored with us and Cloudflare. | Until you delete the book or your account |
A clip read in a cloned voice is a recording of that voice, so we treat it the same way as the voice.
Books you share or publish
| What | Why | Who processes it | How long |
|---|---|---|---|
| The book, its title, and the author name you type | So people with the link, or library readers, can read it | Us; Supabase; Cloudflare | Until you unpublish or delete it, or delete your account |
| Your agreement when publishing | You confirm you are the parent or guardian of any child named, pictured or heard in the book and agree it can be public | Us; Supabase | While the book is published, and removed with your account |
Payments
| What | Why | Who processes it | How long |
|---|---|---|---|
| Card details and the email you give at checkout | To take payment | Stripe. Your card never reaches us. | Held by Stripe under its own rules |
| What you bought and your account id | To add credits or place your order | Us; Stripe; Supabase | With your account (credit purchases); 7 years (print orders) |
Print orders
| What | Why | Who processes it | How long |
|---|---|---|---|
| Name, shipping address, phone number and email; a gift recipient's name and gift message | To print and deliver the book | Stripe (address and gift details are attached to the payment); Lulu (name, address, phone, email); us; Supabase | 7 years, for tax and accounting. If you delete your account, the order is kept but no longer linked to you. |
| The print file (a PDF of the whole book) | So the printer can print it | Lulu; us; Cloudflare | With the order |
Reading activity, including Kid mode
| What | Why | Who processes it | How long |
|---|---|---|---|
| Which books were opened, how far they were read, which were finished; stars and favourites | To remember progress, count reads, and find and fix problems | Us; Supabase | Reading events: 365 days. Progress, stars and favourites: with your account. |
| A random identifier stored in the browser, and one per visit | To keep a session working and tell visits apart when counting reads and errors | Us; Supabase | Events that carry it: 365 days. On the device until browser storage is cleared. |
When a child reads in Kid mode, we record the same reading activity, linked to the grown-up's account if the device is signed in. We use it only to run the service (keeping the session, counting reads, fixing errors). We never use it to profile a child or show them ads, and we collect nothing else from them.
Device and technical information
| What | Why | Who processes it | How long |
|---|---|---|---|
| IP address and browser type for each sign-in session | Keeping your account secure | Supabase (our sign-in provider) records these. We don't store them ourselves. | Held by Supabase with the sign-in session |
| Short-lived web request logs | Running and securing the website | Vercel (our host) | Short-lived, under Vercel's rules |
| The page you arrived on and the website that sent you (its name only) | Understanding how people find us | Us; Supabase | 365 days |
| Error reports (what went wrong, where in the app) | Fixing bugs | Us; Supabase | 365 days |
| Records of each AI request (which feature, which provider, cost, credits), not its content | Billing, costs and fixing problems | Us; Supabase | 365 days |
Your IP address is also used for a moment to stop abuse (rate limits). We don't save it.
Messages to us
| What | Why | Who processes it | How long |
|---|---|---|---|
| Feedback you send in the app, and emails to help@thinkybooks.com | To answer you and improve Thinkybooks | Us; Supabase (in-app feedback); our email provider | In-app feedback: with your account. Emails: as long as needed to help you. |
AI agent connections
If you connect an AI assistant to your account (Profile → Connect an agent), we keep the connection's name, when it was made and last used, when it expires, the last four characters of the token, and a one-way scrambled copy of the token, never the token itself. We also record what each connection spent. These are kept until you delete your account.
4. Children's privacy (our COPPA notice)
The US Children's Online Privacy Protection Act (COPPA) protects the personal information of children under 13. Thinkybooks is used by families, so we follow these rules for any child, of any age, whose information is in an account.
What children's information we handle, and where it comes from
Children don't give us information. It comes from you, the grown-up. You may put your child in a book. That can include:
- their name and anything you write about them in a story;
- a photo, used once to paint a character (not stored), and the painted character that results;
- their voice, if you make a voice clone of them, and narration read in that voice;
- their words, if they tell a story into the microphone with "Tell it out loud" (turned into text, recording not kept);
- while they read: reading activity and a device identifier, used only to run the service (see Reading activity).
We treat all of it as your child's personal information, whoever pressed the button.
The permission we ask for
| What | What we ask before we collect it |
|---|---|
| A child's photo | For each photo, you confirm: "This is my child and I'm their parent or legal guardian" (or that you have their parent's permission). We keep a record of that. The photo goes only to Google Gemini to paint the character and is never stored. |
| A child's voice | Here the child is speaking, so we verify that a parent is giving permission, using a card payment. Your account must have bought a credit pack by card (a method the FTC recognises), and you confirm on the voice form that you are the child's parent or guardian. A child's voice can never be shared with other families. (A grown-up's own voice can be cloned without a purchase.) |
| "Tell it out loud" | A child may be the one speaking. We use the recording only to turn speech into words, never store it, and discard it as soon as the words come back. The COPPA rule allows this without separate consent. We tell you this in the app, next to the microphone, and here. |
| Publishing a book to the public library | You confirm you are the parent or guardian of any child named, pictured or heard in the book, and that you agree it can be public. |
Each consent record holds who gave it, what kind it is, which item it covers, how it was given, when, and which version of the wording you saw. Deleting the item withdraws the consent.
What we don't do
- We don't ask for more information about a child than a feature needs, and we never make a child's participation depend on giving more.
- We don't show ads, sell information, share it for advertising, or build profiles of children.
- We don't use third-party analytics or tracking tools.
- We share a child's information only with the companies that run the feature it's used for (see section 5), and only for that feature.
Your rights as a parent
You can do all of this yourself in the app, without asking us:
- Review what we hold: Profile → Your data.
- Download a copy of it from the same place.
- Delete any character, voice or book, one at a time.
- Delete your whole account. This removes your books, characters, voices, files, the voice models held by Fish Audio, and your sign-in.
- Withdraw consent by deleting the item it covers, or your account. After that we collect no more of that information.
- Refuse any of it. You can make books without photos, voice clones or "Tell it out loud".
Prefer to ask? Email help@thinkybooks.com from the email on your account. If you write from another address, we'll need to confirm you hold the account before we act. We answer within 30 days.
If you think a child under 18 has made an account, or we hold a child's information without a parent's permission, tell us and we'll delete it.
5. Companies that help us (service providers)
We use these companies only to run Thinkybooks features. They receive only what the feature needs. We don't sell personal information, and we don't share it for advertising.
| Company | What it receives | Purpose |
|---|---|---|
| Supabase | Everything stored in our database; your sign-in details (name, email, picture, and IP address and browser type per sign-in session) | Database and sign-in |
| Cloudflare | Stored files: paintings, narration audio, voice previews, print files | File storage and delivery |
| Vercel | Every request to our servers passes through it, including uploads on their way to a provider | Website hosting |
| Google (Gemini) | The only company that receives a child's photo. Also selfies for narrator pictures, picture descriptions, and paintings used as references | Painting characters and pages |
| Black Forest Labs, Fireworks AI, fal.ai (including OpenAI's image model through fal.ai) | Picture descriptions and paintings used as references. Never your photos. | Painting pages when you pick one of their models |
| fal.ai (video) | A painted page and a short description | Animating a page, if you ask for it |
| OpenRouter, and the AI writing models it routes to (such as Anthropic, Google, OpenAI, xAI, DeepSeek, Zhipu, Alibaba Qwen and Moonshot) | Story text, names, "Tell it out loud" transcripts, picture descriptions; page paintings when you ask for a picture review | Writing, checking and planning stories; reviewing pictures on request. Text requests go only to hosts with zero data retention; picture reviews only to hosts that don't keep the data |
| Fish Audio | Voice recordings, including a child's, to make a voice; the voice model; page text to narrate; "Tell it out loud" audio if ElevenLabs is unavailable | Voice clones, narration, speech to text |
| ElevenLabs | "Tell it out loud" audio, which may be a child speaking; page text for Pro voices | Speech to text; narration |
| Deepgram (through OpenRouter) | Page text | Narration with Standard voices |
| Stripe | Card and checkout email (entered on Stripe's page); your account id; for print orders, the shipping address, gift recipient name and gift message | Payments |
| Lulu | Name, shipping address, phone and email; the print file of your book | Printing and shipping |
| Google (sign-in and fonts) | Sign-in through your Google account. Our pages load fonts from Google, so Google sees your IP address and browser type when a page loads. | Sign-in; fonts |
Most of these companies are in the United States. We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of Thinkybooks (and this policy would still apply to it).
6. Data retention policy
This is our written policy for how long we keep information, including children's information. We keep it only as long as we need it for the reason we collected it, then delete it.
| Information | How long | Why we keep it | What deletes it |
|---|---|---|---|
| Voice recording used to make a clone | Not stored | Sent to Fish Audio to make the voice | Discarded once sent |
| "Tell it out loud" recording | Not stored | Turned into words | Discarded when the words come back |
| Photo used to paint a character or narrator picture | Not stored | Used for one painting | Discarded after that painting |
| Voice clone (the voice model) and its preview clip | Until you delete it | To narrate your books | Deleting the voice, or your account |
| Painted portraits, books, narration | Until you delete them | They are your books | Deleting the item, or your account |
| Consent records | While the item they cover exists | To show permission was given | Deleting the item, or your account |
| Check copies of generated pictures | 90 days | Looking into misuse and safety reports | Automatic at 90 days, or deleting your account |
| Working copies while a book is built | 7 days after the job finishes | Finishing the build if you leave | Automatic |
| Site and reading events | 365 days | Running the service, fixing problems | Automatic at 365 days, or deleting your account |
| AI request records (feature, provider, cost; no content) | 365 days | Costs and fixing problems | Automatic at 365 days. Deleting your account unlinks them from you. |
| Account, credit history, settings, feedback | While the account exists | Running your account | Deleting your account, or 24 months without a sign-in |
| Inactive accounts | 24 months without a sign-in | We don't keep accounts no one uses | Automatic deletion of the account and everything in it |
| Print orders, including shipping address | 7 years | Tax and accounting law | Automatic after 7 years. Deleting your account unlinks the order from you. |
| Copies in our providers' logs and backups after you delete something | Up to 30 days | Backups and logs roll over on their own schedule | Automatic |
7. Your choices and rights
- See and download what we hold: Profile → Your data.
- Correct it: edit your books, characters and voices any time. Your name and email come from Google; change them there.
- Delete any book, character or voice, or your whole account, in the app.
- Unpublish a book or stop sharing it at any time.
- Ask us at help@thinkybooks.com. We answer within 30 days.
We give these rights to everyone, wherever you live.
8. What can be public
- Your books are private by default. Only you see them until you share or publish.
- Share links. When you share a book, anyone with the link can read it.
- The public library. When you publish, our team reviews the book first. Once approved, anyone can find and read it, with the title and the author name you chose. You can unpublish it.
- A book's title and cover can be opened by its address (thinkybooks.com/read/project-…), even if you haven't shared it. That address isn't listed anywhere, but someone who has it, or guesses it, can see the title and cover, not the pages.
- Shared characters and voices. You can choose to share a character or a grown-up's voice with other families, after our review. A child's voice can never be shared.
- Stored files (pictures, narration, print files) are kept at web addresses that aren't listed anywhere public. Anyone who has a file's exact address can open it, so be careful where you paste one.
9. How we protect it
We keep a written information security program. In short:
- Encryption in transit. Everything travels over HTTPS.
- Owner-only access. Database rules let each account read and change only its own books, characters and voices. Our servers check who you are before every paid or private action.
- Least privilege. The keys that can see everything are held only on our servers, never in the app in your browser, and only a few people can reach them.
- Less to lose. We don't keep uploaded photos or voice recordings, and we don't store payment cards.
- Deletion. Deleting an item or account removes its records and files, and the voice models at Fish Audio. Information is deleted on the schedule in section 6.
- Incidents. If something goes wrong, we contain it, find out what was affected, and tell affected families and authorities as the law requires.
- Review. We review this program at least once a year and whenever we add a feature that handles new kinds of information.
No system is perfectly secure. If you see a problem, tell us at help@thinkybooks.com.
10. Cookies and your device
We don't set cookies of our own, and we run no third-party analytics or advertising tools. The app keeps a few things in your browser's storage so it works: your sign-in session, settings (theme, text size, narration speed, music), Kid mode, reading progress, a random identifier for counting visits, and your recent pictures. Clearing your browser's site data removes them.
Our pages load fonts from Google, and signing in uses Google. Google sees your IP address and browser type when that happens.
11. If you live outside the US
We're based in the United States and so are most of our providers. Your information is processed in the US. You have the same rights as everyone else (section 7).
If the GDPR or UK GDPR applies to you:
- Why we may use your information: to provide the service you asked for (our contract with you); with your consent (photos, voices, publishing); to meet legal duties (tax records for orders); and for our legitimate interests in keeping Thinkybooks secure and working.
- Your rights: access, correction, deletion, a portable copy, objecting to or restricting how we use it, and withdrawing consent at any time.
- How: in the app, or email help@thinkybooks.com.
- Complaints: you can complain to your local data protection authority (in the UK, the ICO). We'd like the chance to help first.
12. US state privacy rights
Some US states (including California, Colorado, Connecticut, Virginia and others) give residents rights to know what personal information is collected, to get a copy, to correct it, and to delete it. We give these rights to everyone (section 7). We don't sell personal information or share it for targeted advertising, and we don't use sensitive information to infer things about you. We won't treat you differently for using your rights. You may use an authorised agent; we'll ask them to show they act for you.
13. Changes to this policy
If we change this policy, we'll update the date at the top. If a change is important, we'll tell you in the app or by email before it takes effect. We won't use a child's information in a new way without first asking for a parent's permission.
14. Contact us
Questions, requests or worries about privacy, including about a child: help@thinkybooks.com.
See also our Terms of Service.