Privacy Policy

1. Who we are

Little Mirror Books ("Little Mirror Books", "we", "us", "our") operates the website littlemirrorbooks.com and produces personalized, AI-illustrated children's storybooks. We are the data controller for the personal information described in this policy. You can reach us at hello@littlemirrorbooks.com.

2. Information we collect

We collect only what we need to make your book and run our service:

• Account & order info: name, email address, billing address (collected by Stripe), and order history.
• Child personalization data: the child's first name, age, pronouns, family details, favorite things, and the struggle the book addresses — provided by you, the parent or legal guardian.
• Photographs: 2–3 reference photos of the child that you upload to guide the illustrator and the AI image model.
• Communications: emails you send us and replies we send you.
• Technical data: IP address, browser type, device type, pages viewed, and similar analytics data, collected via cookies and similar technologies (see Section 7).

We do not knowingly collect any information directly from children. The service is purchased and configured by an adult (the parent or legal guardian) on the child's behalf.

3. How we use your information

• To generate, illustrate, review, and deliver your storybook.
• To process payments through Stripe.
• To send transactional emails (order confirmations, delivery notices, revision requests) via our email infrastructure provider.
• To provide customer support and respond to your questions.
• To improve our service, detect fraud, and comply with legal obligations.

We rely on the following lawful bases (where applicable under GDPR): performance of a contract, your consent (e.g. cookies, marketing), our legitimate interests (e.g. fraud prevention, service improvement), and compliance with legal obligations.

4. AI processing of your child's photos

The reference photos you upload are processed by third-party AI image and language models (currently including, but not limited to, providers operated by Google and OpenAI) for the sole purpose of generating illustrations and text for your book. These providers act as our processors and are contractually prohibited from using your child's photos to train their general models or for any purpose other than fulfilling your order.

Reference photos are deleted from our systems within 30 days of final delivery. We retain only the finished book file and order metadata.

5. Who we share with

We never sell your personal information or your child's photos. We share data only with vetted service providers acting on our behalf:

• Stripe — payment processing.
• Supabase — secure database and file storage.
• AI model providers (e.g. Google, OpenAI) — text and image generation.
• Email infrastructure provider — transactional email delivery.
• Analytics providers (e.g. Google Analytics) — aggregated usage statistics, only where you have given cookie consent.

We may also disclose information when required by law, court order, or to protect our rights, users, or the public.

6. Data retention & security

We use industry-standard encryption in transit (TLS) and at rest for stored files. Reference photos: deleted within 30 days of delivery. Order records and finished books: retained for up to 7 years for tax, accounting, and customer-support purposes, then deleted. You may request earlier deletion at any time (see Section 8).

7. Cookies & tracking

We use a small number of strictly necessary cookies to operate the site and shopping cart. With your consent, we also use analytics cookies (Google Analytics 4) to understand which pages are most useful. You can accept, reject, or change your preferences at any time using the cookie banner or the "Cookie preferences" link in the footer.

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with your local data-protection authority.

California residents have additional rights under the CCPA/CPRA, including the right to know what categories of information we collect and the right to opt out of any "sale" or "sharing" of personal information (we do not sell). To exercise any right, email hello@littlemirrorbooks.com. We will respond within 30 days.

9. Children's privacy

Our service is intended to be used only by adults (18+) to create books for children in their care. We do not knowingly collect personal information directly from children under 13 (or 16 in the EU/UK). If you believe a child has provided information directly to us, please contact us and we will delete it promptly.

10. International transfers

We are based in the United States and our service providers may process data in the US, the EU, and other jurisdictions. Where your data is transferred outside your country of residence, we rely on appropriate safeguards such as Standard Contractual Clauses.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page and, where required, by email. The "Effective date" at the top reflects the latest version.

12. Contact

Privacy questions, requests, or complaints: hello@littlemirrorbooks.com.