Privacy Policy

How Book&Bind looks after your family’s information. Last updated October 27, 2026.

The short version

A grown-up holds the account. Children don’t sign up, chat, or post anything publicly.
Before a child’s name, story or photo goes in, a parent or guardian agrees to this policy.
We use what you give us to make, show, read aloud, print and ship your books. Nothing else.
We don’t sell personal information, share it for advertising, or show ads.
A photo used to draw someone is used once, to draw them in each of our art styles, then deleted. Only the drawings are kept.
You can see, change or delete everything, and take back your consent, at any time.

Who we are

Book&Bind is run by Orvio LLC, doing business as Book&Bind (“we”, “us”). We decide how the information in this policy is used. To reach us about privacy, email support@bookandbind.com.

What we collect from grown-ups

Your account: email address, an optional name, and your password (stored only as a secure hash).
Orders: the name, shipping address and phone number the printer and courier need, and a contact email.
Payments: made on Stripe’s payment page (or Apple’s, in the iPhone app). We never see or keep card numbers.
Gifts: your email, and if you give them, the receiver’s name and email, your name and your note, to send the gift code.
Messages you send us, and the waitlist email if you join it.

What we collect about children

Only what a book needs, entered by a grown-up or by a child with them:

A first name (the author on the cover, or the hero’s name) and the hero they invent.
The choices made and the story written, and any story idea typed or spoken. The app never records audio: speaking uses the phone keyboard’s own dictation.
Photos, if you add them. A photo used to draw someone (a child, a grown-up, a pet, a toy or a child’s own drawing) is shrunk on your device and used once: it’s drawn in each of our art styles in one go, so you can pick a style, and then deleted; we keep only the drawings, never the photo. Photos in a photo book are kept with that book until you delete it. We don’t read or keep where a photo was taken, and we don’t use face recognition.

We don’t ask for a child’s age, birthday, school, address, email or photo of their face to make a book.

What’s collected automatically

A random ID for your device, so the free plan’s monthly book and your settings work before you sign in.
Your internet address, used only to stop abuse (rate limits). For a story set near home, the town and region the connection comes from are read once and not stored.
Simple counts of how far people get (opened the builder, finished a book, opened the cart), by device ID only, and the app’s error messages with personal details removed. They help us fix problems.
No advertising or tracking cookies, and no third-party analytics. The app keeps your library and settings on your own device.

How we use it

To write, paint, show, read aloud, print and ship your books.
To run your account, plan and orders, and to answer you.
To keep the app safe: a safety check reads story ideas so a book never turns unkind or unsafe.
To fix and improve the app, from the simple counts above.
To meet legal duties, such as tax records of sales.

We never use children’s information for advertising, never build profiles of children, and never use it to train AI models ourselves.

The services that help us

These companies process information for us, only to provide their part, under contracts that limit what they can do with it:

Google (Gemini) and Anthropic (Claude): write the story, check it, paint the pictures and read it aloud. They receive the story text, the names in it, and any photo used for a drawing.
Cloudflare: runs our servers and stores books and pictures.
Stripe (and Apple in the iPhone app): take payments. Stripe receives your email and the book’s title.
Lulu: prints and ships books. It receives the shipping details and the book’s print files.
Resend: sends our emails (sign-in links, receipts, gift codes).

We don’t sell personal information, or share it for cross-context behavioral advertising. We’d share it otherwise only if the law requires it, to protect someone’s safety, or with a company that takes over Book&Bind, which would have to keep this policy’s promises.

Pinterest and social media

We post our own pictures (covers and pages from Book&Bind's sample books, never a family's book or photos) to Book&Bind's own Pinterest and Instagram accounts, using Pinterest's API to publish and organise our own Pins and boards, and Instagram's API to publish our own posts. A person on our team chooses and approves each Pin and post before it's queued to be published; nothing is posted that a person hasn't approved.
Book&Bind is for parents and other grown-ups (18 or over). Children don't have accounts and never use Pinterest through Book&Bind.
We don't use the Pinterest or Instagram APIs to sign anyone in, and we don't read, collect or keep any Pinterest or Instagram user's information: not their profile, boards, Pins, posts, followers or activity.
If you save one of our pictures to Pinterest, or follow a link to our Pinterest or Instagram, that service's own privacy policy applies to what you do there.

Children’s privacy (COPPA)

Book&Bind is made for a grown-up and a child to use together. Following the US Children’s Online Privacy Protection Act (COPPA) and similar laws, a parent or guardian passes a grown-ups check and agrees to this policy before a child’s name, story or photo goes in. We collect only what’s needed to make the book, and nothing a child makes is shown to the public.

As the parent, you can at any time:

See what we have about your child (your books show it all; or ask us for a copy).
Correct it or delete it: delete a book or a photo book, or your whole account, from the app.
Take back your consent, which stops anything new from being collected, and ask us to delete what we have.

To do any of these, use your profile or email support@bookandbind.com. We’ll check that the request comes from the account holder before acting on it.

How long we keep it

Your account, books, drawings and photo books: until you delete them or your account.
A book made without an account: deleted with its pictures 30 days after its last change, unless it’s saved to an account.
Photos used to draw someone: not kept at all.
Orders: kept for our tax records; deleting your account clears the address, phone and email from them.
Backups: a nightly copy of accounts and orders, kept 30 days, then deleted.
Deleting your account removes your books, their pictures, audio and print files, your photo books and photos, your drawings, and your purchase records with us. Payment and printing companies keep their own records as the law requires.

Keeping it safe

Everything travels encrypted (HTTPS), passwords are stored only as secure hashes, and only the people who run Book&Bind can reach the data. A book’s pages and pictures live at long, random addresses that can’t be guessed; anyone you give a link to can see what it shows, so share links with care. No system is perfectly secure; if something goes wrong that affects you, we’ll tell you as the law requires.

Your rights, wherever you are

Everyone can ask to see, correct, download or delete their information, and to stop us using it. We answer within 30 days and don’t charge for it.

United States: residents of California and other states with privacy laws have these rights too. We don’t sell or share personal information, and we don’t use sensitive information beyond making your book.
United Kingdom and Ireland: we use your information to provide what you asked for (a contract), with your consent (for children’s information and photos), and for our legitimate interests (keeping the app safe and working). You can complain to the ICO (UK) or the Data Protection Commission (Ireland).
Canada: you can complain to the Office of the Privacy Commissioner of Canada.
Australia: you can complain to the Office of the Australian Information Commissioner.

Please contact us first; we’d like the chance to put things right.

Where it’s processed

Book&Bind is run from the United States, and our service providers process information in the US and other countries. When information leaves the UK, the EU or another country with transfer rules, we rely on the protections those rules require, such as standard contractual clauses.

Changes

If we change this policy, we’ll update the date below. If a change affects children’s information, we’ll ask for a parent’s consent again before it applies.