Privacy Policy

Paideora creates personalised illustrated stories for children. This policy explains, in plain language, what information we collect, how a photograph is handled, who else is involved in creating the illustrations, how long we keep things and what you can delete yourself. It is written for the parent or guardian who sets up and uses the service. Paideora is operated from Australia.

This policy describes how Paideora handles personal information and how the service works today.

Paideora is parent-controlled. An adult creates the account, enters the child's details and chooses whether to provide a photograph. Children are not asked to create their own account or to upload a photograph themselves. When you set up Paideora for a child, we ask that you only share information and photographs you have permission to provide.

Paideora offers paid digital story adventures . The price of an adventure is shown before you are asked to purchase it.

Payments are securely processed by Stripe, our third-party payment provider. Paideora does not directly collect or store your full payment card details. Stripe processes payment and transaction information needed to complete purchases and provide its payment services.

When a purchase is made, Paideora keeps a record of the purchase so we can provide access to the purchased adventure, prevent duplicate purchases, assist with customer support, and manage refunds or disputes. Certain transaction records may also be retained where reasonably necessary for accounting, fraud prevention, or legal obligations.

We do not send a child's photograph, name, age, gender, or other child personalisation information to Stripe as payment metadata.

Refunds and other rights relating to purchases are subject to our applicable purchase/refund terms and rights available under Australian consumer law.

When you provide a photograph, this is what happens, in order:

• You choose a photograph on your device.
• Before anything else happens, your browser decodes it and re-encodes it as a fresh image. This removes embedded information carried inside the file, such as GPS/location data, the capture date and time, and camera or device details.
• Parental or guardian consent must already be recorded.
• The privacy-sanitised copy is sent through Paideora's processing route to the AI service that creates your child's illustrated character.
• The remaining illustrations in the story are then created from that generated character, following the story's own artwork.

The photograph you originally selected is not saved into your Paideora account, our database or our cloud storage. Only the generated illustrations are stored. Section 8 explains how external AI service providers are involved in processing the privacy-sanitised photograph.

• Adding a photo is optional. You can create a personalised adventure without one.
• If you add one, your browser prepares a privacy-sanitised copy before it is used for any AI processing (see section 5).
• The prepared copy is used only to create the personalised adventure you are setting up. It is held temporarily in your browser's memory while that adventure is being created, and cleared once it is no longer needed, if you leave the adventure, or when you sign out.
• Paideora does not offer a feature to remember a photo on your device for future adventures. To create another personalised adventure, you choose the photo again.

Before a child's photograph is processed by AI, the signed-in user must confirm that they are the child's parent or legal guardian, or that they have permission from the child's parent or legal guardian, and that they consent to the photograph being processed using AI to create personalised Paideora illustrations.

We record:

• that consent was given;
• the version of the consent wording that applied;
• the date and time it was given;
• your account and, where applicable, the child profile it relates to.

This consent covers photo processing for illustrations only. It is not consent to marketing, advertising, newsletters, analytics. If we materially change the consent wording, a new version is created so it is clear which wording you agreed to.

Creating the illustrations requires services outside Paideora. The privacy-sanitised photograph is transmitted to service providers involved in generating the personalised illustration — currently Lovable, through the Lovable AI Gateway, and OpenAI's image-generation technology. We also rely on third parties for hosting, sign-in, database and file storage, and for website analytics on our public pages.

Service providers may process and retain information according to their own applicable data-processing and retention practices. For more information, you can read those providers' privacy policies on their websites.

We use the information described above to:

• create and manage your parent account and keep you signed in;
• create personalised stories for your child;
• generate the personalised illustrations;
• keep your saved stories available through My Stories;
• record parental or guardian consent;
• provide the privacy and deletion controls in your account;
• operate, support, troubleshoot and secure the service;
• handle purchases and payments;
• measure how our public information pages are used.

We do not sell personal information, and we do not use a child's photograph, name, age or generated artwork for advertising or to train our own models.

Google Analytics runs only on an explicit list of public pages: the home page, About, How it works, this Privacy page, and the Ancient Greece pages.

Analytics does not load, and no page measurements are sent, on the private parts of the service: personalisation and photo upload, the adventure map, the personalised adventures, My Stories, the account and privacy controls, and the sign-in and password pages.

We do not intentionally send children's names, ages, genders, photographs, profile identifiers, personalised artwork or consent information to Google Analytics. Our analytics is configured with IP anonymisation on and Google's advertising and personalisation signals off.

On those public pages, Google Analytics may set cookies such as _ga and _ga_<id> to tell visits apart and measure site usage. You can block or clear these through your browser settings. We do not currently show a cookie banner, and we make no claim about whether consent is legally required for this in your country.

We use technical and organisational measures designed to protect personal information. In practice this includes:

• generated personalised artwork is held in private storage that is not publicly listed or linkable;
• access rules tie a child's profile, artwork and consent records to the signed-in parent account, so one parent's account cannot read another parent's data;
• source photographs are not stored in our database or cloud storage;
• sensitive credentials for our providers stay on the server and are never sent to your browser;
• private pages are marked so search engines do not index them.

When you are signed in, Privacy & Data in your account lets you do the following yourself:

• Delete a saved story — permanently removes that story's personalised illustrations and saved story data. The child profile and your other stories stay. Your purchase record is kept, so you are not charged again for an adventure you have already bought.
• Remove a saved ready-made adventure — removes its saved reading progress, its optional name and any finished hero title. You keep the adventure: your purchase record is kept, you are not charged again, and you can start it again whenever you like. The removed progress cannot be brought back.
• Delete a child profile — permanently removes that child's saved details and all personalised stories and illustrations for that child, and clears that child's saved details on the device you are using. Your other children and your account stay.
• Delete your account — permanently removes your child profiles, personalised stories and illustrations, saved ready-made progress, any reviews you have written and any private feedback you have sent, and your sign-in account. It clears Paideora's locally saved data on the device you are using, then signs you out.

We may retain purchase records so we can manage access, prevent duplicate charges where applicable, handle refunds or disputes, meet accounting obligations and comply with legal requirements. A retained purchase record does not by itself guarantee future access: deleting a child's profile ends access to personalised adventures bought for that child, deleting your account ends access to everything in it, and a refund or charge-back ends the purchase. Provider-side copies or routine backups are outside what we can reach through these controls. Data remembered locally in a different browser or on a different device cannot be deleted remotely by us.

You can also contact us at Paideora@outlook.com to ask what we hold about you, to correct it, or to ask for help deleting it.

Paideora is operated from Australia. Some of the service providers we use — including AI, hosting, storage and analytics providers — may process or store information in other countries. Where this occurs, their own privacy and data-processing practices also apply.

Paideora is designed for a parent or guardian to set up a personalised experience for a child. The adult provides the child's details and decides whether to provide a photograph, and AI processing of a child's photograph only happens after that adult gives explicit consent.

We designed Paideora's privacy controls around its parent-controlled service and the information needed to create personalised stories. If you have concerns about how your child's information is handled, please contact us.

For any privacy question — access, correction, deletion, — email Paideora@outlook.com. Please tell us the email address on your Paideora account so we can find the right records.

If you have bought an adventure and opened it, you may write a review. A review is published only after you give permission, and only with the display name you choose: your first name, or “Paideora parent”. We never publish your email address, your account details, your child's name, age, gender, photograph or illustrations.

Please don't include your child's name, school or other personal details in a review. We read each review before publishing and may withhold one for privacy, safety or spam reasons — never because it is critical of Paideora.

Private feedback is separate. It is sent only to us, is never published, and never appears on our reviews page.

We also record which adventures you have opened, so we know who may write a review.

You can edit or withdraw your review at any time. Deleting your account removes your private feedback and your published reviews.

If we change how information is handled, we will update this page, the version number and the last-updated date.