Privacy policy
Last updated: June 2026
What we collect
We collect your name, email address, and the child's photo you upload. We also collect order details (product, shipping address) when you make a purchase. We do not collect financial data — payments are processed by Razorpay.
How we use your child's photo
Your child's photo is used solely to generate a stylised cartoon avatar for the storybook. We do NOT use it to train any AI model. The raw photo is automatically deleted after the avatar is created (within 24 hours of upload, or sooner on order completion).
Data storage
Your data is stored in Supabase (EU/US region) with encryption at rest and in transit. Generated book assets are stored in Google Drive in a private, access-controlled folder. We apply Row-Level Security so you can only ever access your own data.
Data retention & deletion
You may request deletion of all your data at any time by emailing hello@nilastories.com. We will delete your account, children's profiles, uploaded photos, and generated assets within 30 days. Order records may be retained for legal/accounting purposes.
No AI training
We will never use your data, photos, or stories to train AI models — for ourselves or any third party. This is a hard commitment.
Third-party services
We use Supabase (database/auth), Razorpay (payments), Google Drive (asset storage), and serverless GPU providers (avatar generation — no data retained after job completion). Each provider is bound by their own privacy policy and data processing agreements.
Compliance
We are building toward compliance with India's DPDP Act, GDPR (for EU customers), and COPPA-equivalent protections for children's data. If you have a compliance question, email hello@nilastories.com.
Contact
For any privacy concerns: hello@nilastories.com. We will respond within 5 business days.