Privacy Policy | Quilloo

Introduction

Quilloo ("we," "us," or "our") operates quilloostories.com (the "Site"), a blog offering parenting articles, research summaries, and related content, and the Quilloo app at app.quilloostories.com (the "App"), where parents create personalised children's books. This Privacy Policy explains what information we collect from visitors and subscribers, how we use it, and the choices and rights you have.

Information We Collect

Email address, if you subscribe to our newsletter.
Account information, if you create an account in the App: your email address, a password (stored only as a hash) or your Google sign-in, and your name if you give one.
Content you provide in the App to create a book: a story idea, the names, ages and descriptions of the children the book is for, and, if you choose to add them, photos used only to draw the characters.
Usage and technical data: IP address, browser and device type, pages visited, and similar log data, collected through analytics tools.
Cookies and similar technologies. We use one essential cookie to remember your cookie choice, and analytics cookies only if you accept them. We do not use advertising cookies, and the Site carries no advertising.

Visitors to the Site are never asked to create an account. The App requires one, and the information above is collected only from the adult who creates it.

How We Use Your Information

To send the newsletter to subscribers.
To create your account, verify your email address and send the messages the account needs: verification, password reset, and updates about a book you ordered. We send no marketing email to App accounts.
To write and illustrate the book you create, including drawing characters from the photos you provide.
To understand how the Site is used and improve our content, using aggregated analytics.
To track when a purchase was made through one of our affiliate links, generally without identifying you personally.
To comply with legal obligations.

How We Share Information

Brevo, our email newsletter service provider, solely to send the newsletter.
Amazon Web Services, which hosts the App and sends its account emails.
Google (Vertex AI), fal.ai, Replicate and Together AI, which generate the book's text and pictures from your inputs. Photos are sent to Google only.
Stripe, which processes payments; we never see your card details.
Prodigi, which prints and ships books you order, and receives your name, shipping address and the book files for that purpose.
Sentry, which receives technical error reports from the App with personal content removed.
Google, whose reCAPTCHA service checks that newsletter sign-ups come from a person rather than an automated script. It loads only when you open the newsletter form, and collects hardware, software and interaction data for that purpose, subject to Google's Privacy Policy.
PostHog, our analytics provider, to understand how the Site is used. With your consent this includes product analytics, session recording and heatmaps. Analytics load only after you accept analytics cookies, and are not loaded at all if you decline.
The Amazon Associates Program: when you click an Amazon affiliate link on our Site, Amazon may set a cookie to record that the visit came from us, generally without sharing your identity with us.
Legal and safety reasons, if required by law.

We do not sell personal information for money, and we do not share it with advertising partners — the Site carries no advertising. Under some US state laws, sharing data with affiliate partners can still count as a "sale" or "share" even without a cash payment; see Your Privacy Rights below for your opt-out rights.

Children's Privacy

Our content is about parenting and child development, written for adult readers, namely parents, caregivers, and educators. The Site is not directed at children, and we do not knowingly collect personal information directly from children under 13.

In the App, parents may provide information and photos about their own children to personalise a book. We collect this only from the adult account holder, who is responsible for having the right to share it, and use it only to create that family's book. We do not knowingly collect information from children directly.

Your Privacy Rights

If you are in the EU/EEA or UK, GDPR gives you rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority, such as Spain's Agencia Española de Protección de Datos (AEPD).

If you are a US resident, depending on your state, you may have rights under laws such as California's CCPA/CPRA and similar laws in states including Virginia, Colorado, Connecticut, and Utah, typically including the right to know, delete, or correct your personal information, and to opt out of the "sale" or "sharing" of your information, including for targeted advertising or affiliate tracking arrangements that may be treated as a "sale" or "share" under state law.

International Data Transfers

Our newsletter provider and analytics tools may be based outside the EU/EEA, including in the United States. Where required, we rely on mechanisms such as the EU Standard Contractual Clauses to protect data transferred this way. The App is hosted by Amazon Web Services in the United States.

Data Security

We use reasonable technical and organizational measures designed to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your email address for as long as you remain subscribed to the newsletter. You can unsubscribe at any time using the link in any newsletter email, which removes you from our active mailing list.

Account data and the books you create are kept while your account exists. You can delete your account in the App at any time, which deletes your books, photos and personal data; records of orders are kept as long as the law requires.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date.

Contact Us

Questions about this Privacy Policy, or requests relating to your data, can be sent to privacy@quilloostories.com.