Privacy Policy

Who we are

estori (“we”, “us”) is an independent project that operates this service at app.estori.ai. For any privacy question, or to delete your data, email support@estori.ai.

estori is for adults. The account holder is a parent, or a relative or friend ordering a book as a gift, who makes stories starring a child they know. We do not offer accounts to children and the app is not directed at children. An adult provides the information and controls the account.

The child's photo

When you create a character, you upload a photo of your child. We send that photo to our AI provider only to create the cartoon — occasionally more than once, if a first attempt fails or we need to check the drawing against the photo — and then we discard it. The original photo is never written to our database or storage: it lives in memory only for as long as it takes to make the drawing.

One exception: if you add a photo when you order a printed book, we keep it in private storage until your payment goes through and the drawing is made, then delete it. That usually takes a few hours. If you don't finish paying, we still delete it within a few hours.

What we keep is the AI-generated cartoon (a drawing, not your photo) plus the details you typed: the child's first name, optional age, optional character type, and an optional short description. That cartoon becomes the reusable reference for every page of every story.

Books ordered as a gift

Anyone can order a printed book for a child as a gift without signing up first. The buyer gives us the child's details, a photo if they choose to add one, and a shipping address, which may be the child's family's. We use these only to make and deliver that book.

When the payment goes through, we create an account for the buyer's email so they can read and edit the book, or use the one they already have. A new account has no password. Only someone with access to that inbox can sign in to it.

If the buyer fills in the order but doesn't pay, we keep what they entered for 90 days so they can come back and finish it, then delete all of it. A photo is deleted within a few hours, as described above.

If you are the parent or guardian of a child someone made a book for, you can ask us what we hold about your child, or ask us to delete it, at support@estori.ai.

What we store

• Your account email address (used to sign you in via a magic link).
• Characters you create: the AI-generated cartoon image and the name/age/character type/description you entered.
• Stories you generate: the text and illustrations.
• Print orders: the shipping address (recipient name, street, city, postal code, country, optional phone) you enter at checkout, plus order status.
• Billing records: your credit balance and your payment-processor customer reference. We never see or store your full card number; Stripe and Mercado Pago handle that.
• Basic usage analytics (see “Analytics” below).

Who we share data with (our processors)

We use a small set of trusted service providers to run estori. We only share what each one needs to do its job:

• Supabase — our database, file storage, and login, hosted in the EU. It holds your account, characters, stories, and orders.
• Cloudflare (R2) — stores the full-resolution original illustrations, in the EU. It holds nothing else: no account details, no story text, no payment data.
• Stripe — processes credit and print payments. Stripe receives your payment details directly; we receive only a customer reference and the result.
• Mercado Pago — processes credit and print payments in Argentina, in the same way. It receives your payment details directly; we receive only a reference and the result.
• Lulu — our print-on-demand partner. When you order a printed book, we send Lulu the print file, your shipping address, and your account email (so they can contact you about your delivery) so they can produce and ship it. We share these only to fulfill that order.
• Cloudprinter: a second print partner we use for some orders. It receives the same things as Lulu (the print file, the shipping address including a phone number, and an email to contact about the delivery), for the same purpose.
• Google (Gemini) and OpenAI — generate the cartoon illustrations and story text. The child's photo is sent to the image provider only to create that cartoon, as described above.
• Resend — delivers the sign-in (magic-link) emails for our login system.
• Google Analytics 4, Meta, and PostHog (EU) — measure how the product is used so we can improve it. PostHog also receives your account email, so we can recognise a returning account across sessions and respond to you about your own usage, and the age you entered for a character (so we know which ages the product is used for). It never receives your child's name, birthdate, photo, character images, story titles, or story text, and your child's age is never shared with Google or Meta.

Analytics & cookies

We measure product usage two ways. Server-side measurement is first-party and stores nothing on your device, except a small first-party cookie that remembers how you first found us (so we can understand which referrals work). It records what happened (an account was created, a story was made, a book was ordered) against your account email, plus non-identifying details of the request such as the story theme and the age the story was written for. Browser pixels (Google Analytics, Meta, PostHog) can set cookies, so they load only after consent (or, where the law allows it, until you opt out). We do not sell your personal data.

When you check out or place an order, we may also send Google and Meta a hashed (one-way scrambled) copy of your email address, your browser's technical details (browser, version and device type) and the ad cookies they set themselves, so they can match the order to an ad you saw with them. We keep these details with the order. If you turn analytics cookies off, we don't send them. It never includes anything about your child.

How long we keep data & how to delete it

We keep your account data while your account is active. You can ask us to delete your account and its data at any time by emailing support@estori.ai — we'll remove your characters, stories, and account. Some records tied to completed payments or print orders may be retained where we're legally required to (e.g. tax and accounting).

Where data is processed

Our database and storage are hosted in the European Union. Some processors (e.g. Stripe, our AI providers, analytics) may process data outside the EU under their own safeguards.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. Email support@estori.ai and we'll help. If you're in the EU/UK, you also have the right to complain to your local data protection authority.

Changes to this policy

If we make a meaningful change, we'll update this page and the date below. Continuing to use estori after a change means you accept the updated policy.