Privacy policy

Quillow Labs, Inc. is a Delaware corporation with its office in Portland, Oregon. We make personalized illustrated storybooks. We are the controller of the personal information described here.

We collect the smallest amount of information that lets the product work, and we do not ask for information about children beyond what a story needs.

• Account information: your name, your email address, and a hashed password. If you sign in with Google we receive your name, email address and profile image from Google.
• Book information: the first name you give for the child in the story, the age band, the appearance words you select, and the story idea you type.
• Generated content: the story text, illustration prompts, and illustrations produced for your books.
• Order information: the shipping name and address you give when you order a printed hardcover.
• Technical information: standard server logs including IP address and user agent, kept for security and troubleshooting.

There is no photo upload in Quillow and nowhere in our systems to store one. We do not ask for a child's last name, date of birth, school, or location. We do not use advertising identifiers, third party analytics, or trackers belonging to anyone else, and we do not sell personal information.

Account information signs you in and lets us reply to you. Book information is sent to the model providers listed below so that a story can be written and illustrated, and it is stored so your books are still there tomorrow. Order information is used to print and ship a book. Technical information is used to keep the service up and to investigate abuse.

We do not use your books to train models, and we do not permit our providers to. The provider APIs we use exclude API traffic from model training under their terms.

We use a small number of processors, each of which receives only what it needs:

• OpenAI, for writing stories and painting illustrations. Receives the character sheet, the story idea, and the illustration prompts. Does not receive your email address.
• Neon, for the database that stores accounts, books and illustrations, hosted in the United States.
• Vercel, for hosting and serving this website.
• Stripe, for payments, when card payments are switched on. Receives your email address and payment details, which we never see in full.
• Resend, for verification and password reset email, when an email provider is configured.
• A print partner, for hardcover orders, which receives the book files and the shipping address.

Books and account information are kept until you delete them or delete your account. Deleting is immediate and complete: the account row, every book, every page, every illustration and every order record are removed in one operation. There is no soft delete and no separate archive.

Server logs are kept for 30 days. Records we are required to keep for tax or accounting reasons are kept for as long as the law requires.

You can export everything we hold about your account as a single JSON file, and you can delete all of it, from the Your data page while signed in. Both actions are immediate and neither requires you to write to us.

Depending on where you live you may also have the right to correct information, to object to processing, or to complain to a supervisory authority. Write to us and we will help rather than argue.

Quillow accounts are for adults. We do not knowingly collect personal information from anyone under 13. The information we hold about a child is a first name and appearance words that a grown-up chose. If you believe a child has created an account, write to us and we will remove it and everything attached to it.

Passwords are hashed with scrypt and are never stored in a readable form. Data is encrypted in transit. Illustration files are served from links that are not guessable and books are not public or indexed. Access to production data inside Quillow is limited to the engineers who need it.

If we change this policy in a way that matters, we will email account holders before it takes effect rather than quietly changing the date at the top of the page.