Your family's privacy

ThreePebbles (threepebbles.ai and app.threepebbles.ai) is run by [COMPANY NAME], a company registered in England and Wales (company number [COMPANY NUMBER]), at [COMPANY ADDRESS]. We are the data controller for the information on this page.

We are registered with the Information Commissioner's Office (ICO), registration number [ICO REGISTRATION NUMBER].

• Your account: your email address, used to sign you in with a magic link.
• Your book details: the names, ages and details you give us for the people in a story.
• Photos, if you choose to upload one, to turn into a cartoon character.
• Your orders: what you bought and when. Card details go straight to Stripe; we never see or store them.
• Messages you send us, and your email if you join our newsletter.

Uploading a photo is optional. If you upload a photo of a child, you confirm you are their parent or guardian and you consent to us using it. That consent is our lawful basis for using the photo.

We use the photo for one thing only: to make the cartoon character and the book you asked for. We do not use it to train AI, we share it only with the AI service that draws the character, and we do not use it to recognise or identify anyone.

You can withdraw your consent at any time and we will delete the photo.

• To make and deliver the book you bought (this is needed to carry out our contract with you).
• To use a child's photo (your consent, as above).
• To send the newsletter (your consent; every email has an unsubscribe link).
• To keep records of sales (a legal duty under UK tax law).
• To keep the site safe and working (our legitimate interest in running the service).

We never sell your data. We share it only with the services that help us run ThreePebbles, under contracts that protect it:

• Supabase: accounts, sign in and photo storage.
• Stripe: payments.
• Resend: sending emails such as your sign in link and receipts.
• AI services that help write and illustrate the book, such as Google (Gemini), Anthropic, OpenAI, xAI and Black Forest Labs. They receive only what is needed to make your pages.

Our own computers that run ThreePebbles are in the UK. Some of the services above may handle data outside the UK; when they do, they use the safeguards UK law requires. Our monitoring tools never receive names, photos or story text.

• Photos: only while we make your character and book, then deleted within [PHOTO RETENTION PERIOD], or sooner if you ask.
• Your account and your books: for as long as you have an account, so you can keep reading them.
• Order records: six years, as UK tax law requires.
• Messages: as long as we need them to help you, then deleted.

You can ask to see the information we hold about you, correct it, delete it, or take a copy. You can also object to how we use it or withdraw consent. To ask, contact us. We reply within one month.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the ICO at ico.org.uk.

We use only the cookies the site needs to work, such as keeping you signed in and remembering your basket. We do not use advertising or tracking cookies, so there is nothing to accept or turn off.

If we change this page we will update the date at the top, and tell you by email if the change matters. See also our terms and refunds.