Privacy Policy

Super Cool Kids Adventure operates the website and service at this domain. We create AI-personalized children's storybooks delivered as digital PDFs (with an optional print-on-demand add-on). For any privacy question, contact us at support@supercoolkidsadventures.com.

Account information. When you create an account we collect your name, email address, and a password. The password is stored on our database as a salted bcrypt hash (work factor 12), never in plain text. Existing accounts created before this upgrade are transparently re-hashed with bcrypt the next time they sign in.

Child information for the book. To personalize the story we collect your child's first name, age, gender (used only to pick pronouns), interests, reading level, and any themes you'd like us to avoid. We do not ask for last name, date of birth, address, or government identifiers.

Photos. You upload one or more photos of your child so we can generate illustrations that resemble them. Photos are received over HTTPS, resized on our server, and used only to produce the illustrations for your current order. See section 5 for the exact deletion timeline.

Marketing sign-ups. If you choose to join our discounts-and-updates list, we collect and store the name, email address, and (optionally) phone number you enter so we can send you promotions and news about new books. This is entirely optional, separate from ordering a book, and you can ask us to remove you at any time. We do not sell this information. Signing up for the list never involves your child's photos.

Payment information. Payments are handled entirely by Square via a hosted Square checkout link. Square receives the card details directly. We do not see, store, or process card numbers on our servers.

Server logs. Our hosting provider (Replit) records standard request logs, including IP address, timestamp, request path, and user agent. These are operational logs, not a tracking product.

We use the information we collect strictly to:

• Generate the personalized story text and illustrations for your order
• Deliver the resulting PDF and, if you opt in to print, ship a physical copy
• Process your payment through Square
• Let you log back in to retrieve a previously delivered PDF
• Reply to support requests you send us
• Send discounts and product updates, but only if you opted in to our marketing list

We do not use your child's photos or profile for advertising, behavioral profiling, or for training general-purpose AI models, and we do not share them with anyone except the processors listed in section 6 for the limited purpose of fulfilling your order.

The Service is directed at adults — parents, legal guardians, and gift-givers such as grandparents or other family members authorized by them — not at children. Accounts must be created by an adult, and any information about a child is provided by that adult solely to generate the book they ordered. We do not knowingly collect information directly from a child under 13, and we never rely on a child consenting for themselves.

Verifiable parental consent before processing. Before you can upload a child's photo or generate a personalized book, we require you to affirmatively confirm — via an explicit checkbox — that you are the child's parent or legal guardian, or an adult authorized by the parent or legal guardian, and that all required permission has been obtained for the photo and details to be used to create the book. We will not run photo upload, likeness training, story generation, or illustration generation until that consent is recorded. We store the consent together with its exact wording, a version identifier, and a timestamp so there is a clear record of what you agreed to and when. If we materially change the consent wording, we ask you to consent again before your next book.

Your rights as a parent/guardian. At any time you can sign in to your Account page to review whether consent is on file and when it was recorded, delete your uploaded photos and trained likeness data on demand, or delete your entire account and order history. You can also email us at support@supercoolkidsadventures.com and we will action any deletion request.

We do not run a long-term photo library. Every order follows the same lifecycle:

1. You upload one or more photos via the create flow.
2. Our server resizes each photo and immediately deletes the original raw upload from disk.
3. The resized photo is sent to Fal.ai to generate a likeness reference for your child.
4. The likeness reference and resized photo URLs are then used to render each illustration.
5. As soon as your final PDF is generated and delivered, our server automatically deletes the resized photo files from disk and clears the photo URLs and likeness references from the order record in our database. The order is marked with a deletion timestamp so the cleanup cannot be skipped on a later request.

This automatic deletion runs on the PDF generation endpoint. There is no opt-in to keep photos on our servers between orders, and there is no paid plan that retains them. If you want a future book, you upload again.

Fal.ai trained model files. When we send a photo to Fal.ai to build a likeness model, Fal.ai produces a trained model file that lives on their infrastructure. As soon as your book is delivered, our cleanup job calls Fal.ai's deletion endpoint for that trained model artifact and retries on transient failures. The order is only marked photo-deleted once the deletion call succeeds (or, if Fal.ai is unreachable after our retry budget is exhausted, the failure is logged for our team to follow up with Fal.ai support so the artifact still gets removed).

What we cannot fully control: the OpenAI image API (used via the Replit AI Integrations layer for some illustrations) may briefly retain inputs for safety review per OpenAI's own policy. If you want us to forward an explicit deletion request to OpenAI on your behalf, email support@supercoolkidsadventures.com.

Delete photos on demand: you don't have to wait for the automatic cleanup. Sign in and use "Delete my uploaded photos now" on the Account page to immediately delete the resized photo files from disk and clear the likeness references for all of your orders, while keeping the finished books in your library. To remove everything, "Delete my account" on the same page removes your account and all of your orders (including any unprocessed photo files) from our database and disk.

To deliver each order we route specific data to specific processors. Each is listed below.

• Replit — hosts our application, our PostgreSQL database, and the disk where uploaded photos temporarily live. Replit sees everything we process, by virtue of running it.
• Square — receives your payment details directly via a hosted Square checkout. We receive only an order reference, not card data.
• Fal.ai — receives your child's resized photos so it can train a per-order likeness model used by our illustration step. As soon as your book is delivered we call Fal.ai's deletion endpoint for that trained model (with retries on transient failures); see section 5 for the exact behavior.
• OpenAI (via the Replit AI Integrations layer) — receives prompts and, for some illustrations, image inputs that are used to render the illustration. OpenAI may briefly retain inputs for abuse monitoring per their own policy.
• Printful — used only when you order a physical print. Printful receives the final illustrated PDF and your shipping address. Printful does not receive raw child photos.

We never sell personal information, and we do not share data with anyone outside this list for their own marketing.

We use a single session cookie so you can stay signed in long enough to complete an order and to download a previously delivered PDF. We do not use advertising cookies, cross-site tracking pixels, or third-party analytics scripts on this site.

All requests to and from our site are encrypted in transit using HTTPS, terminated at our hosting provider's edge. Account passwords are stored as salted bcrypt hashes with a work factor of 12. Photos live on our server only for the time needed to generate your book, then are deleted as described in section 5. No system is 100% secure, and we cannot guarantee absolute security, but we treat this seriously.

You have the right to:

• Access: ask us what data we hold about you.
• Correction: ask us to correct anything that's wrong.
• Deletion: delete your account and all order data using the Account page, or by emailing us.
• Forwarded deletion: ask us to forward a deletion request to Fal.ai or OpenAI for content related to your order.

To exercise any of these rights, email us at support@supercoolkidsadventures.com. We aim to respond within 30 days.

We may update this policy when we change how we handle data. When we do, we will update the effective date at the top of the page and, for material changes, send a note to your account email.

Questions or concerns? Reach us at support@supercoolkidsadventures.com.