Privacy Policy

Last updated: March 2026

1. What We Collect

We collect only what is necessary to create and deliver your comic book:

  • Photo: The image you upload of your child
  • Email address: To deliver the comic book PDF, and — if you reach payment but don't finish — one reminder with a link back to your order
  • Child's first name: Used in the comic story (not stored with the photo)
  • Payment info: Processed directly by Stripe — we never see or store your card details

2. How We Use Your Photo

Your uploaded photo is:

  • Used only to generate your personalized comic book
  • Sent to OpenAI's image generation API for processing
  • Automatically deleted from our servers within 24 hours
  • Never used for AI model training
  • Never shared with third parties beyond what is needed for generation
  • Never used for marketing or advertising

3. Third-Party Services

We use the following trusted services:

  • fal.ai — AI image generation for the comic pages
  • OpenAI — story writing and content moderation (subject to OpenAI's Privacy Policy)
  • Stripe — Payment processing (subject to Stripe's Privacy Policy)
  • Resend — Email delivery
  • Cloudflare — Hosting, cookie-free visit statistics and bot protection (Turnstile) on the order and login forms
  • Meta (Facebook) — Ad measurement, only if you accept cookies: the Meta Pixel records page views and checkout starts, and when you buy we tell Meta about the purchase (order value, a hashed email address, your IP address and browser) so we can see which ads work. Your child's photo, name and comic are never shared. You can decline in the cookie banner, or clear this site's data in your browser to choose again. See Meta's Privacy Policy.

4. Data Retention

  • Photos: Deleted within 24 hours
  • Generated comic books: Available for download indefinitely
  • Email address: Retained for order communication; you can request deletion anytime
  • Payment records: Retained as required by law (typically 7 years for tax purposes)

5. Children's Privacy (COPPA)

KidCape is a service for parents/guardians. We do not knowingly collect personal information from children under 13. The service is operated by parents who upload their child's photo and provide their own (parent's) email address. If you believe a child has provided us with personal information, please contact us immediately.

6. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

  • Access your personal data
  • Request correction or deletion of your data
  • Object to processing
  • Data portability
  • Withdraw consent at any time

To exercise these rights, email hello@kidcape.app.

7. Security

We use HTTPS encryption for all data in transit. Payment processing is handled by Stripe (PCI DSS compliant). Photos are stored on encrypted servers and automatically purged.

8. Contact

For privacy questions or data requests: hello@kidcape.app