Privacy Policy

Last updated: January 2026

WonderSpun ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our children's storybook creation service at wonderspun.ai (the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide when using the Service:

  • Account Information: When you sign in with Google, we receive your email address, name, and profile picture from your Google account.
  • Character Data: Names, descriptions, traits, and photos you upload for story characters.
  • Story Content: Stories you create, including text, prompts, and preferences.
  • Payment Information: If you subscribe to a paid plan, we collect billing information through our payment processor, Stripe. We store your Stripe customer ID and subscription status, but not your payment card details.

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

  • Usage Data: Pages visited, features used, and interactions with the Service.
  • Device Information: Browser type, operating system, and device identifiers.
  • Cookies: Session cookies for authentication and analytics cookies for improving the Service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Generate stories and illustrations based on your inputs
  • Process payments and manage subscriptions
  • Send service-related communications
  • Analyze usage patterns to improve user experience
  • Protect against fraud and abuse
  • Comply with legal obligations

3. Third-Party Services

We share information with the following third-party services to operate the Service:

ServicePurposeData Shared
Google OAuthAuthenticationEmail, name, profile picture
Google GeminiAI text and image generationStory prompts, character descriptions, uploaded photos
VercelHosting and file storageGenerated images, uploaded photos
StripePayment processingEmail, name, subscription data
PostHogAnalyticsUser ID, email, pageviews

Each third-party service has its own privacy policy governing the use of your information. We encourage you to review their policies.

4. AI-Generated Content

When you use our Service, your inputs (including character descriptions, story prompts, and uploaded photos) are processed by Google's Gemini AI models to generate stories and illustrations. This data is transmitted to Google's servers for processing.

We do not use your content to train AI models. However, Google may process this data according to their own privacy policies and terms of service.

5. Data Storage and Security

Your data is stored on secure servers provided by Vercel and our database provider. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Generated stories and illustrations are retained until you delete them or your account is terminated.

7. Your Rights

You have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we correct inaccurate or incomplete information.
  • Deletion: Request that we delete your personal information.
  • Data Portability: Request your data in a structured, commonly used format.
  • Withdraw Consent: Withdraw consent for processing where consent is the legal basis.

To exercise these rights, please contact us at privacy@wonderspun.ai.

8. Age Restrictions

The Service is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at privacy@wonderspun.ai.

While our Service creates content for children, the Service itself should be used by parents, guardians, or users aged 13 and older to create stories for young readers.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Do Not Sell: We do not sell your personal information to third parties.

To exercise your California privacy rights, contact us at privacy@wonderspun.ai.

10. Cookies

We use the following types of cookies:

  • Essential Cookies: Required for authentication and core functionality (NextAuth session cookies).
  • Analytics Cookies: Help us understand how users interact with the Service (PostHog).

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of the Service.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your information remains protected.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

For significant changes, we may provide additional notice, such as an email notification or a prominent notice on the Service.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@wonderspun.ai