Launching 28 September 2026. Tell me when it opens
TuckJoy

Privacy Policy

Last updated 2026-09-22

TuckJoy (Bengaluru, India) is responsible for the personal data described here. The short version: we use your child's photos only to draw their character, then delete them straight away; we never compute face templates; we keep books for 7 days; we don't use ads or tracking cookies and never sell data.

1. What we collect

  • Account: your name and email address from Google sign-in, your country, and your consent records (for example that you are 18+ and accepted these terms).
  • About the book: the child's or pet's first name, age range, theme and any details you type in, the story, and the illustrations and files we make.
  • Photos: the 1 to 3 photos you upload for the character drawing. These are deleted as described below.
  • Payments: handled by Dodo Payments. We receive a record of the order (product, amount, status), not your card details.
  • Technical data: basic logs and error reports needed to run and secure the service, with personal details removed where possible.

2. Why we use it

  • To make and deliver your book (performing our contract with you).
  • To process photos of a child, on the basis of the explicit consent you give as parent or guardian when you upload.
  • To keep the service safe: checking uploads and illustrations for harmful content, preventing abuse of the free preview (legitimate interests and legal obligations).
  • To send service emails about your book, such as "your book is ready" and deletion reminders.
  • We don't use your data for advertising, and we don't sell or share it for that purpose.

3. Children's photos

Photos are used only to draw the character. They are deleted as soon as the character drawing is made, whether or not that succeeds, and every page after that is drawn from the illustration. Photos uploaded but never used are deleted within 1 hour. Metadata such as location is removed when you upload. We never create face templates or other biometric identifiers. Children do not use TuckJoy; accounts are for adults (18+), and you must be the child's parent or guardian or have their permission.

4. AI processing

Stories are written, and uploads and illustrations are checked for safety, using Google's Gemini API on a paid plan, under terms that don't allow Google to use this data to improve its products. Illustrations are drawn by an image model running on our own cloud GPUs. No one else's model is trained on your photos or books.

5. Who processes data for us

  • Supabase: account database and sign-in, hosted in Frankfurt, Germany.
  • Cloudflare: website, file storage (EU jurisdiction), email forwarding.
  • Modal: cloud GPUs that draw the illustrations, United States.
  • Google (Gemini API): story writing and safety checks, United States.
  • Resend: service emails.
  • Sentry: error reports, hosted in Germany.
  • Dodo Payments: payments and tax, as merchant of record.

Each works under a data processing agreement. Where data leaves the EU or UK, it is protected by the European Commission's standard contractual clauses or an equivalent safeguard.

6. How long we keep it

  • Uploaded photos: until the character drawing is made; unused uploads, 1 hour.
  • Finished books (character drawing, illustrations, PDFs, flip-book and share link): 7 days after the book is ready, or longer if you choose to keep it (30 days for 1 credit).
  • Unfinished drafts: 30 days.
  • Account data: until you delete your account. Order records are kept as long as tax law requires.

7. Your rights

Depending on where you live (including under the GDPR, UK GDPR and India's DPDP Act), you can ask to see, correct, export or delete your data, withdraw consent, or object to processing. You can delete your account, and everything in it, from your account page; that is completed within 24 hours. For anything else, email [email protected]. You can also complain to your data protection authority.

8. Grievance Officer

TuckJoy Grievance Officer, Bengaluru, India. Email [email protected]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

9. Cookies

We only use cookies that are needed to keep you signed in. Our website statistics are cookieless. That's why there's no cookie banner.

10. Security

Data is encrypted in transit and at rest, access is limited to what each part of the service needs, and files are reached through short-lived private links. If a breach affects you, we will tell you and the authorities as the law requires.

11. Changes

If we change this policy in a way that matters, we'll email you before the change applies.