Privacy policy

Tolu (“we”, “us”) creates personalised AI-illustrated storybooks for children. You can reach our privacy team at hello@tolu.app.

• Account data, your email, display name, and a securely hashed password (managed by our authentication provider).
• Child profile data you enter, name, age, gender, character description, favourite things, optional reference photo. Used solely to generate your personalised book.
• Shipping address, only when you order a printed book.
• Payment metadata, order amount and last-4 of card. We never see or store full card numbers; payments are handled by Stripe.
• Approximate country, derived from your IP via Cloudflare to show local currency and language. We do not store your IP.
• Basic product analytics, page visits, feature usage, generation logs to keep the service running and debug errors.

We do not knowingly collect data from children directly. The parent or guardian provides child profile data on the child's behalf. We do not sell, rent, or trade your personal data to anyone, ever.

• Generate your personalised book (story + illustrations).
• Process payments and fulfil printed-book orders.
• Send transactional emails (order confirmation, shipping updates, password resets).
• Improve the product (debug errors, measure feature usage).

Your child's name and the details you enter are sent to our AI provider (Lovable AI Gateway, which routes to Google Gemini and OpenAI models) only to generate your story and illustrations. Per our agreement with these providers, your inputs are not used to train third-party models.

Book and child-profile data is kept while your account is active so you can re-download or re-order your books. You can delete your account at any time from the dashboard, or email hello@tolu.app and we will permanently erase your data within 30 days.

If you live in the EU/EEA/UK, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (“right to be forgotten”)
• Export your data in a portable format
• Restrict or object to certain processing
• Lodge a complaint with your local data protection authority

Email hello@tolu.app to exercise any of these rights. We respond within 30 days.

We use essential cookies only: an authentication session cookie, a language preference, and a short-lived currency/geo cache. We do not use third-party advertising cookies or cross-site trackers.

We share the minimum data needed with these trusted providers:

• Stripe, payment processing
• Lovable AI Gateway (Google, OpenAI), story and illustration generation
• Lovable Cloud, database, authentication, file storage
• Cloudflare, edge hosting and country detection
• Our print fulfilment partner, printing and shipping (printed-book orders only)
• Our transactional-email provider, order and account emails

Tolu is designed for parents and guardians purchasing a book on behalf of a child. Accounts are for adults 18+. Children should not create accounts or provide personal data to us directly.

If we make material changes, we'll notify account holders by email at least 14 days before the changes take effect.

Questions or requests? Email hello@tolu.app. We read every message.