Privacy Policy

Summary

We collect as little as we can. To make a personalised book we need a child's first name only — never a surname, address, school, photo or date of birth. We never sell data, and we never use your child's details for advertising.

Who is responsible

Lindo Learns is the data controller for personal data processed through https://lindophonics.com. Contact: hello@lindophonics.com.

What we collect

• Account: your email address and a securely hashed password. We never store your password itself.
• Books: the child's first name, the story setting and reading level you choose, and the generated text and illustrations.
• Payment: handled entirely by Paddle. We receive a customer reference and subscription status — never your card details.
• Feedback: anything you submit through the feedback form.
• Technical: basic server logs and, if enabled, privacy-respecting analytics about page usage.

Children's data

Accounts are held by adults, not children. We ask only for a child's first name so the story can star them. Please don't enter a surname or any other identifying detail — the first name alone is all the service needs. If you'd prefer, use a nickname; it works just as well.

Why we process it (lawful bases)

• Contract — to create your account, generate your books and provide the service you've paid for.
• Legitimate interests — to keep the service secure, prevent abuse, and improve story quality.
• Legal obligation — to keep records required for tax and accounting.
• Consent — for optional analytics, where required.

Who we share it with

We use a small number of processors, and only send them what they need:

• OpenAI — story text and narration audio. The prompt includes the child's first name.
• ImageRouter — illustration generation from the scene description.
• Paddle — payments and billing (merchant of record).
• Resend — sending account emails such as confirmation and password resets.
• Our hosting provider — storing the site, database and generated images.

Some of these providers are outside the UK/EEA. Where that's the case, transfers are covered by appropriate safeguards such as standard contractual clauses.

How long we keep it

• Account and books: until you delete them or close your account.
• Deleted books: removed from your library immediately; illustrations are deleted when you choose that option.
• Payment records: as long as tax law requires (normally six years).
• Webhook and server logs: routinely purged after 90 days.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can object to processing based on legitimate interests. Email hello@lindophonics.com and we'll respond within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies

We use a strictly necessary cookie to keep you signed in. If analytics are enabled, they are used only to understand general usage patterns, never to profile children.

Security

Data is sent over HTTPS, passwords are hashed with bcrypt, and books are only accessible to the account that created them. No system is perfectly secure, but we take this seriously — if a breach affects you, we will tell you.