Privacy Policy

1. Information we collect

Information you provide

• Account information: your email address and authentication records, such as one-time-code status and session information.
• Story and family content: story text, titles, names, relationships, dedications, and other details you choose to include.
• Photographs and recordings: uploaded family photographs, image metadata, voice recordings, and resulting transcripts. These may include information about children or other family members.
• Book choices: illustration style, edits, approvals, copy quantity, and generated text and illustrations.
• Order and support information: recipient and shipping details, transaction identifiers, payment status, taxes, order history, messages, and information you provide when asking for help.
• Email choices and delivery activity: whether you want project reminders or optional story inspiration, the consent wording and source shown to you, unsubscribe choices, and whether a reminder was sent, clicked, or followed by a purchase.

Stripe collects your payment-card information directly. Loreloom does not receive or store your full card number or card security code.

Information collected automatically

When you use Loreloom, we and our infrastructure providers may process limited technical information such as IP address, browser and device type, request time, pages or features used, cookie or session identifiers, and security or error logs. We use this information to operate, protect, and troubleshoot the service.

We use PostHog for limited product analytics, such as whether a story was created, a creation step was completed, photographs or audio were uploaded, or checkout was started or completed. After sign-in, we associate these events with an opaque account identifier. We disable automatic click capture and session recording, remove project identifiers and URL details, and do not send story text, photographs, recordings, family names, email addresses, or book contents to PostHog. Automatic error reports are limited to public informational pages.

On public pages viewed from the United States, we use Meta's browser pixel and server-side conversion tools to measure ad visits, checkout starts, and completed purchases. This measurement is disabled for visitors outside the United States, when a browser sends a Global Privacy Control signal, or when you turn it off below. The limited information used for measurement may include cookie identifiers, technical browser information, a hashed email address, and order subtotal before tax. We do not share family stories, photographs, recordings, book contents, names of family members, or shipping addresses for advertising.

2. How we use information

We use personal information to:

• create and secure your account;
• save your progress and provide the book-creation service;
• transcribe recordings and generate story text and illustrations;
• process payments, calculate taxes, print, and fulfill orders;
• send sign-in codes and necessary service or order messages;
• send a limited number of reminders about Loreloom projects you begin, unless you pause those reminders;
• send story inspiration and occasional offers only when you choose to receive them;
• respond to support, privacy, and legal requests;
• detect fraud, abuse, security incidents, and service errors;
• maintain and improve the reliability of Loreloom; and
• comply with law and enforce our Terms.

3. How we disclose information

We disclose information only as reasonably needed for the purposes above, including to these categories of recipients:

• Cloud infrastructure and email-delivery providersthat host the app, private data, files, workflows, AI processing, logs, necessary transactional email, and the lifecycle messages you have not paused or have chosen to receive. We do not put your story, photographs, recordings, or family names in lifecycle emails.
• Artificial-intelligence providers that process the portions of stories, photographs, and instructions needed to generate text and illustrations.
• Stripe for payment processing, fraud prevention, tax calculation, and collection of shipping information.
• Printing and shipping providers that receive the approved print files and order information needed to manufacture and deliver your books.
• Advertising measurement providers, only when you choose advertising measurement, to measure the effectiveness of Loreloom ads. They do not receive your family-project content.
• Product analytics providers that receive limited, privacy-filtered feature-use events so we can understand and improve the service.
• Professional advisers and authorities when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or handle a business transaction.

We do not sell personal information or share it for cross-context behavioral advertising. We also do not disclose your project to another Loreloom customer unless you direct us to do so.

4. Artificial intelligence

Loreloom uses artificial-intelligence systems to help plan, write, transcribe, and illustrate your book. This requires sending relevant project content to our contracted infrastructure and AI providers. We limit the content sent to what is needed for the requested step. Generated results and provider safety systems may be imperfect, so you should review the finished book before approving it for print.

5. Children’s information

Loreloom is intended for adults and is not directed to children under 13. Children may not create accounts or submit information directly. An adult may include information or photographs about a child only when the adult has authority and permission to do so.

If you believe a child has submitted personal information directly or created an account without appropriate authorization, contact us so we can investigate and delete it where required.

6. Retention and deletion

We keep account and project information while your account or project is active and as reasonably necessary to provide the service. Draft projects that are eligible for in-app deletion are removed from our active database and private object storage when you delete them.

We retain payment, tax, order, consent, fraud-prevention, and fulfillment records as needed for legal, accounting, dispute, and operational purposes. Paid projects and print assets may need to be retained while an order is generated, reviewed, produced, delivered, or disputed. Information may remain for a limited time in encrypted backups, caches, or security logs before routine deletion or overwriting.

You may request deletion of an account or a project that cannot be deleted in the app by contacting us. We will delete or de-identify information unless retaining it is necessary for a permitted legal or operational reason.

7. Security

We use administrative, technical, and physical safeguards designed for the sensitivity of family stories, photographs, recordings, and addresses. These include private access controls, authorization checks, protected infrastructure, and secure payment collection by Stripe. No system can guarantee absolute security, so please use an email account only you can access and contact us if you suspect unauthorized activity.

8. Your privacy choices and rights

You can review and edit active project details in Loreloom and delete eligible drafts in your account. Depending on where you live, you may also have the right to request access, correction, deletion, or a portable copy of personal information; to learn about disclosures; to withdraw consent; or to appeal a denied request.

Send a request to contact@loreloombooks.com. We may need to verify your identity and authority before acting. An authorized agent may submit a request where local law permits. We will not discriminate against you for exercising a privacy right.

You can change project reminders and optional inspiration or offers at any time on the email preferences page. Every lifecycle email includes an unsubscribe mechanism that works without signing in. Turning these messages off does not stop sign-in codes, payment confirmations, book-production updates, shipping notices, or support replies.

You can turn advertising measurement off at any time. We also honor Global Privacy Control signals automatically. This choice does not change any story, account, checkout, or order feature.

9. Processing locations

Loreloom is operated by an Arizona limited liability company in the United States. We and our service providers may process information in the United States and other locations where they operate, subject to appropriate protections required by applicable law.

10. Changes to this policy

We may update this policy as Loreloom or privacy law changes. We will post the revised policy and update its effective date. If a change is material, we will provide additional notice when reasonably appropriate.

11. Contact us

For privacy questions or requests, email contact@loreloombooks.com or use our contact page.

The business responsible for this policy is Memorate Software LLC, doing business as LoreLoom.