Privacy and data

Data controller

Mohamed EL Mallahi, Tafersit, Driouch, Nador, Morocco, +212 624 719 009. Contact: bonjour@lubooks.com or the Contact us page (subject “My personal data”).

The data we use

• To make the book: your child’s first name, the chosen hero, the book’s language, the name given to the loved one in the story (grandmother, mom or dad depending on the book), the dedication and its signature, and, if you provide it, your child’s age (only to check that the story suits them).
• For the audiobook (optional): the text of the book, including the first name, and the pronunciation of the first name if you provide it. This text is sent to ElevenLabs, which creates the narration; the audio file is kept in the same way as the book.
• For the order: your email address, and your name if you give it. For a printed book, Peecho collects the delivery address itself; it sends us the order status, the delivery country and the package tracking.
• For payment: the printed book is paid for on Peecho’s page; we do not receive your card details.
• For security: technical logs (including a non-reversible fingerprint of the IP address during downloads), used to prevent abuse.
• To be notified when orders open (only if you ask before orders open): your email address, the date of your consent, and the books you were interested in. The address is used only to write to you once, when orders open.
• After an order with a hero created from a photo, if you choose: the illustrated avatar, kept to create another book (never the photo); and, with your separate consent, a copy reviewed for the hero library. Nothing is published.
• Audience measurement: anonymous counts (visits, personalized books, orders), with the campaign tags of the link you arrived from; no identifier and no IP address (see Cookies).

Why, and on what basis

• Making, delivering and tracking your order, and answering your questions: performance of the contract.
• Keeping accounting records: legal obligation.
• Preventing fraud and abuse: legitimate interest.
• Sending you our new stories, only if you asked: consent, which you can withdraw at any time.
• Notifying you when orders open, keeping the avatar after an order, reviewing it for the hero library: your consent, which you can withdraw at any time.
• Counting visits by campaign, anonymously: legitimate interest.

The photo preview

• It is optional: no photo is needed to order. Only the child’s parent or legal representative may send a photo of the child, after giving consent.
• The photo is used only to create an illustrated preview and then, if you order a book with this hero, the book itself. It is never published.
• The information added by the camera (location, date, model) is removed as soon as the photo is received. The photo is sent to Google (Gemini models), our illustration provider, to create an illustrated avatar inspired by your child; the photo itself never appears in the book.
• The photo and the avatar are deleted 24 hours after the photo is sent, or as soon as you ask from the preview page; if they are used for an ordered book, they follow the book’s retention period. No email address is requested for the preview. A hashed fingerprint of the photo and the browser is kept for one year with the cost of the preview, only to limit free previews and track spending; the fingerprint of the connection is kept for two days, to limit repeated requests.
• Legal basis: your consent, which you can withdraw at any time by deleting the photo.

What we do not do

• We do not ask for a child’s photo to place an order.
• Your child’s first name is never sent to the service that creates the illustrations: it is added to the book as typeset text.
• We do not sell your data and do not use advertising trackers.

Who has access

The site operator, and providers acting on the operator’s behalf: hosting, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (+49 9831 505-0); file storage, Cloudflare R2 (Cloudflare, Inc., United States); email delivery, Resend (Resend, Inc., United States; sent from the European Union); payment, PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg), Creem (Armitage Labs OÜ, Estonia, registry code 16977866, Rotermanni 14, 10111 Tallinn); audiobook narration, ElevenLabs (United States); preview and hero from a photo, Google Cloud Vertex AI (processing in the European Union). Some of these providers are established outside the European Union (United States), and the site operator is established in Morocco: data is shared with them only to the extent necessary for the service.

Printed books are sold, charged for, printed and delivered by Peecho B.V. (Netherlands, Chamber of Commerce no. 34366667). Peecho receives the book file (your child’s first name, the dedication) and itself collects your delivery and payment details, for its own sale and under its own privacy policy.

For how long

• Order data and accounting records: 10 years (accounting obligations), then anonymization.
• Book personalization: 24 months after delivery, to allow a new download or a reprint, then deletion.
• Carts with no order: 30 days.
• Photo and illustrated avatar: 24 hours (unless they are used for an ordered book); hashed fingerprints: 12 months (for the connection: 2 days).
• Avatar kept after an order: 12 months, or until you delete it. Copy offered to the hero library: until you withdraw your consent.
• Address left to be notified when orders open: erased after 30 days if it is not confirmed, otherwise after 12 months at most, or as soon as you ask.

Your rights

You can ask for access to your data, or for its correction, deletion or portability, and you can object to certain processing, by writing to us from the Contact us page. You can also contact the competent data protection authority (the CNIL in France, the CNDP in Morocco).