1. Introduction

Hikayati ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our AI-powered storybook generation service. By using Hikayati, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

Account Information

• Email address
• Name (if provided)
• Authentication data (managed by Supabase Auth)

User-Uploaded Content

• Character photos you upload for story generation
• Story prompts and descriptions you provide
• Style and tone preferences you select

Generated Content

• AI-generated story text
• AI-generated illustrations
• Ratings and feedback you provide

Usage Data

• Pages visited and features used
• Device type, browser, and operating system
• IP address and approximate location

3. How We Use Your Information

We use your information to:

• Provide and operate the storybook generation service
• Process your uploaded photos through our AI to generate illustrations
• Create and deliver personalized storybooks
• Process orders for physical printed books
• Improve our AI models and service quality
• Communicate with you about your account and orders
• Enforce usage limits and prevent abuse
• Comply with legal obligations

4. Data Storage & Security

Your data is stored securely using Supabase, which provides enterprise-grade security including:

• Encrypted data at rest and in transit
• Row-level security policies on all database tables
• Secure authentication with session management

Uploaded images are stored in secure cloud storage buckets with access restricted to the uploading user. We retain your data for as long as your account is active or as needed to provide the Service.

5. Photo & Image Privacy

We take special care with the photos you upload:

• Photos are used solely to generate your storybook illustrations
• Photos are stored in private, user-scoped storage buckets
• We do not share your photos with third parties for marketing purposes
• Photos may be processed by our AI service providers to generate illustrations
• You can request deletion of your photos at any time

6. Sharing of Information

We may share your information with:

• AI Service Providers — to process your content and generate stories and illustrations
• Printing Partners — to fulfill physical book orders (shipping address and book content only)
• Payment Processors — to process transactions securely
• Legal Authorities — when required by law or to protect our rights

We do not sell your personal information to third parties.

7. Cookies & Local Storage

We use browser local storage and session storage to maintain your authentication state, store form data temporarily during sign-in redirects, and track generation progress. We do not use third-party tracking cookies for advertising purposes.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Download your generated storybooks
• Withdraw consent for data processing
• Lodge a complaint with a data protection authority

9. Children's Privacy

Hikayati is designed to create storybooks for children, but the Service itself is intended for use by adults (18+) or by children under parental supervision. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@hikayati.com