On this page
Plain-English summary
You upload a photo and a few details about your child. We use those to write and illustrate a custom book. Your child's data belongs to you. We don't sell it, share it with advertisers, or train AI models on it. You can delete it any time.
Who can use Me the Star
You must be 18 or older. By uploading any photo of a child, you represent that you are the child's parent or legal guardian, and that you have authority to consent on their behalf. Me the Star is designed for use by parents about their children; it is not a service used directly by children. Children do not log in, type, or share information themselves.
What we collect
- Account: your name, email, sign-in metadata.
- Child profile (you provide): child's first name, age, pronouns, interests, the photo you upload, and the optional "real-life moment" you write.
- Generated content: the stories and illustrations we produce for your kid, narrated audio, and any books you save or order.
- Order data: shipping address, order history, payment confirmations (we do not store full card numbers; Stripe handles that).
- Usage data: standard server logs (IP, browser, page paths) for fraud, abuse, and reliability.
How we use it
- To generate stories and illustrations starring your child.
- To print and ship your book.
- To send transactional email (sign-in links, order confirmations, shipping updates).
- To send product emails, such as a reminder to finish a book. Every product email has an unsubscribe link.
- To improve product reliability (aggregate metrics only, never tied to a specific child).
- To prevent abuse (e.g. checking uploaded photos against known-stock and known-meme datasets to deter misuse).
We do not use your child's photo, name, or stories to train AI models, sell advertising, or share with third-party data brokers.
Third-party processors
We use a small set of trusted vendors. Your data passes through them only as needed to run the service:
- Supabase: database and authentication (US/EU regions).
- Vercel: application hosting and image storage (Vercel Blob).
- Stripe: payment processing. We never see or store full card numbers.
- Resend: transactional email delivery.
- Brevo: product emails and replies to your support messages. It stores your email address, first name, sign-up date and book count. It also stores your child's first name, which the emails use.
- OpenAI / Anthropic / xAI / Google: language and vision models for story and illustration generation. These models are called via API; per their commercial terms, your prompts and outputs are not used to train their models.
- Lulu Direct: print-on-demand fulfillment in Pennsylvania, USA.
- Meta (Facebook) Pixel: measures and optimizes our advertising. It records standard web events (page views, sign-ups, purchases) and sets the _fbp cookie. It never receives your child's photo, name, or stories.
- TikTok Pixel: measures and optimizes our advertising on TikTok. It records the same standard web events as the Meta Pixel and sets the _ttp cookie. It never receives your child's photo, name, or stories. Opt out with "Reject non-essential" in the cookie banner.
- Microsoft Clarity: session replay and heatmaps, so we can see which screens confuse people and fix them. Every element that displays your child's photo is masked before recording, so uploads are never captured. Opt out with "Reject non-essential" in the cookie banner.
Data retention
- Photos: retained while you have an active kid profile or until you delete the kid. Auto-deleted 30 days after your last order or 12 months of inactivity, whichever is later.
- Stories and illustrations: retained as long as your account is active so you can re-read them.
- Order and payment records: retained for 7 years for accounting and tax purposes.
- Server logs: retained 30 days then aggregated.
Your rights
- Access and export: download a JSON of every kid, book, and order from Settings, Privacy and data.
- Deletion: delete your account at any time. Already-printed books cannot be unprinted, but the underlying digital data is wiped within 30 days.
- Correction: edit any kid profile or book at any time.
- Withdraw consent: stop using the service and delete your account. We'll delete on request.
COPPA and under-13 considerations
Me the Star is a parent-facing service, not a children's online service under COPPA. We do not knowingly collect personal information directly from children under 13. All data about a child is provided by the parent or guardian who created the account. If you believe a child has provided us data without parental consent, contact us and we'll delete it.
Reviewer process
Every printed book passes through a human reviewer before it goes to the printer, to verify the illustrations are appropriate, recognizably resemble your child, and meet print quality. Reviewers see the book content but do not export, share, or retain it.
Security
Data is encrypted in transit (TLS) and at rest. Access is role-restricted; only specific personnel can review books in the moderation queue. We post-mortem and disclose any incident affecting your data within 72 hours.
Contact and changes
Questions, requests, or concerns: masseyalexandre@gmail.com. Privacy-specific: include "PRIVACY" in the subject line for priority handling.
We'll email you before any material change to this policy and post the new effective date here.