Privacy Policy

This Privacy Policy explains how Adam Caza, operating as MYMGG (“StorySmith,” “we,” “us,” or “our”) handles information when you use the StorySmith service to create a personalized illustrated storybook. We have written it to describe what actually happens in the product, not generic boilerplate.

1. Information we collect

Photos you upload

To create a personalized book, you may upload a photo of the person the story is about (the “hero”). We use this photo only to generate an illustrated likeness for your book. We do not sell uploaded photos, use them to train public models, or use them for advertising.

Email address

We collect your email address so we can deliver your finished book, send a receipt and order-related messages, and provide customer support. We will only send you marketing email if you separately opt in.

Payment information

Payments are processed by Stripe. When you purchase a book, your card details are entered into Stripe’s secure checkout and are handled by Stripe. We do not receive or store your full card number. We receive limited information from Stripe such as a transaction identifier, payment status, and the email associated with the purchase.

Story content and usage data

We store the choices you make while building a story (such as the recipient’s name, story settings, and the generated text and illustrations) so we can produce and deliver your book. We also collect basic technical and usage data (such as device/browser information and error logs) to operate, secure, and improve the service.

2. How we use your information

• To generate, illustrate, and deliver your personalized book.
• To process your payment and provide receipts and order support.
• To communicate with you about your order and respond to your requests.
• To operate, secure, debug, and improve the service.
• To comply with legal obligations and enforce our Terms of Service.

3. Third parties we share with

We share information only with service providers that help us run StorySmith, and only as needed to provide the service:

• Stripe: payment processing. Stripe handles your card details under its own privacy policy.
• OpenAI and Google: image generation. We use OpenAI’s gpt-image-1 model and Google’s Gemini image models to illustrate your book. Your uploaded photo and the prompts built from your choices may be sent to these providers solely to produce your book’s artwork, and each provider handles that data under its own terms and privacy policy.
• Vercel: application hosting, file storage, and content delivery.
• Supabase: the managed Postgres database that holds your story records.
• Clerk: sign-in and account management.

We do not sell your personal information. We may disclose information if required by law, to protect our rights, or as part of a business transfer (such as a merger or acquisition).

4. Data retention

• Original uploaded photos: deleted once you approve the generated hero likeness, as described above.
• Preview stories you never purchase: deleted automatically after a limited period, so unfinished work does not sit on our systems indefinitely.
• Books you purchased: we keep your finished book so you can come back and download it again. We have not set an end date for how long a purchased book stays available. We will publish one here before we start removing books, and we will email you first, so you always get the chance to save your copy.
• Order and payment records: retained as needed for accounting, tax, and legal requirements.

You may request deletion of your data at any time (see “Your rights” below), subject to records we are legally required to keep.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at adam@mymgg.com. We will respond within the timeframe required by applicable law.

6. Children’s privacy (COPPA)

Parental responsibility. Because a book may include a child’s photo, name, or likeness, the adult who creates the book is responsible for confirming they are the parent or legal guardian of that child, or have the permission of the parent or legal guardian, before uploading a photo or entering a child’s information. By uploading a photo of a child, you represent that you have the authority to do so.

If you believe a child under 13 has provided us with personal information without parental consent, please contact us at adam@mymgg.com and we will delete it.

Note: laws protecting children’s data (including COPPA in the United States and similar laws elsewhere) are complex and depend on how the product is marketed and used. This section has not yet been reviewed by qualified legal counsel.

7. Security

We use reasonable administrative and technical safeguards to protect your information, including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

9. Contact us

Questions about this Privacy Policy or your information? Contact Adam Caza, operating as MYMGG at adam@mymgg.com.

StorySmith is run from Ontario, Canada. We are a small business and do not publish a street address on this page. If you need one in writing, for a legal notice or a formal privacy request, email us and we will provide it.