Privacy Policy

Who this service is for

Pikok Adventures is designed to be used by an adult — a parent, guardian, or family member — who enters details about a child in order to generate a personalized story for that child. It is not directed at, or intended for, direct unsupervised use by children under 13.

We do not knowingly collect personal information directly from a child. Every detail we receive is entered by the adult operating the site or app.

Information we collect

We built Pikok Adventures to need as little personal information as possible. Here's exactly what we collect:

• Story details you provide: a child's first name, age, gender (only asked if a name is given, so we can use the right pronouns), a short free-text description of characters or pets, chosen theme, and story language/length. We deliberately don't ask for a child's last name, address, phone number, school, or photo — illustrations are generated entirely from your text description, never an uploaded image.
• Contact information: an email address, if you choose to provide one — used to send your purchase receipt and a private access link, and to let you recover that link later if you lose it.
• Payment information: when you buy a credit pack, payment is handled directly by Braintree (a PayPal service) and, where used, Apple Pay or Google Pay. We never see or store your full card number — our systems only receive a one-time payment token and the resulting transaction ID.
• Automated safety logs: if our content filter flags something you entered, we log the flagged input, its category, and the IP address it came from, for trust-and-safety review.
• A local device flag: your browser stores a small local note (never sent to us as personal data) marking that your one free story has been used.

How we use your information

• To generate, personalize, and deliver your story.
• To process payment and issue or recover your access link.
• To send transactional emails — receipts and recovery links — never marketing email unless you ask us for it.
• To detect abuse, fraud, and content that violates our Acceptable Use rules.
• To operate, maintain, and improve the Service.

AI processing & other service providers

We share the minimum data necessary with the following providers, solely to deliver the Service:

• Anthropic (Claude API) — writes the story text from your inputs.
• Replicate — generates illustrations from text prompts describing your characters and scenes.
• Braintree / PayPal, Apple Pay, Google Pay — process payment; we never touch your raw card data.
• Resend — delivers transactional emails (receipts, recovery links).
• Upstash (Redis) — securely stores your session: credits, story details, and access token.
• Railway and Vercel — host our backend API and website.

These providers are contractually restricted to using your data only to perform services for us, and are located in various countries (primarily the United States) — by using Pikok Adventures you consent to this international transfer of your data.

We do not sell your personal information, and we do not use your data for third-party advertising.

Content moderation & safety

To keep the Service appropriate for a children's product, story inputs and generated content pass through automated moderation. If something is blocked or altered, we keep a record of the flagged input, the reason, and your IP address for 90 days, purely for safety review — we do not keep the generated PDF or images in that record.

Data retention

• Session data (your story details, credits, and access token) is retained for up to 1 year, matching how long your access link stays valid.
• Moderation records are retained for 90 days.
• You can ask us to delete your data earlier at any time — see "Your rights" below.

Data security

Payment data is handled by PCI-compliant processors (Braintree, Apple, Google) — it never reaches our servers in raw form. Session data is stored in an access-controlled database and transmitted over encrypted connections. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

Your rights & choices

Wherever you’re located, you can ask us to:

• Tell you what information we hold about you or your child.
• Correct inaccurate information.
• Delete your information (including a child’s details) ahead of the retention periods above.
• Receive a copy of your data in a portable format.

Contact support@pikokadventures.com and we’ll respond within a reasonable time. If you’re in the EU/EEA, UK, or another jurisdiction with its own data protection authority, you may also lodge a complaint with that authority.

Cookies & local storage

We don't use advertising or analytics cookies. The only client-side storage we use is a single local flag marking that your free story has been claimed — it isn't sent to any third-party tracker.

Children's privacy

See "Who this service is for" above. If you believe a child has provided us with personal information directly and without a parent or guardian’s involvement, contact us at support@pikokadventures.com and we will delete it.

Changes to this policy

We may update this policy as the Service evolves. We’ll update the "Last updated" date above; continued use of Pikok Adventures after a change means you accept the revised policy.

Contact us

Questions about this policy or your data? Email support@pikokadventures.com.