Photo use promise
Photos are used only to create this private story.
Pebblehug / privacy
Trust before photos
Privacy, photo use, and digital delivery
This public page explains the boundaries. The actual upload flow still asks for a required confirmation before photos.
AI training boundary
Photos are not used to train AI.
Private access
Photos and stories are not publicly displayed.
Noindex by default
Personalized pages and orders are private and noindex.
Required confirmation
This public page does not replace the required photo promise inside customization.
Deletion and delivery
You can request deletion of source photos, derived characters, story pages, and Story PDF. Story PDF is for saving, backup, and home printing.
How your family’s photos are handled
Creating a story uses our servers and may use approved image-generation and storage providers. This is not on-device-only processing. You see the photo-use explanation and confirm your permission before selecting any photos.
Photos are for creating and quality-checking your private book, not for AI training, advertising or sale. We don’t put customer photos or personalized books in a public gallery. Authorized people may review them to complete your book or help with a request.
Source photos and character references are separate from your finished story and PDF. You can request deletion of either. Deleting a finished story or PDF affects future access to that item; deleting source photos alone does not automatically cancel access to your finished book.
A deletion request is not instant erasure of every copy. Service-provider copies and backups may follow different deletion schedules; any required transaction records are handled separately. We must explain what is removed and any remaining retention, rather than call a partial deletion complete.
Your buyer account
Accounts are for adult buyers. You can browse and personalize without an account. When sign-in is available, use an email code or Google to access your purchases across devices.
We store your email, account identity and session records to manage sign-in and private purchase access. Email codes are delivered through our email provider. Google sign-in uses your basic profile and email; your family photos and story content are not sent to Google for sign-in.
You can sign out of all devices or request account deletion in account settings. A request starts a review; it does not instantly erase your stories, provider copies or required transaction records.