Privacy Policy

1. Introduction

Welcome to Omo Tales. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

Omo Tales is operated by Scionslabs Limited ("we", "us", or "our"). We are registered in England and Wales. Our registered office is at [Address to be confirmed].

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

For the purposes of UK data protection law, the data controller is Scionslabs Limited. You can contact us at:

• Email: hello@omotales.com
• Address: [Address to be confirmed]

3. Information We Collect

3.1 Information You Provide

When you create a personalised storybook, we collect:

• Character details: Child's name (first name only), age range, gender, physical characteristics (skin tone, hair style), and optional inclusivity features (wheelchair, hearing aid, vitiligo)
• Cultural heritage: Selected cultural background for story personalisation (Yoruba, Igbo, Ghanaian, Jamaican, or British Black)
• Story customisation: Responses to story-specific questions (e.g., who does the child's hair, dedication message)
• Photo upload (optional): A reference photo of your child to help our AI generate a more accurate illustration
• Contact information: Email address for order confirmation and digital book delivery
• Shipping information: Name, address, and phone number (only collected for physical book orders)
• Payment information: Processed securely by Stripe (we do not store card details)

3.2 Information Automatically Collected

• Usage data: Pages viewed, time spent on site, device type, browser type
• Technical data: IP address, session cookies for site functionality

4. How We Use Your Information

We use your personal information to:

• Fulfil your order: Generate your personalised storybook using AI (Google Gemini), assemble the book into a print-ready PDF, and deliver it digitally and/or physically
• Process payments: Via our payment processor, Stripe
• Send order updates: Via email (using Resend) to notify you when your digital book is ready and when your physical book has shipped
• Print and ship books: Via our print partner, BookVault, for physical book orders
• Improve our service: Analyse usage patterns to enhance user experience and product quality
• Customer support: Respond to enquiries and resolve issues

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance: To fulfil our contract with you when you place an order
• Legitimate interests: To improve our services, prevent fraud, and ensure platform security
• Legal obligation: To comply with financial and tax regulations

5. AI Processing and Photo Storage

5.1 Google Gemini (AI Image Generation)

We use Google's Gemini AI to generate the illustrations in your personalised storybook. The following data is sent to Google:

• Character description (age, skin tone, hair style)
• Scene prompts from the story template
• Your uploaded photo (if provided) as a reference image

Google processes this data solely to generate your book illustrations. We have a data processing agreement with Google. For more information, see Google's Privacy Policy.

5.2 Photo Storage and Deletion

Important: If you upload a photo of your child, we store it temporarily to generate your book. Your photo is:

• Stored securely in encrypted cloud storage (Supabase)
• Used only for your order (sent to Gemini AI during generation)
• Automatically deleted 30 days after your order is completed
• Never used for marketing, training AI models, or shared with third parties beyond the generation process

You can request earlier deletion by contacting us at hello@omotales.com.

6. Third-Party Services

We work with trusted third-party providers to deliver our service:

7. Data Retention

• Uploaded photos: Deleted 30 days after order completion
• Generated illustrations: Stored indefinitely to allow re-downloads and reprints
• Order information: Retained for 7 years to comply with UK tax and accounting regulations
• Marketing consent: Until you withdraw consent (if applicable)

8. Your Rights (UK GDPR)

Under UK data protection law, you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure ("right to be forgotten"): Request deletion of your data (subject to legal retention requirements)
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: For marketing communications (if applicable)

To exercise any of these rights, email us at hello@omotales.com. We will respond within 30 days.

If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Security

We take the security of your data seriously. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted data storage
• Secure authentication for admin access
• Regular security audits
• Limited employee access on a need-to-know basis

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Our service is designed for parents and guardians to create books for their children. We do not knowingly collect personal information directly from children under 13. The character information you provide (child's name, age, etc.) is collected from adults, not children.

Parents have full control over the data provided and can request deletion at any time.

11. Cookies

We use essential cookies to make our website function properly. For full details, see our Cookie Policy.

12. International Data Transfers

Some of our service providers (e.g., Google Gemini) may process data outside the UK. When this happens, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the ICO
• Adequacy decisions by the UK government
• Data processing agreements with third-party providers

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent changes. Significant changes will be communicated via email (if you've provided one) or a notice on our website.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: hello@omotales.com
• Address: [Address to be confirmed]