PictureBook · iOS 17 or later · Last updated 29 August 2026

Contact: [email protected]

This policy describes exactly what the app does with your data. It is written from the source code, not from a template.

The short version

There is no account. No name, email, phone number, or social login.

We do not keep your photos. They are held in memory only while your book is being made, and are never written to storage on our servers.

Your photos are sent to Google. We use Google’s Gemini API to understand each scene and draw the illustrations. That is the one third party your photos reach.

Finished books live on your device, not on our servers.

No advertising, no ad identifier, nothing shared with data brokers. We do collect anonymous usage statistics to see where people get stuck — never your photos, your books, or anything you have written.

How you are identified

On first launch the app generates a random identifier (a UUID) and stores it in the iOS Keychain. It is not derived from your device, your Apple Account, or anything about you, and it is not linked to your identity.

It is used for two things: keeping track of how many books you have left, and grouping the anonymous usage events described below so one device’s session can be told apart from another’s. Because it lives in the Keychain it survives deleting and reinstalling the app, which is also how your remaining quota survives a reinstall.

What happens to your photos

When you create a book, the photos you pick are uploaded to our service and forwarded to Google (Gemini API) for two purposes: describing what is in each photo, so the text matches the pictures, and redrawing each photo as a picture-book illustration.

Your original photos are never written to disk on our servers. They exist in memory for the duration of the request and are released when it finishes. Google processes this data as our service provider.

What is stored on our server

The generated text and illustrations are held in memory for 15 minutes, so that the app can download them and so that a dropped connection can be retried without generating — and charging for — the book twice. After 15 minutes they are discarded.

Nothing else about a book is stored, unless you create a share link for it (see below). The app downloads the book to your device during generation, which is why it stays readable offline.

Our servers run on Google Cloud Run in the United States. Standard request logs (timestamp, path, response status, IP address) are kept for operational purposes and are not used to build a profile of you.

Anonymous usage statistics