Privacy statement

1. Who is responsible

Mifolo is the data controller for the data you share with us through this site.

[Company details and a contact address for privacy questions will be added before going live.]

2. Which data we use

We only process what is needed to create and deliver your book:

• the photos you upload to create characters;
• the details you enter about the characters (name, age, physical features, relationship to the child);
• your email address, to send you the cover and the book and to handle your order;
• order and payment data (the payment itself goes through our payment provider; we do not see any account details);
• limited technical data needed to keep the site working securely.

3. What for and on what basis

We use the photos and character data solely to create your story and illustrations. We do this on the basis of your explicit consent, which you give when uploading (Article 6(1)(a) GDPR). You can withdraw that consent at any time. Then we delete the photos straight away.

We process your email address and order data to perform the agreement: emailing the cover, handling the payment, delivering the book. We keep invoice data because tax law requires us to.

4. How long we keep data

• Original photos: deleted as soon as your book is ready, within 14 days at the latest. Want them gone sooner? One email is enough.
• If you buy a book, we do not keep your photos, only the drawn character reference (an illustration, not a photo), for as long as you can still edit the book.
• Your book itself remains available in your account, so you can always view and download it again.
• Invoice data: 7 years (statutory tax retention obligation).
• Your email address: for as long as you have an account with us.

5. Never for AI training

Your photos, texts and your book are not used by us or by our technology partners to train AI models. This is contractually agreed with those partners.

6. Who else has access (processors)

We do not create your book entirely on our own. These parties process data on our behalf, only for the purpose above:

With partners outside the European Economic Area, appropriate safeguards have been agreed, such as the EU-US Data Privacy Framework or the European standard contractual clauses.

• AI partners for text and illustrations: currently Anthropic (story text) and OpenAI (illustrations), both in the United States;
• our hosting, storage and database partners;
• our payment provider (Mollie, the Netherlands) for handling payments;
• our email provider, to send you messages about your book.

7. Children

Mifolo is for adults who create a book for a child. We process children's data solely because you, as a parent or carer, enter it yourself, with your consent. Children cannot create an account or place an order with us themselves.

8. Your rights

You may always see which data we hold about you, have it corrected or have it deleted. You can also withdraw your consent, object to a processing operation or take your data with you. Email us and we will arrange it.

Do you feel we are not handling your data properly? We would prefer to hear it from you first. In addition, you always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Security

All traffic with our site is encrypted. Photos are stored securely, are accessible only to the systems that create your book, and never appear in log files. Access to personal data is limited to those who really need it.

10. Changes

If we amend this statement, you will see the new version here with the date at the top. We will announce important changes.