Data protection
Privacy policy
Your data, and above all your children’s photos, deserve the greatest care. Here is exactly what we collect, why, and what we don’t do with it.
Last updated: 5 July 2026
This English version is provided for convenience. In the event of any discrepancy, the French version prevails.
Data controller
The data controller is Marouan El Mekawy, sole trader, 1 rue Gisèle Halimi, 93140 Bondy, SIREN 913 473 039. For any question about your data: bonjour@piklostudio.com.
The data we collect
Your email address, to create your account, give you access to your books and contact you about your orders.
The personalisation information you provide: the characters’ first names, their role, and your child’s tastes, in order to create the stories.
The photographs you upload to create the characters. These photos may show children. They are used solely to generate the true-to-life illustrations of your book.
Order data: products ordered, history, delivery address for printed books.
We never collect your card details. Payment is handled directly by Stripe, which shares no card data with us.
What we do with your photos, and what we don’t
Uploaded photographs are used exclusively to generate your book’s illustrations. They are never used for advertising, never resold, and never used to train third-party artificial intelligence models.
Once the illustrations are generated, the original photographs are deleted from our storage servers. Only the final illustrations, which make up your book, are kept so you can re-read and reprint it.
Legal bases
The processing of your email and order data is based on the performance of the contract between us. The processing of photographs and personalisation information is based on your consent, which you give by uploading them, and which you can withdraw at any time.
Retention periods
Original photographs are deleted after the illustrations are generated. The illustrations and your books’ data are kept for as long as your account is active, to give you access to your library. Billing data is kept for the legal period applicable to accounting. When your account is deleted, your personal data is erased, subject to legal retention obligations.
Processors and hosting
To provide the service, we use providers that process certain data on our behalf.
Supabase, for database hosting and file storage, on servers located in Ireland, within the European Union.
Vercel, for hosting the application, in the United States.
Render, for the print-file generation service, in the United States.
Google, whose artificial intelligence technology is used to generate the illustrations from the photographs.
Anthropic, whose Claude technology is used to generate and structure the story texts from the personalisation information. Anthropic does not receive the uploaded photographs.
Stripe, for secure payment processing.
Resend, for sending transactional emails related to your orders.
Cloudflare, for routing incoming emails for the piklostudio.com domain.
Our printing partner, for producing and shipping the printed books, which receives the data needed for delivery.
As some of these providers are located outside the European Union, the corresponding data transfers are governed by the safeguards provided for by the General Data Protection Regulation, in particular the European Commission’s standard contractual clauses.
Your rights
In accordance with the General Data Protection Regulation and the French Data Protection Act, you have a right of access, rectification, erasure, restriction and objection to the processing of your data, as well as a right to portability. You can exercise these rights by writing to us at bonjour@piklostudio.com.
You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the French supervisory authority, if you consider that the processing of your data does not comply with the regulations.
Data about children
Piklo is a service intended for parents and adults who create books for children. Accounts are created and managed by adults. Children’s photographs are uploaded under the responsibility of the parent or legal guardian, who consents to their use for the sole purpose of creating the book. These photographs benefit from the particular care described in this policy, in particular their deletion after generation.