Privacy policy
A Tale for You, which is run by Hellström Group AB (org. no. 559583-2105, VAT reg. no. SE559583210501) is the controller of the personal data described below. Here we describe which data we process when you create and order a book, why, for how long and who receives it.
1. What we process, and why
- The form's answers and photos – name, age, gender, interests, events and photos of the characters – to create your book (contract). Photos of children are processed only for your book.
- The book – texts, pictures, PDFs, colouring pictures and the recording – so that you can read, change, download and order it (contract).
- Name and email for the purchase, for logging in and for emails about your book and your order (contract). Once you have bought a book, you also get tips and reminders about our books before birthdays and holidays (legitimate interest); you can say no at the checkout, in every such email and in your account. You get the newsletter only if you have chosen it in your account (consent).
- A birthday (day and month), if you give it after the purchase, to remind you in good time before it (consent). It is deleted with the book.
- E-mail and a birthday or an occasion (day and month for a birthday; for Christmas, Mother's Day and Father's Day only which, as we know the day), if you ask for a reminder on the site, to e-mail you before it every year (consent, which you give by confirming in the e-mail we send). Without confirmation the details are deleted after a week, and you can stop at any time with the link in every e-mail.
- Delivery address and phone number to send printed products (contract).
- Purchases and invoices for the accounts (legal obligation).
- The recipient's name and email when you send the book as a gift, in order to email it (legitimate interest).
- Messages to us through the contact form or by email, with any pictures you attach, in order to reply to you (legitimate interest).
2. How the pictures and texts are created
The story is written and the pictures are drawn by OpenAI's AI models, which we reach through OpenRouter. The photos and a description of the scene – without names – are sent to the picture model, which runs at OpenAI; OpenAI may keep the request for up to 30 days to detect abuse. The form's answers are sent to the text model, which runs on Microsoft Azure and keeps nothing. OpenRouter processes the data as our data processor, with OpenAI and Microsoft as its sub-processors, and none of them uses it to train AI models. The audiobook is read by ElevenLabs text-to-speech, which we reach through OpenRouter: only the book’s text is sent there, and it is neither stored nor used to train AI models.
3. Children's data
The books are often about children. It is you, as the adult, who places the order and uploads the photos, and you confirm that you are allowed to do so. The children's data and photos are used only for the book you make, and are never shown to others without your written consent. A child's birthday, if you give it, is used only for the reminder.
4. Who receives the data
- OpenRouter (the route to the AI models), with OpenAI (the pictures) and Microsoft Azure (the texts), USA, under the EU's standard contractual clauses.
- ElevenLabs through OpenRouter (the audiobook’s reading: only the book’s text, which is not stored), USA, under the EU's standard contractual clauses.
- Mollie, the Netherlands (payment).
- Cloudprinter, the Netherlands (the print files and the delivery address), its print works and carriers.
- Google, Ireland (address suggestions and address check at checkout): what you type in the address field and the delivery address's street, postcode, town or city and country, never name, phone or email. Nothing is stored at Google on our behalf.
- Railway (servers and storage), and our email provider (email).
- Google (statistics and ad measurement): with your consent using cookies, otherwise only signals without cookies (see Cookies).
- Meta (ad measurement), only with your consent: the Meta pixel in your browser and, when you buy, the purchase sent from our server – the amount, the order number, your email and name (for printed products also phone, city and postcode) as hashes, your IP address, your browser's user agent and Meta's cookies _fbc and _fbp. We keep these until the purchase is sent, a week at most.
- Microsoft Clarity (how the pages are used), USA, under the EU's standard contractual clauses, only with your consent: recordings of clicks, scrolling and movement on the pages, and which browser and device you use. In the form where the book is made, all text and all pictures are hidden before anything is sent, so your child's photo, name and story never reach Microsoft. Recordings are kept for 30 days, a random sample for at most nine months.
We never sell data and do not use your photos or your book for anything other than your book. We show a book as an example on the site only with your written consent.
5. For how long
Books, photos and recordings are kept for as long as you have your account, so that you can read and order them. When you delete the account they are deleted, and name, email, address and greetings are removed. Purchases and invoices are kept for seven years under the Swedish Bookkeeping Act (bokföringslagen), without your other personal data. A draft that is never paid for is deleted after one year, and a message sent through the contact form after one year. The photos in such a draft are deleted after just one week.
6. Reviews
If you write a review, it is shown on the site under the name you give, once we have approved it. We may also show the review, and the photos and video you send with it, on our social media pages and in ads; if someone can be identified in a photo or video, we show it only here on the site. You can ask us to remove it at any time.
7. Cookies
Which cookies we set and why is described on the Cookies page.
8. Security
Data is transferred encrypted, and your books and photos can be reached only when you are logged in, or through links that only you receive. Only those who need the data to deliver your book have access to it.
9. Your rights
You have the right to know which data we hold about you, to have it corrected, deleted or transferred, and to object to processing. Please contact us. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).
10. Changes
If the policy changes, we update this page and the date below.
Last updated 2026-11-03.