1. Controller
The controller of your personal data at BRAND is FIRSTNAME LASTNAME, STREET 1, 0000 CITY, Switzerland, as a sole proprietorship. You reach us at support@example.ch.
This privacy policy follows the Swiss Federal Act on Data Protection (FADP). BRAND sells only in Switzerland and is not directed at people in the EU; we nevertheless grant you the rights described in section 6.
2. What data we process
- Your account: name, email address, language, how you sign in (Google or sign-in link) and your sign-in sessions.
- Your acceptance of the terms: the version, the time, your IP address and your browser (user agent).
- Your family: its name, its parents and its delivery address with first and last name and, if you give one, phone number.
- Your family's people and places: names, age or birth month, pronouns, relationship to the child, descriptions and traits, photos. For each person, your confirmation that you may use their photos, with the wording shown, its version, the time, your IP address and your browser.
- The conversation with the AI: your messages and answers, the documents such as the story and the page plan, the drawings, pages, the cover and the proofs. Voice memos are turned into text; we do not store their recording. Texts read aloud are produced as audio, which is not stored either.
- Orders and payments: delivery address, number of copies, status, tracking and delivery estimate; a payment's amount, status and reference. You enter card and account details only at Payrexx; we do not receive them. A voucher names neither the person who bought it nor the one who receives it.
- Use of the AI: per book, the quantities the AI provider reports (for example the number of pictures and the amount of text), without content.
- Technical logs and error reports: identifiers, error types and times, no content of your messages or photos.
- The AI's review: after the work on a book, we ask the AI what made the work harder for it. Its answer may contain details from the conversation; it is stored with the book, read only to improve BRAND, and deleted with the book.
Every photo is saved anew on upload, without location, device and other metadata. An automatic check determines whether a face is visible and large and sharp enough. Faces are never recognised or matched against each other anywhere.
BRAND sets only the cookie needed for signing in and uses no cookies for advertising or analytics.
3. Purposes
We process your data to make, print and deliver your family's books, to run your account and your family and handle payments, to find errors and operate the service securely, and to meet statutory retention duties. We derive improvements from the AI's reviews; what we record for that contains no details about your family.
We send you only four kinds of email: the sign-in link, a notice when a question about your book is waiting for you, the message that your order is on its way, and the confirmation that your family was deleted. We send no newsletter and no advertising.
We sell no data. Your photos and details are never used to train an AI, and we never use a person's likeness for our own purposes, such as samples or advertising, except with your separate, explicit consent.
Every parent of your family sees everything the family owns. We pass on to other families only what you yourself share or hand over with a link: when sharing, the drawing and profile of a person or place — name, details, traits, age — never the photos; when handing over, the photos too, together with ownership of the character.
4. Processors and countries
These companies process data on our behalf. Where they process data in a country without adequate data protection, in particular the USA, we rely on their data processing agreement with the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).
| Processor | Purpose | Data | Country | Basis of the transfer |
|---|---|---|---|---|
| OpenAI (contracting party OpenAI Ireland Ltd) | Conversation, story and text, pictures, checking photos, turning voice memos into text, reading aloud | Messages and answers, documents, photos, drawings, voice memos, texts read aloud | USA | OpenAI's data processing agreement (DPA) |
| Resend | Sending the emails | Email address and the email's content, such as the book's title, tracking and delivery address | USA | Data processing agreement (DPA) with standard contractual clauses |
| Sentry | Error reports | Identifiers and error types, no content | Germany (Frankfurt) | Data processing agreement (DPA) |
| Backblaze B2 | Storing photos, drawings and proofs | Photos, drawings, pages, proofs | Netherlands (Amsterdam) | Standard contractual clauses in Backblaze's terms |
| Netcup | Server and database | All data of section 2 except the stored files | Germany | Data processing agreement with Netcup |
| Gelato | Printing and shipping | The book's print file, delivery address with name and any phone number, number of copies | Printing for Swiss orders as a rule in Switzerland; Gelato itself: [open point for the legal review: country] | Gelato's data processing agreement (DPA) |
| Payrexx | Payment processing | Email address, first and last name, amount, payment details you enter at Payrexx | Switzerland | No transfer abroad |
If you sign in with Google, Google learns of the sign-in and gives us your name and email address. Google processes this data as a controller in its own right; beyond that, we pass nothing to Google.
5. Retention
- Your family's data stays stored until you delete it.
- We delete an unpaid book with no activity for 12 months; we remind you by email 30 days before.
- We delete a family in which nobody has signed in for 3 years in full; we remind every parent by email 30 days before.
- We keep payments and print orders with their delivery address for 10 years for accounting (Art. 958f of the Swiss Code of Obligations), even when the book or the family has been deleted.
- Your acceptance of the terms is deleted with your account. The confirmation that a person's photos may be used stays with the person for as long as they are in your family's library.
- Deleted photos are removed from storage within one day. Deleted drawings and proofs remain as a hidden copy for up to 30 days, and backups likewise for 30 days.
- Recordings of voice memos and the audio of texts read aloud are stored nowhere.
- OpenAI keeps the data sent to it for up to 30 days to detect abuse and does not use it for training. Resend keeps email data for 30 days.
- Technical logs and error reports: [open point for the legal review: period].
6. Your rights
You can ask for information about your data, have it corrected, deleted and handed over in a common format. Signed in, you do most of this yourself:
- Download my data — on the Account page: a zip file with all data of your account and your family, the original photos and the preview of every approved proof.
- Delete account — on the Account page: deletes your account at once. If your family has other parents, the family and its books stay with them. If you are the last parent, the whole family is deleted with it, with every book, person, place, photo and drawing. This cannot be undone.
- Delete family — on the Family page: deletes the whole family and every parent's account at once; every parent receives a confirmation by email. This cannot be undone.
If another family uses a character of your family, we can delete your family only once that is resolved; we tell you what it is about and help you with it. Likewise, deletion is not possible while the AI is working on a book or while an order is still waiting for its payment or its print order. A print order already placed is still delivered.
You correct details of people and places in the conversation, the delivery address on the Account page and the family name on the Family page. You delete photos yourself. A person or place you entered by mistake, one that appears on no book and in no drawing, you have deleted in the conversation, with its photos; one that has been drawn can be deleted only with the whole family.
Anything further, such as a request for information, you ask for by email at support@example.ch; we answer within 30 days. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.
7. Contact
Write to us at support@example.ch.