Privacy Policy

Last Updated: December 2025

At BOKI, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our personalized children's book creation service.

1. Information We Collect

When you create a personalized book through our service, we collect:

• Child Information: Child's name, age, and gender (used for book personalization)
• Photo Upload: One photo of your child that you upload during the creation process
• Theme Selection: Your choice of story theme from our available options
• Contact Information: Your email address for order communication and digital book delivery
• Personalization Details: Optional dedication message and special details you provide
• Usage Data: Basic analytics about how you interact with our website to improve user experience

2. How We Use Your Information

Your information is used exclusively to:

• Create and personalize your child's storybook with AI-generated content and illustrations
• Process and fulfill your orders for digital and printed versions
• Deliver digital books via email during working hours as specified on our website
• Coordinate printing and shipping of physical books through our printing partners
• Send order confirmations and delivery updates to your email
• Provide customer support for revisions and inquiries
• Improve our service quality based on usage patterns

3. Data Security and Storage

We prioritize the security of your family's information:

• All uploaded photos and personal data are encrypted during transmission using industry-standard SSL/TLS protocols
• Photos are stored securely and used exclusively for creating your personalized book
• Access to personal information is restricted to authorized personnel only
• We retain your data only as long as necessary to fulfill orders, provide customer support, and honor revision requests
• Child photos are never used for marketing, advertising, or any purpose other than your specific book order
• You can request deletion of your data at any time by contacting hello@bokibooks.com
• Upon data deletion request, we will permanently remove all photos and personal information within 30 days

4. Children's Privacy

BOKI is designed for parents and guardians to create books for their children. We take children's privacy very seriously:

• We do not knowingly collect personal information directly from children under 13 years of age
• Our service is intended for use by adults (18+) who are parents or legal guardians
• Parents and guardians are responsible for providing their child's information for book personalization
• Child information (name, age, gender, photo) is used solely for creating the personalized book
• We encourage parents to supervise their children's interaction with the created books
• We comply with GDPR and other applicable children's privacy protection laws

5. Third-Party Services

To provide our service, we work with carefully selected third-party partners:

• AI Content Generation: We use AI services to create personalized story content and illustrations based on your chosen theme
• Printing and Shipping: Printing partners professionally print and ship physical hardcover books
• Email Delivery: Email service providers deliver digital PDF copies and order notifications
• Payment Processing: When payment functionality is active, secure third-party payment processors handle all financial transactions (we never store credit card information)

All third-party partners are bound by strict confidentiality agreements and GDPR compliance requirements. They only access data necessary to provide their specific services and are prohibited from using your data for any other purpose.

6. Your Data Rights (GDPR)

Under GDPR and Swedish data protection law, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (we will comply within 30 days)
• Right to Restriction: Limit how we process your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data for marketing or other purposes
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at hello@bokibooks.com with your request. We will respond within 30 days.

7. Cookies and similar technologies

We use essential, analytics, and marketing cookies to measure and analyze how our website is used, to improve the user experience, and to evaluate and optimize our own marketing efforts on other platforms.

• These cookies are used only after you give your consent.
• We use third-party services such as Google Analytics and Meta (Facebook Pixel), which means personal data may be processed and transferred to countries outside the EU/EEA.

You can withdraw your consent at any time by changing your browser settings or by contacting us at hello@bokibooks.com.

8. Data Retention

We retain your data according to the following schedule:

• Order Information: Retained for up to 3 years for customer support and legal compliance
• Child Photos: Automatically deleted within 30 days after order fulfillment (for completed orders) or within 30 days after order abandonment (for incomplete orders). You can also request earlier removal at any time by contacting hello@bokibooks.com
• Email Address: Retained for communication about your order and future service updates (you can unsubscribe anytime)
• Payment Records: If applicable, retained for 7 years as required by Swedish accounting law

This automatic deletion policy ensures your child's photos are never stored longer than necessary to fulfill your order and provide customer support.

9. International Data Transfers

BOKI is based in Sweden. If you are accessing our service from outside the European Economic Area (EEA), your data may be transferred to and processed in Sweden and other EU countries. We ensure appropriate safeguards are in place through Standard Contractual Clauses approved by the European Commission and GDPR-compliant data processing agreements with all third-party service providers.

10. Marketing Communications

We may send you marketing emails about new themes, special offers, or service updates only if you have provided explicit consent. You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link at the bottom of any marketing email or by contacting hello@bokibooks.com. We will never sell or share your email address with third parties for their marketing purposes.

11. Security Measures

We implement comprehensive security measures including:

• SSL/TLS encryption for all data transmission
• Secure, encrypted cloud storage for photos and personal data
• Regular security audits and vulnerability assessments
• Restricted access controls and authentication for employee access
• Regular data backups to prevent data loss
• Incident response procedures in case of data breaches

In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours as required by GDPR.

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top indicates when the policy was last revised. We will notify you of significant changes by email or through a prominent notice on our website. Continued use of our service after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is handled, please contact us:

Email: hello@bokibooks.com
Address: BOKI, Stockholm, Sweden

You also have the right to lodge a complaint with the Swedish Data Protection Authority (Datainspektionen) if you believe we have not handled your personal data appropriately.