Privacy Policy
Here we explain in plain language what data we process and why. If anything stays unclear, just write to us.
The short version
- We do not sell your data. Details about your child are used only for the book – never for advertising.
- Any photo you upload is deleted automatically once the illustration has been created from it.
- Analytics and advertising happen only with your consent. You can change it anytime from the footer.
- AI services help create the text and illustrations, some of them outside the EU.
- Want access or deletion? An informal email to us is enough.
The sections below contain the full information required by Art. 13 GDPR.
1. Who is responsible for your data
Enanza Ventures GmbH
Martin-Luther-Str. 14, D-20459 Hamburg, Germany
Managing Director: Stephan Akrong
Email: info@mein-kreativbuch.de
We are a small team. For privacy questions you can reach us directly at this address — we are not legally required to appoint an external data protection officer.
2. What data we process
Depending on how you use our service, we process:
- Your account details — name and email address.
- Details for the book — what you enter about your child, such as name, age and character traits, plus an optional photo.
- Order details — for a printed book, your delivery and billing address.
- Technical data — IP address, timestamp and browser, which your device sends automatically.
- Cookies and similar storage — only within the scope of your consent (Section 5).
We need the book details and your contact data to perform our contract with you. Without them we cannot create a book. Everything else is optional.
3. Why we process it — and on what basis
| Purpose | Legal basis |
|---|---|
| Creating, printing and delivering your book; running your account | Contract (Art. 6(1)(b) GDPR) |
| Retaining invoices, meeting tax obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Securing our service, preventing abuse, broadly measuring our advertising | Legitimate interest (Art. 6(1)(f) GDPR) |
| Analytics cookies and advertising cookies | Your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG) |
We do not carry out automated decision-making with legal effect for you — for instance profiling that would go beyond designing your book.
4. Service providers we work with
A book is not made by us alone. We pass on only the data each service genuinely needs for its task, and where required we have concluded data processing agreements under Art. 28 GDPR with these providers.
| For what | Provider | Location |
|---|---|---|
| Running the website | Hetzner | Germany |
| Generating text and illustrations | OpenAI, Google, Anthropic, Z.ai | EU, USA, China |
| Processing payment | Stripe | Ireland, USA |
| Printing and shipping the book | Gelato | Norway, EU |
| Analysing usage, measuring advertising | PostHog, Google, Meta | EU, USA |
How the AI services are involved
For the story text we send what you entered about your child to one of the AI providers listed above. A photo you upload goes only to OpenAI or Google — the other providers never receive photos. Based on what the providers commit to contractually, this content is used only to deliver the service and not to train their models.
Analytics and advertising — what happens when
We want to be especially precise here, because these services depend on your consent to differing degrees:
- PostHog and Meta are loaded only once you have agreed. Without your consent nothing is sent to them — not from your browser and not from our server.
- The Google tag loads when the page loads, i.e. before you have made a choice. Until you agree, it stores nothing on your device and reads nothing from it; it only sends anonymous aggregate signals that cannot be traced back to you. It sets cookies only after you consent.
- After a purchase we additionally report the sale directly from our server to the advertising platforms, so we can tell which ad worked. For Meta this happens only with your consent, and then in encrypted form. To Google we send nothing that identifies you.
- If you arrive via an ad, your browser remembers that click's identifier so a later purchase can be attributed to the right campaign. This identifier belongs to the ad click, not to you, and is not used to build profiles across other websites.
5. Cookies and your consent
We distinguish three kinds:
- Necessary — keeps you logged in, remembers your language and your cookie choice. The site does not work without them, so they cannot be switched off.
- Analytics — helps us see where people get stuck in the book builder.
- Marketing — measures which of our ads led to an order.
We ask you on your first visit. Declining is exactly as easy as agreeing. You can change your choice at any time via "Privacy settings" in the footer. If you withdraw consent, we delete the cookies that were set and the identifiers stored with them.
6. Your child's data
Our service is aimed at adults creating a book for a child. The details about the child therefore come from you as the person with parental responsibility, and we process them solely to produce the book you ordered.
This data is not used for advertising, not passed to advertising networks and not combined with other data. We need an uploaded photo only until the drawn character has been created from it and checked — after that we delete it automatically. Beyond that, you can request deletion at any time.
7. How long we keep data
- Uploaded photos: until the illustration has been created from them and checked, and at most 48 hours after that. If creation fails, we delete the photo after 90 days at the latest.
- Your book and account: for as long as your account exists, so you can keep viewing and reordering your book.
- Invoices: up to ten years, because commercial and tax law require it (Sec. 147 AO, Sec. 257 HGB). We cannot delete these records on request; we can only restrict them from further use.
8. Transfers outside the EU
Some of the services named above process data in the USA, and in the case of one AI provider also in China. For these transfers we rely on the EU Standard Contractual Clauses under Art. 46 GDPR.
For China there is currently no adequacy decision from the EU Commission, so the level of data protection there does not automatically match the European one. Only text content is affected — we do not send photos there.
9. Your rights
You have the following rights in relation to us:
- Access — what data we hold about you.
- Rectification — if something is wrong.
- Erasure — unless a retention obligation prevents it.
- Restriction — we then only store the data instead of using it.
- Portability — you receive your data in a common format.
- Withdrawal — you can withdraw consent at any time with future effect.
An informal email is enough. You can also lodge a complaint with a data protection supervisory authority — the one responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information.
Your right to object
Where we process data on the basis of a legitimate interest — mainly measuring our advertising and our reminder emails — you may object to that processing at any time (Art. 21 GDPR). Against direct marketing you may always object without giving reasons, and we will then stop the processing. A message to info@mein-kreativbuch.de is enough.
10. Emails from us
We write to you when there is something to report about your order — for example that your book is ready or has shipped. We also send one reminder if your book is finished but not yet ordered in print. You can unsubscribe from that reminder at any time via the link in the email.
11. Questions and changes
For any privacy question, write to us at info@mein-kreativbuch.de. We will reply within one month.
If our service changes, we will update this policy. We will point out any significant changes to you.
Last updated: 3 August 2026