Privacy Policy

Last updated: September 17, 2026

Light and Lamb ("we," "us") makes personalized scripture storybooks featuring your children. Because that involves something precious — photos of your kids — this policy is written to be read, not skimmed. It explains what we collect, exactly what we do with it, what we never do with it, and how to delete it.

The short version: we collect only what's needed to make and ship your book. Photos of your children are used solely as illustration references for your book, are never used to train AI models, are never sold or shared for marketing, and you can delete them at any time from your account — deletion from our storage is immediate.

1. Information we collect

Information you give us

Account information: your email address and name.
Children's details you choose to share: each child's first name and age, optional personality and speech notes, and the photos you upload of them.
Order information: the stories you select, your shipping address and phone number, and any change requests you make during review.

Information collected automatically

Payment details are collected and processed by Stripe. We never see or store your card number.
Basic technical logs (IP address, browser type, timestamps) for security, rate limiting, and abuse prevention.
Essential sign-in cookies keep your account session secure and let our landing page show “My account” when you have recently signed in. The landing-page indicator contains no identity or authentication secret.

Checkout cookies also connect your browser to its saved story choices and the book just purchased. They expire after seven days. A verified email link is required to open other books or existing family profiles.

We use first-party purchase-flow counts to see where the experience needs improvement. A random visit cookie lasts one day and records stages such as starting a book and completing payment. The visit ID may be associated with the order to count later setup stages; event records do not include names, photos, addresses, or form contents. We honor Do Not Track. Event records and order visit associations are removed after 90 days; checkout attempts after 30 days. Unsigned-in story choices can also stay in your browser tab until its session ends.

We do not run third-party advertising trackers on our sites.

2. How we use your information

To create your book: your children's names, notes, and photos are used to write the stories and to illustrate characters with your children's likeness.
To screen content for safety: every uploaded photo and every generated illustration passes automated safety checks, and text passes automated moderation.
To print and ship: your book files and shipping address are sent to our printing partner.
To communicate with you: order confirmations, sign-in links, review notifications, and shipping updates.
To protect the service: fraud and abuse prevention, and enforcing our Terms of Service.

3. What we never do

We never use your photos — or your book's illustrations — to train AI models.
We never sell your personal information, and we never share your children's photos or names for marketing or any purpose beyond making your book.
We never make your photos or books publicly accessible. They are stored privately and served only to your signed-in account (or, for print files, via expiring private links to our printer).

4. Who we share information with (service providers)

We share the minimum needed with the services that make your book possible:

Provider	What they receive	Why
OpenAI	Family names, ages, notes, change requests, uploaded photos, and generated book text and illustrations	Writing stories, planning and checking illustrations, content moderation, and illustration generation when selected
Google (Gemini & Cloud Vision)	Illustration prompts with family details, uploaded photos, and generated illustrations	Illustrating your children's likeness; automated image-safety screening
Stripe	Payment details, email	Payment processing
Lulu (printing partner)	Finished book files, shipping name/address/phone, email	Printing and shipping your hardcover
Cloudflare	Account, family, book, order, and diagnostic data; not card numbers	Application hosting, database, private file storage, and transactional email
Slack	Error diagnostics, which may include account email, account or book identifiers, and technical error details	Private operational alerts to diagnose and resolve problems

Our AI providers are used under API terms that do not permit training on our customers' content. We may also disclose information if required by law or to protect the safety of a child, and in a business transfer (merger/acquisition) your information would remain subject to this policy.

5. Children's privacy

Light and Lamb is a service for adults: accounts may only be created by a parent or legal guardian (18+). We collect children's names and photos only from the parent or guardian, only with that parent's or guardian's consent, and only to create the book that parent ordered. By uploading photos, you confirm you are the child's parent or legal guardian, or have the guardian's express permission. If we learn that personal information about a child was provided by someone other than a parent or guardian without permission, we will delete it — contacthello@lightandlamb.co.

6. Retention and deletion

Photos and children's details stay in your account so you can order future books — but they are yours. Delete any photo or child from your account page at any time; the files are removed from our storage immediately.
Finished books (text and illustrations) are kept so you can order reprints. You may request their deletion at any time.
Order records are kept as required for accounting, taxes, and fraud prevention.
Full account deletion: open My account → Delete my account and digital books in the app, or visit Delete account. We sign out all devices immediately and normally remove your account, family profiles, photos, and digital books from active storage within 24 hours. We email you when deletion is complete. Unfinished books stop; deletion does not automatically refund orders or recall books already sent to the printer. Minimal payment records remain for accounting and fraud prevention. Hosting backups and service providers may retain records under their retention policies and legal obligations.

7. Security

Photos and books are stored in private cloud storage that is never publicly accessible. Sign-in uses one-time email links (no passwords to steal), session tokens are stored hashed, access to your content requires your account, and print files are shared with our printer only through expiring signed links. No system is perfectly secure, but we design so that a single failure does not expose your family's photos.

8. Your rights

Depending on where you live (including under the California Consumer Privacy Act and similar state laws), you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of sales or sharing — noting that we do not sell or share personal information as those laws define it. To exercise any right, emailhello@lightandlamb.co. We will verify the request via your account email and respond within the time the law requires. We will never discriminate against you for exercising your rights.

9. Where data is processed

We are a United States company; our service currently ships only within the US, and data is processed and stored in the United States (some infrastructure providers may process data in other regions under standard safeguards).

10. Changes to this policy

If we make material changes, we will update the date above and email account holders before the changes take effect. Continued use after that date means you accept the updated policy.

11. Contact

Light and Lamb · hello@lightandlamb.co