Privacy Policy

1. Who We Are

Little Legendz (“we,” “our,” or “us”) operates the website littlelegendz.com. We are a UK-based service that uses artificial intelligence to transform children's photos into illustrated storybook portraits. We are committed to protecting the privacy of our users, particularly given the sensitivity of children's photographs.

2. What Data We Collect

We collect the minimum data necessary to provide our service:

Photos you upload: When you use our service, you upload a photograph of your child. This photo is used solely to generate your storybook portrait and is not used for any other purpose.

Email address: We collect your email address when you sign up for launch notifications or make a purchase. This is used to deliver your portrait download link and, if you opt in, to send marketing communications about new themes and products.

Payment information: Payment is processed entirely by Stripe. We do not see, store, or have access to your card details. Stripe's privacy policy governs the handling of your payment data.

Usage data: We use Google Analytics 4 and Vercel Analytics to understand how visitors use our website. This includes page views, device type, and general location (country level). Analytics only load if you accept cookies via our consent banner.

3. How We Use Your Photos

Your child's photo is handled with the utmost care:

Encryption in transit: All photos are transmitted over HTTPS, meaning they are encrypted between your device and our servers.

AI processing: Your photo is sent to our AI processing provider (Replicate) solely to generate your portrait. Replicate does not retain your photo after processing is complete.

Automatic deletion: Your original uploaded photo is automatically deleted from our servers within 24 hours. Generated portraits are stored for 30 days to allow you to download them, then permanently deleted.

No training: Your photos are never used to train AI models, shared with third parties, or used for any purpose other than generating your portrait.

4. Third-Party Services

We use the following third-party services to operate Little Legendz. Each processes data only as necessary to provide their specific function:

Replicate — AI image generation. Receives your uploaded photo to produce the portrait. Does not retain images after processing.

Stripe — Payment processing. Handles all card transactions securely. We never see or store your card details.

Vercel — Website hosting and file storage. Hosts our website and temporarily stores uploaded photos and generated portraits.

Resend — Transactional email. Sends your order confirmation and download link.

Mailchimp — Marketing email. Manages newsletter subscriptions with double opt-in for GDPR compliance.

Google Analytics & Meta Pixel — Analytics and advertising. Used to understand website usage and measure advertising effectiveness. Only activated if you accept cookies.

5. Cookies

We use a cookie consent banner on our website. Essential cookies required for the website to function are always active. Analytics cookies (Google Analytics, Meta Pixel, Vercel Analytics) are only loaded if you click “Accept” on the consent banner. You can decline analytics cookies and the website will function normally.

6. Marketing Communications

If you sign up for our newsletter or purchase a portrait, we may send you emails about new themes, products, and promotions. All marketing emails use double opt-in via Mailchimp, meaning you must confirm your subscription before receiving emails. Every marketing email includes an unsubscribe link. You can opt out at any time.

7. Children's Privacy

Little Legendz is a service for parents and guardians to create portraits of their children. We do not knowingly collect personal information directly from children. The service is intended to be used by adults (parents, grandparents, guardians) on behalf of children. Uploaded photos of children are processed solely to generate portraits and are automatically deleted as described in Section 3.

8. Your Rights (GDPR)

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:

Right to access: You can request a copy of the personal data we hold about you.

Right to rectification: You can ask us to correct any inaccurate personal data.

Right to erasure: You can ask us to delete your personal data. Note that uploaded photos are automatically deleted within 24 hours regardless.

Right to restrict processing: You can ask us to limit how we use your data.

Right to data portability: You can request your data in a portable format.

To exercise any of these rights, please contact us at hello@littlelegendz.com. We will respond within 30 days.

9. Data Retention

Uploaded photos: Deleted within 24 hours.

Generated portraits: Stored for 30 days, then deleted.

Order metadata: Transaction records (excluding photos) are retained for accounting and legal purposes.

Email addresses: Retained until you unsubscribe or request deletion.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at hello@littlelegendz.com.