Privacy notice
How Toto handles photos, children’s data, and your account. Written for parents — not lawyers only.
Who we are
Toto (totoshka.app) makes personalized illustrated storybooks for children ages 3–6. Contact: hello@totoshka.app.
Parental consent
Before you upload photos or artwork, you confirm that you are the parent or legal guardian with rights to that material. Uploads are for illustrating the book only.
What we collect
Photos or drawings you upload; the child’s first name and age; story choices (theme, style, language); account email when you save a preview or check out; order and shipping details for print orders; and technical logs needed to run the service (including payment processor references).
We do not collect raw biometric templates. Character “fingerprints” (trait descriptions, character sheets, generated art) are derived illustration assets for your book — not a face-ID or surveillance system.
How we use photos and artwork
Uploads are used only to draw your book. They are moderated for safety before generation. We do not sell photos, use them for unrelated marketing, or train third-party public models as a product feature.
Generated images are stylized illustrations by design — not photoreal portraits of your child for open distribution.
Retention and deletion
Original photos are kept only as long as needed for generation and a short grace window, then removed from active storage. Generated art, trait data, and style preferences may be retained so you can re-open, edit, or reprint the book, under your consent.
You can ask us to delete a child profile and attached data. Deleting a profile is intended to hard-delete everything tied to that child. Email hello@totoshka.app for deletion or export requests (GDPR and similar rights).
Processors we use
Stripe processes payments and tax. Peecho prints and ships hardcovers. Cloud hosting and object storage hold files and the database. AI providers help extract traits, write story text, and draw illustrations under our contracts. Analytics tools (for example PostHog and Meta Pixel) may run where you consent to marketing cookies; see the cookie banner in the EU.
Cookies and marketing measurement
Essential cookies keep your session and preferences working. In the EU we ask before loading marketing pixels. You can reject marketing cookies and still use the product; Contact always works.
International transfers
We may process data in the EU and other regions where our processors operate. Where required, we rely on appropriate safeguards for transfers.
Contact
Privacy questions, deletion, or export: hello@totoshka.app or the Contact form on totoshka.app/contact.