Privacy Policy

1. Responsible party

Sarah Schwarzgruber
Gweerhofstrasse 13, Lachen, Switzerland
Contact: littlestoryalbum@gmail.com

2. Data we process

• Account data: email address, role (registered user).
• Baby profile: baby's name, date of birth, optional email for reminders.
• Photos and texts you upload for designing (personal content).
• Delivery address: first name, last name, street, house number, postal code, city, country.
• Order and payment status (the payment data itself is processed by Stripe (payment provider)).

3. Purposes and legal bases

We process your data to fulfil the contract (designing, producing and delivering the photo book), to provide the application, and to fulfil statutory retention obligations.

4. Photos as particularly sensitive content

Photos are personal content worthy of particular protection. Access is strictly limited to the owner (record-level ownership control). No other user can view your photos.

5. Sharing with third-party providers

• Stripe (payment provider): payment processing (processor).
• Prodigi (print-on-demand, United Kingdom): production and shipping (print data, delivery address).
• Base44 (hosting / data processing): hosting and data processing.
• Google Gmail (email and transactional service provider): sending transactional emails.

6. Retention and deletion

You can delete your album and the associated photos. For orders already produced, we retain the necessary data for the statutory retention period. Photos may be deleted after an appropriate period.

7. Your rights

You may request information, rectification and deletion, as well as restriction of processing. Contact: littlestoryalbum@gmail.com.

8. Security

API keys and secrets are managed exclusively server-side. Print-ready production PDFs are not made publicly accessible. The online preview is watermarked and does not contain print-ready original resolution.