1. The plain-language overview
Toupie (“we”) creates personalized story books. To do that, we need a few details — your email, what you write, and sometimes a photo to draw a character. Here's the gist:
- We never keep children's photos on our servers.
- We don't sell and don't rent your information.
- We don't train any AI on your child's face.
- You can view, correct, or delete your information at any time.
2. What we collect
Information you provide to us
- Account: your email and a password (encrypted).
- Creation content: the names, descriptions, themes, and text you enter to generate a book.
- Photos (optional): the images you upload to create a character. See section 3.
- Payment: handled by our payment provider. We never see or store your card number.
Information collected automatically
- Technical data: device type, browser, and connection logs, for security and proper functioning.
- Cookies: strictly necessary for sign-in. No third-party advertising tracking.
3. Your child's photos
This is the heart of our commitment, so let's be precise. When you upload a photo to create a character:
- The photo is never saved on our servers.
- It passes a single time to our illustration provider (Google Gemini) just long enough to generate the character's cartoon.
- Once the character is drawn, only the illustrated result is kept — never the original photo.
- The provider may keep the photo for up to 55 days solely for abuse detection and security, never to train its AI models.
You can create characters without a photo, from a simple guided description.
4. How we use it
We use your information only to:
- Create, illustrate, and deliver your books;
- Manage your account, your subscription, and your billing;
- Respond to your support requests;
- Ensure the security of the service and prevent fraud;
- Meet our legal obligations.
We make no automated decision that has a legal effect on you, and no advertising profiling.
5. Legal basis (Law 25)
Toupie is a Quebec business subject to the Act respecting the protection of personal information in the private sector, as amended by Law 25. We process your information on the basis of:
- Your consent, which you can withdraw at any time;
- The performance of the contract that binds us when you use the service;
- Our legal obligations and our legitimate interests (security, fraud prevention).
We have appointed a person in charge of the protection of personal information (see section 12) and keep a register of confidentiality incidents, in accordance with Law 25.
6. Who we share with
We never sell your information. We share it only with providers who help us run Toupie, governed by contract:
- Illustration: Google Gemini (generation of characters and images).
- Hosting & database: a cloud provider.
- Payment: our payment processor (e.g. Stripe).
- Transactional email: to send you confirmations and support replies.
Before any disclosure outside Quebec, we carry out a privacy impact assessment, as required by Law 25.
7. Retention
- Uploaded photos: not kept by us (see section 3).
- Your books and characters: kept as long as your account exists — including after a subscription is cancelled, so your library stays accessible to you.
- Account data: deleted within 30 days after your account is closed, unless a legal retention obligation applies (e.g. tax).
8. Your rights
Under Law 25, you have the right to:
- Access the information we hold about you;
- Have corrected any inaccurate information;
- Request the deletion of your account and your data;
- Receive your information in a structured technological format (portability);
- Withdraw your consent at any time;
- File a complaint with the Commission d'accès à l'information du Québec.
To exercise one of these rights, write to us at privacy@toupie.ai. We respond within 30 days.
9. Children
Toupie is meant for parents and guardians, not children. It's the adult who creates the account and provides the information about the child. We never ask a child to create an account or to send us their information directly.
10. Security & hosting
We protect your information with encryption in transit and at rest, restricted and logged access, and regular backups. No system is perfectly secure, but we treat security as an everyday priority.
11. Changes
We may update this policy. In the event of a significant change, we'll let you know by email or in the app before it takes effect. The date at the top of the page always indicates the latest version.
12. Contact us
For any question about this policy or about your personal information, contact our person in charge of the protection of personal information:
- Email: privacy@toupie.ai
- Address: Toupie, Québec (Québec), Canada