Privacy Policy
Last updated: September 18, 2026
Wovenleaf ("we," "us," "our") is based in British Columbia, Canada. This policy explains what personal information we collect when you use Wovenleaf, why, and what rights you have over it. It applies to creators, contributors, and buyers alike.
1. Information we collect
Account information
If you create a book, we collect your email address to create and secure your account.
Contributor information
If you add an entry to someone else's book, we collect the name you type in, the photo you upload, the memory you write (including the back-and-forth if you use the guided interview), and roughly when the memory happened.
Order and shipping information
If you buy a copy, we collect the email address used at checkout, and — for a printed copy — the shipping name and address you give at checkout, so the book can be sent to you.
Payment information
Payments are handled entirely by our payment processor. We receive confirmation that a payment succeeded and the amount, but we never see or store your full card number.
Communications
If you email us for support, we keep that correspondence to help you and to improve the service.
Automatically collected information
Our hosting and security providers automatically log standard technical information (like IP address, browser type, and request timestamps) for security and reliability. We don't run advertising trackers or analytics scripts on Wovenleaf today.
2. How we use this information
- To create and let you access your account;
- To turn contributed photos and memories into an illustrated book — including generating illustrations and story text with AI (see Section 4);
- To process payments and fulfil digital and printed orders;
- To send transactional email — order confirmations, your permanent copy link, and responses to support requests;
- To keep the service secure and prevent abuse.
We don't sell your personal information, and we don't use it for advertising.
3. AI processing
To create a book, photos and written memories are sent to third-party AI providers solely to generate the illustrations and text that go into your book. These providers process that data under their own terms as our service providers; we don't use your content to train our own models, and we don't use it for anything beyond producing your book.
4. Who we share information with
We share information only with the categories of service providers below, only as needed to run Wovenleaf, and never for their own marketing purposes. We use established, reputable providers for each of these roles; which specific companies we use can change over time as our service evolves.
| Category | What it does | What we share |
|---|---|---|
| Cloud hosting & database | Stores the app's data and files | Everything stored in the app — accounts, entries, photos, books, orders |
| Payment processor | Processes payments | Order amount, email, and — for printed orders — shipping address |
| AI illustration service | Generates the illustrated version of a photo | The photo being illustrated |
| AI writing service | Drafts and polishes story text | Memory text and interview answers, to draft and polish pages |
| Email delivery service | Sends transactional email | Recipient email address and message content |
| Print-on-demand partner | Prints and ships physical copies | The finished book file, plus shipping name and address |
We may also disclose information if required by law, or to protect the rights, property, or safety of Wovenleaf, our users, or others. If Wovenleaf is ever acquired or merges with another company, your information may transfer as part of that deal, subject to this policy or one at least as protective.
5. International data transfers
Because our service providers operate internationally, your information may be processed in Canada, the United States, and other countries where they have infrastructure — including countries whose data protection laws may differ from your own. Where required, we rely on standard contractual safeguards with those providers.
6. Data retention
We keep entries, photos, and books for as long as your account exists, or as long as needed to provide the service — for example, so a permanent purchased copy keeps working. You can ask us to delete your account and associated content at any time (Section 9); we may keep limited records where we're legally required to, such as payment records for tax purposes.
7. Children's privacy
Wovenleaf isn't directed at children, and creating an account requires being old enough to enter into these terms in your jurisdiction. Photos of children may appear in a book when a parent or guardian contributes them or consents to their inclusion — the adult contributor is responsible for that consent, as described in our Terms of Service. If you believe a child's information has been provided to us without appropriate consent, contact us and we'll address it.
8. Your privacy rights
Wherever you're located, you can ask us to access, correct, or delete the personal information we hold about you by emailing hello@wovenleaf.store. Some additional detail depending on where you live:
Canada
Under Canadian federal and B.C. privacy law (PIPEDA and B.C.'s Personal Information Protection Act), you have the right to access and request correction of your personal information, and to complain to the Office of the Privacy Commissioner of Canada or B.C.'s Office of the Information and Privacy Commissioner if you're not satisfied with how we've handled a request.
European Economic Area & United Kingdom
If GDPR or UK GDPR applies to you, our legal bases for processing are performance of a contract (creating and delivering your book), legitimate interests (running and securing the service), and consent (where we ask for it). You additionally have the right to data portability, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.
California
California residents have the right to know what personal information we've collected and to request its deletion, subject to the exceptions above. We don't sell personal information as defined under California law.
9. Cookies
We use only the essential cookies needed to keep you signed in and the service working — no advertising or third-party tracking cookies. Because these are necessary for the service to function, there's no separate opt-out for them.
10. Security
We rely on our providers' industry-standard security practices (encryption in transit, access controls) to protect your information. No system is perfectly secure, and we can't guarantee absolute security.
11. Changes to this policy
We may update this policy from time to time. We'll post the revised version here with a new date; material changes will be called out where practical.
12. Contact
Questions about this policy, or want to exercise any of the rights above? Email hello@wovenleaf.store.
See also our Terms of Service.