Privacy policy

Last updated 23 September 2026

You trust us with information about your child, so we keep this simple: we collect only what we need to make your book, use it only for that, and delete it on a fixed schedule.

1. Who is responsible

The data controller is:

• Katharina Dolan, org. no. 928 206 238
• Email: books@psychologistdolan.com

2. What we collect

• About you: your name, email address and country.
• About your child: first name or nickname, boy or girl, age range, interests, what they look like (if you tell us), the change they're facing, how they feel about it, and what helps them; and, if you choose to share it, how they experience the world (for example sensory sensitivities) or a diagnosis.
• People, pets and special things you add: names, who or what they are, and descriptions.
• Photos, only if you choose to add them: of your child, of places (with a word or two saying what each shows), or of the people, pets and things in the story.
• Payment: handled by Stripe. We see that you paid and how much, never your card details.
• If you buy a book for hard times: only your email address and which book you bought. Nothing about your child.

While you fill in the order form, your answers are saved in your own browser so you don't lose them; they reach us only when you place the order. We don't use analytics, advertising or tracking cookies: the only cookie we set remembers the language you choose (English or Norsk), which the site needs to work.

3. Why we use it, and on what legal basis

• To make and deliver your book, and to answer your questions about it: this is needed to fulfil our agreement with you (GDPR article 6(1)(b)).
• Your photos, and what you tell us about your child's feelings, health or development, which can be sensitive (health information is a special category of personal data): we process these with the explicit consent you give when ordering (GDPR articles 6(1)(a) and 9(2)(a)). You can withdraw consent at any time by emailing us; if the book isn't finished yet, we then stop and delete them.
• Bookkeeping: records of the sale are kept as Norwegian accounting law requires (GDPR article 6(1)(c)).

4. How AI is used

To draft the story and create the illustrations, your answers and any photos are sent to Google's Gemini API. We use Google's paid API service, under whose terms Google does not use this content to train or improve its models. Katharina reviews everything the AI produces before anything is sent to you. No decisions about you are made automatically.

5. Who else handles your data

We never sell your data or share it for marketing. These service providers process it on our behalf, only to run the service:

• Google (Gemini API): writing and illustrating the book.
• Stripe: payments.
• Resend: sending emails, including your finished book.
• Railway: hosting the website and storing orders.
• ImprovMX: forwarding emails you send to our address.
• Google (Gmail): our inbox, where your emails to us arrive.

Some of these companies are based in the United States. Transfers are protected by the EU–US Data Privacy Framework or the EU's standard contractual clauses.

6. How long we keep it

• Your photos: permanently deleted as soon as your book is delivered. If you leave checkout without paying, they're deleted when the checkout expires, after about an hour.
• The book's illustrations: deleted 14 days after delivery, so please keep your copy of the PDF.
• Your answers, your child's details and the story: kept for 12 months after delivery, in case you have questions or want changes, then permanently anonymised. If an order is cancelled before delivery, the same happens 12 months after ordering.
• Orders that were never paid: deleted entirely after 30 days.
• Books for hard times: your email address is wiped 12 months after you buy; unpaid purchases are deleted after 30 days.
• Payment and bookkeeping records (order reference, date, amount, country): kept for five years, as Norwegian accounting law requires. They contain nothing about your child.
• Server backups are overwritten within 30 days, so deleted data disappears from them too.

7. Your rights

You can ask to see the data we hold about you and your child, have it corrected or deleted, restrict or object to how we use it, or receive a copy. Email books@psychologistdolan.com and we'll respond within a month. You can also complain to the data protection authority: in Norway, Datatilsynet (datatilsynet.no); in South Africa, the Information Regulator (inforegulator.org.za).

8. Children

Books are ordered by parents and guardians. We don't collect information directly from children.

9. Security

The site uses encrypted connections, and only Katharina and her technical helper can sign in to see orders.

10. Changes

If we change this policy we'll update the date above; for significant changes affecting an order in progress, we'll email you.