Privacy Policy

Beki operates the personalized storybook service at https://beki.ge.

For privacy questions or requests, contact us at Contact us or info@beki.ge.

We may collect the following categories of data:

• Account data: email address, password (stored as a secure hash), account creation date, and your order history.
• Story inputs: child's first name, age, chosen theme, optional story wishes/notes, and story language.
• Optional photos: hero photos you upload (and family member photos if that feature is enabled). Photos may be processed to create cartoon-style illustrations.
• Generated content: story text, illustration files, PDF exports, and related metadata stored with your account.
• Payment data: purchases are handled by Bank of Georgia's online payment system; we receive the transaction reference and whether it succeeded, not your full card details.
• Technical data: IP address, browser/device type, server logs, and security/abuse-prevention records.
• Communications: messages you send through our contact form.

If you upload a hero photo, it is stored in our secure cloud storage (Microsoft Azure Blob Storage) and linked to your account so we can generate and display illustrations consistently.

Photos and related prompts are also sent to our AI provider (OpenAI) to generate story text and images. OpenAI processes this data on our behalf to produce output.

We do not sell photos or personal data. We do not use your photos for unrelated advertising.

Because photos may identify a child, we treat them as sensitive personal data and expect them to be uploaded only by a parent or legal guardian with appropriate authority.

We use personal data to:

• Create and deliver personalized AI storybooks and PDFs you request.
• Authenticate your account and manage your orders.
• Send service emails (such as email confirmation, story-ready notifications, and support replies).
• Process payments and prevent fraud or abuse.
• Maintain, secure, and improve the platform (including troubleshooting and analytics from server logs).
• Comply with legal obligations.

We do not sell your personal data.

Where GDPR or similar laws apply, we rely on:

• Contract - to provide the service you sign up for (account, story generation, PDF export).
• Consent - where required (for example optional photo upload and marketing emails if we offer them in future).
• Legitimate interests - security, fraud prevention, and improving the service, balanced against your rights.
• Legal obligation - where we must retain or disclose data under law.

We use trusted providers to run the service. They process data only as needed to perform their role:

• OpenAI - AI story and image generation (prompts and optional reference photos).
• Microsoft Azure - cloud hosting, database (Azure SQL), and file storage (Blob Storage).
• Bank of Georgia - payment processing for book purchases.
• Email provider (SMTP) - transactional emails such as account confirmation and notifications.

Each provider has its own privacy and security practices. We choose providers that offer appropriate safeguards for personal data.

Beki is not directed at children under 13 to register or use the service on their own.

Children's information (name, age, preferences, optional photos) should be entered only by a parent or legal guardian.

If you believe we have collected a child's data without proper parental consent, contact us immediately and we will take appropriate steps to delete it.

We retain data for as long as your account is active and as needed to provide the service, unless you request deletion or we are required to retain data longer by law.

Typical retention:

• Account and story library data - until you delete your account or ask us to delete it.
• Uploaded photos and generated illustrations - stored with your stories until account/content deletion.
• Server and security logs - usually up to 90 days, unless needed longer for investigation.
• Payment records - as required for accounting, tax, and dispute resolution (often several years, depending on law).

We use HTTPS encryption in transit. Data at rest is stored on secured cloud infrastructure with access controls.

Passwords are hashed; we do not store plain-text passwords.

No method of transmission or storage is 100% secure. Please use a strong, unique password and keep it confidential.

Depending on your location, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal data, and to data portability.

You may also withdraw consent where processing is based on consent, without affecting prior lawful processing.

To exercise these rights, contact us at Contact us or info@beki.ge. We may need to verify your identity.

If you are in the EU/EEA, you may lodge a complaint with your local data protection authority.

Our service providers may process data in countries outside your own (including the United States). Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

We use essential cookies/local storage for sign-in (authentication token) and core site functionality. We do not use invasive third-party advertising cookies on the storybook app today.

If we add analytics or marketing cookies in future, we will update this policy and, where required, ask for consent.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do.

Material changes may be communicated via the website or email where appropriate.

Privacy questions or data requests: Contact us or info@beki.ge.