Privacy Policy

Lomelle is operated by Ventryn LLC in the United States — the controller of the information described here. For anything in this policy, write to support@ventryn.com.

Your account: your name, your email address, and — if you sign up with a password rather than a sign-in provider — that password, stored only as a hash we cannot read. Your creations: the story briefs you type (including a child's first name and whatever description you choose to give), and the finished books, heroes, paintings, translations, and storyteller audio they produce. Your activity: simple tallies on your own account — books written, nights and words read, and the trophies they earn — shown back to you in the app.

Billing, when you buy something: our payment provider gives us your Stripe customer and subscription identifiers, your plan, billing interval, subscription status and period dates, and a record of the checkout used for parental consent. We never see or store card numbers.

No child accounts — children never have logins or passwords; a child's name on the shelf is a label you keep inside your own account, not an account of theirs. No photos are required for anything the studio does today. No microphone access, ever: we never record your family, and no app surface asks for your microphone. The free read-aloud voice runs entirely on your device and nothing about it is uploaded. Family storyteller narration is different, and we're precise about it below: it is audio synthesized from the book's written text — never a recording of anyone.

No advertising trackers, no data brokers, no selling or renting of anything. Your stories are never used to train AI models — ours or anyone else's.

The studio is designed for adults, and children's information reaches us only when a parent types it into a story brief. We use it for exactly one thing: making that family's books — which includes sending the book's text to the partners below when you ask for a painting, a narration, or a translation. Under COPPA's 2026 rules, any future feature that would process more — like turning a photo into a hero — will be gated behind explicit, verifiable parental consent before it exists on your account, and materials like photos will be deleted immediately after processing.

Making a book takes partners. The AI partners receive only what their one job needs — the text or art of the work itself, never your account identity. The two service partners at the end of this list are different, and we say exactly what each holds:

Anthropic (the author): receives the story brief and page text to write and revise books — and every model input the studio sends anywhere is first checked by its safety moderation. Google (Gemini, the illustrator): receives the hero's name, description, and look — the name can be your child's first name — with the book's theme, setting, and mood, each page's one-line art direction, and the hero's painted portrait (or the book's own painted cover) as a reference, to paint covers, pages, and hero portraits. It never receives the story's text. ElevenLabs (the storyteller): receives the book's written text — which can include your child's first name — to synthesize Family narration. fal.ai, running MiniMax (Living Portraits): receives a hero's painted portrait to animate it. Stripe (payments): receives your email address and your card to handle checkout, subscriptions, and receipts; card numbers live with Stripe alone. Google Cloud / Firebase: hosts the app and holds the account database and file storage where your library lives.

Each partner processes your content to produce your family's work and is bound by its terms with us not to use it for anything else — including not training on it.

Your library is stored in your account's own space on Google Cloud in the United States, readable by your account alone — enforced by server-side security rules, not politeness — until you choose to share a book. Connections are encrypted in transit, and the AI keys that power the studio live only on our servers, never in your browser.

Share links, precisely: Share this book creates a private, unguessable link that opens that one book — its text (including the child's first name it was written for) and its paintings — for anyone holding the link, no account needed. Storyteller narration is not part of a share: a visitor's own device reads the words aloud if they ask, and the recorded voice stays inside your account. Shared pages are marked so search engines don't index them. You can revoke a link any time from your shelf, and a revoked link stops working immediately; deleting the book or your account revokes it too. No other part of your library ever leaves the account-only boundary.

Lomelle is operated from the United States and your information is stored and processed there. If you use the studio from elsewhere, you're sending your information to the US, where privacy law may differ from your country's.

Your library is a keepsake, so it stays exactly as long as your account does — that's the product's promise, not a data-hoarding habit. Deleting a book or hero permanently removes it and all of its art, narration audio, and files with it. Storyteller audio lives inside the book's own space and is deleted with the book.

Deleting your account (Settings → Leaving for good) is complete and irreversible: it cancels any billing so a deleted account can never be charged again, then permanently removes every stored file, every share link you created, your entire database record, and finally the login itself. It requires a fresh sign-in and a typed confirmation, and we offer a keepsake download of your library first. Stripe retains transaction records as payment regulations require.

One narrow exception, said plainly: if a payment of yours is ever taken and the thing you bought fails to arrive, we keep the payment provider's record of that failure — which carries the email and billing address you gave the provider at checkout — in an engineering failure log for up to a year, so we can find the fault and make it right. It holds none of your books, is used for nothing else, and it is erased with your account like everything else of yours.

See it: everything the studio holds about your family is visible in the app itself. Take it: download your entire library as real PDFs any time. Fix it: names, descriptions, and pages are editable in place. Erase it: delete any book, any hero, or the whole account, as described above — then it's truly gone.

If this policy meaningfully changes, we'll say so in the app before the change takes effect — never quietly. Questions, requests, or worries about any of it go to support@ventryn.com.