Juïno Privacy Policy
Last updated 23 October 2026.
1. Summary
- A child's parent or legal guardian gives us one photo of the child to make a book about them. We confirm the parent's or guardian's consent before any photo comes to us.
- A head-and-shoulders crop of the photo is sent to OpenAI in the United States, where the illustrations are created with generative AI, and the finished pages are sent to our printer in Malaysia.
- We never keep your original photo. We keep only a head-and-shoulders crop, and only until you pay (or for 14 days if you don't order). After that, we make the book from drawings of your child that we made from the crop. You can delete everything sooner at any time.
- Before ordering opens, you can make a preview and join our waitlist. We take no payment for this.
- We don't sell the photo, use it in our marketing or use it to train any AI model of ours.
- A few copies are outside our control, such as the copy OpenAI keeps for safety checks, previews you have sent through messaging apps, and emails in your inbox. Sections 7, 9 and 10 explain these.
2. Who we are
Juïno is operated by Gahyun Kwon, a sole trader registered in the Republic of Korea (business registration number 391-78-00507), trading as Juïno (we, us, our). We make personalised picture books for families in Australia.
Privacy officer: Gahyun Kwon, privacy@juino.com.au, Office D104, Level 1, 888 Brunswick Street, New Farm QLD 4005, Australia.
3. What we collect
| Information | Collected from | Purpose |
|---|---|---|
| Your email address, sign-in codes and times, and your confirmation that you are 18 or older | You | To run your account |
| The name to appear in the book (a first name or nickname) and the word the book uses for the grown-up (chosen from a list, such as Mum or Nan, or typed in, such as Nonna. A typed word may be someone's name). Some books use only the name | You | To write the book |
| A head-and-shoulders crop of one photo of the child, your confirmation that the photo shows only this child, and your confirmation of the crop | You | To create the child's illustrations |
| Material we create from the crop: photo-like working pictures of the child that OpenAI creates from the crop to help draw the portraits; a character file (the drawings of the child and working files we use to draw your child the same way on every page); the preview, the book's illustrations and the print file | Created by us | To make and print the book |
| Your consent record: the version of the notice you saw, when you saw it, your agreement for yourself and, separately, your consent as the child's parent or guardian, when you confirmed that consent with the code we emailed you (or, for another child, when you said yes while signed in and when we emailed you a copy), whether you chose to receive marketing emails, whether you chose to keep the character file for a next book, and whether you chose to keep your preview until ordering opens | You | To record what you agreed to |
| Records of our checks: for each image of the child sent to OpenAI, a fingerprint of the file, OpenAI's safety result (accepted or refused), where it was sent and when; a record when OpenAI refuses a crop; records of deletion; and our image server's job records (job numbers and file fingerprints only, no images or names) | Our system | To show that only crops you confirmed were sent, and that files were deleted on time |
| Records of orders we had to hold: the reason, page number, decision and time (no images) | Our system | To finish or refund the order |
| Order details: order number, amount, date, your name for the parcel, and the delivery address and phone number | You | To deliver the book and keep tax records |
| Your email address, for our emails about your order, including when we start making it and when it is sent, due to arrive and delivered (only we use it; our printer and courier have your name for the parcel, address and phone number) | You | To keep you updated about your order |
| Delivery tracking and, if something goes wrong with delivery, the courier's proof of delivery | Our printer and courier | To deliver the book and sort out delivery problems |
| Your place on our waitlist: your account email, and the book, size and cover you chose | You | To email you when ordering opens, and to keep your choice ready for when it does |
| If you agree to receive a promo code: your email address, the code, and how and when you agreed | You | To send you the code and make sure it is used only once |
| Payment details (card and billing address) | You, directly to Stripe | To take payment. We never see or store card details |
| Share settings, and how many times a shared link was opened (not who opened it) | Our system | To operate the share link |
| When the printer opened a print-file link (time, link and result, with no IP address or device details) | Our system | To record who accessed print files |
| Messages you send us and requests to delete | You, or a child's parent or guardian | To help you and to show we did what was asked |
| A list of email addresses that bounced or marked our email as spam, with the time (no subject or content) | Our email provider | To stop sending to them |
| Technical data: sign-in cookies and server request logs | Your browser | To keep you signed in and keep the site secure |
| Email delivery records: your email address, if an email we send to it bounces or is marked as spam, with which of the two and when | Our email provider | To stop sending emails to an address that can't receive them or doesn't want them |
We don't ask for the child's surname, date of birth, age or gender. The name field is a single box, so please enter only what you want to appear in the book. We don't use analytics or advertising trackers.
We don't use the photo to identify the child or to compare them with anyone else.
We never keep your original photo. When you choose a photo, our server in Sydney checks a reduced copy, in memory only and without saving it, to make sure it shows exactly one face and that the face is large enough to use. This check only looks for faces. It does not identify anyone, compare faces or create facial templates. If the photo doesn't pass, we ask for another one. If it passes, your browser cuts out a head-and-shoulders crop and only that crop is uploaded to us, without location data. We then show you the crop so you can confirm it. When we make the illustrations, OpenAI's image service checks the crop for unsuitable content. If it refuses the crop when we first draw your child, we stop, delete the crop and anything already made from it, and ask you for a different photo. If it refuses just one of the expressions we draw, we use the calm face we have already drawn in its place, without sending that request again. If it refuses a page while we are making a book you have paid for, we redraw that page with the calm face, and if that is refused too, we refund you for that book. Any word you type for the grown-up is checked on our website and is not sent to OpenAI.
4. Children's information
Juïno books are made for children aged 3 to 5, and each story is written to be read to them. Children don't use Juïno. Only a child's parent or legal guardian can upload a photo of the child and ask us to make a book about them, on the child's behalf.
How a parent or guardian gives consent
When you first sign in, you tick one box to confirm that you are 18 or over and that you agree to our Terms and this policy. Separately, as the child's parent or guardian, you say yes to us handling the child's information as described here, by tapping the yes button under a short summary that opens to show the details. Nothing is ticked for you. The email with your sign-in code also explains what this consent covers, and entering the code confirms that the yes came from you, as the child's parent or guardian. When you start a book for another child while signed in, you say yes for that child before you add their photo, and we email you a copy of what you agreed to and how to take it back. We keep a record of what you agreed to and when. We receive no photo of the child until this is done.
What the consent covers
The consent covers the child's name, the word for the grown-up, a head-and-shoulders crop of one photo and what we make from it. We use these to make the preview and the book, to deliver the book and to email you about it, with the child's name in the subject line. The owner of Juïno may also view on screen the pictures and the character file (the drawings we use to draw your child), and the head-and-shoulders crop and the photo-like working pictures while we still have them, to answer your questions and to check that previews look like the child and are being made well (see section 5). We keep them for the periods in section 8, and they are handled in Australia, the United States and Malaysia as set out in section 7.
You can choose not to give this consent. If you don't, we can't make a book for the child, and nothing else changes. You can withdraw it at any time (see section 10).
We use a child's photo, and everything made from it, only to make that child's book, and we keep it for as short a time as we can.
5. How we use your information
We use personal information only to:
- check that an uploaded photo and any words you type are suitable, and create your preview and your book;
- check the finished book before printing (it is checked automatically, and for now the owner of Juïno also views each finished book on screen before it is sent to print);
- print and deliver the book;
- operate your account, keep your place on our waitlist, and send emails about your preview, the waitlist and your order (the subject line of some of these emails includes the child's name), and, if you have agreed to receive them, news and offers from Juïno, including promo codes;
- respond when you contact us. To answer a question about your preview, the owner of Juïno may look on screen at your preview pictures and the character file, and at the head-and-shoulders crop and the photo-like working pictures while we still have them;
- check from time to time that previews are being made well, including that they look like the child. For this the owner views some previews on screen next to the crop, the photo-like working pictures and the character file they were made from, to see at which step a likeness changed. The crop and the photo-like working pictures can only be viewed while we still have them;
- keep records required by law (for example, for tax) and records showing that we handled deletion requests; and
- keep the service secure and prevent misuse.
We don't sell personal information, use it for advertising, use the child's photo or book in our marketing, or use any of it to train any AI model of ours.
Why we may handle your information
| Information | Basis |
|---|---|
| Your email, sign-in, order, delivery and payment details | To provide the service you asked for (our contract with you) |
| The child's name, the word for the grown-up, the photo crop and everything made from it, including emails about the book that show the child's name | Your consent as the child's parent or guardian |
| Keeping the character file for your next book; keeping your preview until ordering opens | Your separate, optional consent. Saying no doesn't affect your current preview or order |
| Waitlist emails | Your request when you join the waitlist. You can leave it at any time |
| Marketing emails, including promo codes | Your consent: a box on our site (unticked by default), or your agreement given to us directly |
| Order, tax and complaint records; records of our checks and deletions | To meet our legal obligations and keep the service safe |
If you withdraw your consent for the child's information, we stop using it and delete it (see section 10).
6. Service providers
We use the service providers below. Each one receives only the information it needs to do its job.
| Provider | What they do | What they receive | Location |
|---|---|---|---|
| Supabase | Database, file storage and sign-in | Everything in section 3 except card details | Sydney, Australia |
| Vercel | Website hosting, and checking uploaded photos | Requests to the website, and a reduced copy of an uploaded photo while it is checked (in memory only, never stored) | Sydney, Australia; static files served worldwide |
| Amazon Web Services | Our image and typesetting server | The confirmed crop (until you pay), pictures made from it, the character file, and the child's name and the word for the grown-up (for typesetting) | Sydney, Australia |
| OpenAI | Creates the illustrations of the child, and checks each request for unsuitable content | The head-and-shoulders crop and illustrations made from it, and a code that stands for your account (not your name or email) so OpenAI can spot misuse by account. Not the child's name or the word for the grown-up | United States |
| Photobook Worldwide Sdn Bhd | Prints and sends the book, reprints it if it arrives damaged or faulty or goes missing, and checks a book when we need to see it | The print file (the child's face and name), your name for the parcel, and the delivery address and phone number; if a book arrives damaged or faulty or goes missing, your photos of the problem, and the book itself if we need to check it | Malaysia |
| Google (order sheet run by the printer, as its sub-processor) | Passes each order to the printer | Your name for the parcel, the delivery address and phone number, quantity, a link to the print file (not the file itself), our reference number and tracking number | Worldwide |
| DHL (engaged by the printer, as its sub-processor) | Delivers the book, and collects a book we need to check | Your name for the parcel, the delivery address and phone number. For a damage or loss claim, your photos of the problem | Malaysia and Australia |
| Amazon Web Services | Sends our emails | Your email address and the content of the email | Sydney, Australia |
| Stripe | Processes payments, emails your receipt and handles payment disputes | Your email address, which book you ordered (not the child's name), the amount, and your card and billing details. If you dispute a payment, the order and delivery details (never pictures of the child) | Worldwide |
| Inngest | Manages our task queue | Task and deletion-request numbers and counts only | United States |
| Google Workspace (Google LLC), our email service | Holds our support and privacy inboxes | Messages you send us, which may include details about the child, and our replies | United States and other countries |
We may also disclose information where the law requires it.
7. Where your information is processed, including outside Australia
We are based in Korea, so under Korean law sending or storing information with any of the providers below counts as an overseas transfer, including providers in Australia. We make these transfers because they are needed to provide the service you asked for as the child's parent or guardian, and we set them out here as the law requires.
| Recipient and contact | Country | Information | When and how | Purpose | How long they keep it |
|---|---|---|---|---|---|
| Supabase Pte. Ltd., privacy@supabase.com | Australia (Sydney) | Everything in section 3 except card details | As you use the service, over encrypted connections | Database, file storage and sign-in | As in section 8 |
| Vercel Inc., privacy@vercel.com | Australia (Sydney); static site files worldwide | Website requests; a reduced copy of your photo while it is checked | Each time you use the site; the photo copy is held in memory only and never stored | Website and photo check | Photo copy not kept; request logs 1 day |
| Amazon Web Services, Inc., via pages.awscloud.com/DSAR_RTF.html | Australia (Sydney) | The confirmed crop (until you pay), pictures made from it, the character file, and the child's name and the word for the grown-up (for typesetting); the emails we send you | While each job runs (no more than 24 hours), and when we send email | Making the pictures, setting the text, sending email | Deleted when each job ends; job records 30 days |
| OpenAI OpCo, LLC, dsar@openai.com | United States | The child's photo crop and illustrations made from it, and a code that stands for your account so OpenAI can spot misuse (not your name or email, and not the child's name or the word for the grown-up) | Each time an illustration is created, over an encrypted connection | To create the book's illustrations (OpenAI checks each request for unsuitable content) | Up to 30 days for abuse monitoring, and longer only if their safety checks flag an image or the law requires it |
| Photobook Worldwide Sdn Bhd, No. 7, Jalan TP2, Taman Perindustrian SIME UEP, 47600 Subang Jaya, Selangor, Malaysia | Malaysia | Print file (the child's face and name), and your name for the parcel, the delivery address and phone number; your photos of a problem, if a book arrives damaged or faulty or goes missing, and the book itself if we need to check it | When the book goes to print, when a reprint is needed, and when we need to check a book. The printer views and prints the file through a link that expires (after 14 days by default) and can be opened while it is valid | To print and send the book | Under the written agreement we put in place before any book goes to print: print files are deleted within 30 days after the book is sent, order details within 30 days after delivery, and sooner when we ask; a book it checks is shredded once checked, unless you ask for it back. |
| Google LLC, via policies.google.com/privacy (sub-processor of the printer) | Worldwide | Your name for the parcel, the delivery address and phone number, and a link to the print file | When the order is passed to the printer | Passing the order to the printer | Removed or masked 30 days after delivery |
| DHL Express, via dhl.com (sub-processor of the printer) | Malaysia and Australia | Your name for the parcel, the delivery address and phone number; your photos of a problem, for a damage or loss claim | When the book is sent, for any claim, and when it collects a book we need to check | Delivery, collecting a book for checking, and claims | Under DHL's own terms |
| Stripe, dpo@stripe.com | Worldwide | Your email address, which book you ordered (not the child's name), the amount, and your card and billing details; if you dispute a payment, the order and delivery details (never pictures of the child) | When you pay, and if you dispute a payment | Payments, receipts and payment disputes | Under Stripe's own terms |
| Inngest Inc., hello@inngest.com | United States | Task and deletion-request numbers and counts only | During the order | Managing our task queue | Under Inngest's own terms |
| Google LLC (Google Workspace, our email service), via policies.google.com/privacy | United States and other countries | Messages you send us, which may include details about the child, and our replies | When you email us | Customer support | As in section 8 |
If you would prefer that your child's information does not go overseas, please don't upload a photo. We can't make the book without one, but nothing else about your account changes. If you have already uploaded one, you can delete it at any time.
OpenAI's terms say that it does not use data sent through its API to train its models, and we have switched off all data sharing with OpenAI. OpenAI checks images for child abuse material. If an image is flagged, even by mistake, OpenAI staff may keep it for review. Because OpenAI is based in the United States, US authorities could require it to disclose data under US law.
8. How long we keep information
| If you don't order | If you order | |
|---|---|---|
| Original photo | Never stored (a reduced copy is checked in memory only) | Same |
| Head-and-shoulders crop | If you don't confirm it, 24 hours after it is uploaded. Once you confirm it, 14 days after that | Deleted when you pay |
| Photo-like working pictures made from the crop | Same as the crop | Deleted when you pay, or kept until 90 days after the book arrives if you chose to keep the character file for your next book |
| A preview you chose to keep for when ordering opens (preview pages, character drawings, name and word for the grown-up; not the crop) | Until 14 days after we email you that ordering has opened, and no longer than 90 days after you chose to keep it. Deleted straight away if you leave the waitlist | Not applicable |
| Your place on our waitlist | Until 30 days after we email you that ordering has opened, or until you leave the waitlist if that is sooner. After that, your account follows the usual rule below | Not applicable |
| Character file | 14 days after the preview is ready | 30 days after the book arrives, or 90 days if you chose to keep it for your next book |
| Preview and the book's illustrations | 14 days after the preview is ready | 30 days after the book arrives |
| Print file | Not applicable | We delete ours 30 days after delivery. For the printer's copy, see section 7 |
| Book details (name and the word for the grown-up) | Kept with the illustrations | Kept with the illustrations |
| Your name for the parcel, the delivery address and phone number | Not applicable | 30 days after delivery |
| Order, payment and cancellation records (without the child's information) | Not applicable | 7 years (Korean tax law, for cross-border sales) |
| Records of complaints and disputes | Not applicable | 3 years (Korean e-commerce law) |
| Files for an order we have had to hold | Not applicable | Deleted as soon as the hold ends |
| Consent records and your confirmation of the crop | Kept with your account | Kept with the order records |
| Records of what we sent to OpenAI and what we deleted (no images) | 100 days | 100 days |
| Records of a crop that OpenAI's safety check refused, including your confirmation of that crop (no images) | 90 days | 90 days |
| How many times OpenAI's safety check has refused a photo on your account before a preview was ready (a count only) | Kept with your account | Kept with your account |
| Our image server's job records and logs (job numbers and file fingerprints only) | 30 days after the job | 30 days after the job |
| Records of orders we had to hold (no images) | Not applicable | 90 days after the decision |
| Messages you send us and our replies | 12 months after the matter is closed (complaints: 3 years). Photos you send us, such as a photo of a damaged book, are deleted when the matter is closed, or 6 months after it is closed if we found the book wasn't faulty or the matter is in dispute. A book we collect to check is shredded by our printer once checked, unless it wasn't faulty and you ask for it back | Same |
| Deletion request records (without the child's information) | 3 years | 3 years |
| Record of the printer opening print-file links, and of the owner viewing orders, books and previews | 1 year (Korean security standards) | 1 year |
| Server request logs kept by our website and database providers (these can include your IP address, browser details and, for sign-in, your email address) | 1 day (website); 7 days (database and sign-in) | Same |
| Records of emails that bounced or were marked as spam (email address, which of the two, and when) | 12 months after the record is made | Same |
| Bounce and spam-report list | Kept with your account | Kept with your account |
| Email address we sent a promo code to | Until 30 days after the code is used or expires | Same |
| Unsubscribe list (email address only) | As long as needed so we don't email you again | Same |
| Share link open counts | Kept with the preview | Kept with the preview |
| Your account | Deleted 12 months after you last sign in | Same. The order records above are kept separately for their legal periods |
"Arrives" means the date on the courier's delivery record, or 14 days after the book was sent if there is no record.
When the time is up, photos and illustrations are deleted from storage immediately (they are never included in backups). Records deleted from our database remain in our backups for about 7 days, after which we can no longer recover them. Electronic files are deleted so that they cannot be recovered, and any printed copies that are no longer needed, such as misprints, are shredded.
9. Sharing a preview
If you turn on a share link, anyone with the link can view the preview without signing in. Messaging and social apps show a preview card with the cover, including the child's face and name. Those apps keep their own copy once the link has been sent, and we cannot delete it. Turning the link off stops it working straight away. We ask search engines not to index shared previews. You can also save the preview card as an image. We cannot delete an image once it has been saved or sent. The image file includes a small note in its details saying that the illustrations were made with a process that includes generative AI.
10. Deleting your information and your other rights
You can ask to access, correct or delete your information, ask us to stop using it, or withdraw your consent, at any time.
- Deleting: use the "Delete my data" link at the bottom of any page on our site and confirm with a sign-in code, or email privacy@juino.com.au. We delete everything straight away, including anything in progress, and confirm by email. Your account stays open so you can start again. If you would like it closed too, email us and we will close it within 10 days. Deleting your data does not take you off the waitlist. Every waitlist email has a link to leave it.
- Another parent or guardian, including one without an account, can email us. Details such as the child's name and the suburb it was sent to, or a share link, help us find the book, and we will also ask for reasonable proof that you are the child's parent or guardian before we act. While we check, we may pause any order and turn off share links. Once we have confirmed the request, we delete the child's information as described here, and any order is handled as set out in clause 5 of our Terms.
- What remains after deletion: we keep order and payment records, the record of your consent and of your deletion request, and records of our checks and deletions for up to 100 days. If an email to you bounced or was marked as spam, we keep that record for 12 months so that we don't email the address again. If your book is already on its way, we also keep the delivery details until 30 days after delivery. None of these include the child's photo or illustrations. Some copies are outside our system: OpenAI's copy, for up to 30 days (see section 7); the printer's copy, until they act on the deletion request we send them as soon as you ask (or, if the book has already gone to print, once it has been sent); copies already sent through apps you shared with; and emails already in your inbox.
- If a book is in progress: we start making each book 2 hours after you pay. If you ask within those 2 hours, we cancel that book and give a full refund. Once we've started, the book isn't refunded. If you still want the book, we finish and deliver it, delete everything we made from your photo (the illustrations, the character file and the print file) as soon as it has gone to our printer, and ask our printer to delete its copy once the book has been sent. If you don't want the book, tell us before it has been sent and we stop it and delete everything straight away. Because we will no longer have the print file, if a delivered book arrives damaged, or with a printing or binding fault, we'll refund you.
- Access and correction: email us and we will respond within 10 days. We first confirm it's you through your account email. We then tell you, at that email address, what information we hold about you and your child and how long we keep it, and you can view any images we still hold on screen after signing in. We show images on screen rather than sending files. Correction applies to the information we hold, such as your account email; a book that has been paid for is printed as approved. Withdrawals of consent and deletions are acted on straight away.
11. Security
- Files are stored in Sydney and can only be opened through addresses that expire within minutes. Share links and the printer's links are links we can turn off, and each click creates a new address that expires within minutes. The printer's links expire after 14 days by default, and each time one is opened it is logged.
- All data we send is encrypted in transit (TLS). Our database and file storage are encrypted at rest (AES-256), and so is our image server's temporary disk. Emails to your inbox are encrypted in transit where your email provider supports it.
- The owner of Juïno manages the service from Korea and Australia through our admin screens, which only the owner can open, with two-step sign-in. Orders, requests, books and, when needed to answer your question or check quality, previews are viewed on screen, with no download button, and every view is logged with who viewed it, when and why. For now, the owner views each finished book before it goes to print.
- Our image server keeps temporary copies for no more than 24 hours and deletes them when each job is finished or an order is held.
- We send books to print only under a written agreement with our printer that limits access to print files to the staff who need them.
12. Emails
We email you about signing in, your preview, the waitlist and your order. If you join our waitlist, we will email you when ordering opens, and every waitlist email has a link to leave it. Our payment provider, Stripe, emails your receipt when you pay. The subject line of emails about your child's preview and book includes the child's name. Subject lines can appear on a phone's lock screen and remain in your inbox, and we cannot delete them.
We send marketing emails, including promo codes, only if you have agreed to receive them: by ticking the box on our site (it is unticked by default), or by telling us directly that you'd like one, for example at an interview or event. You can unsubscribe at any time, and every marketing email includes an unsubscribe link. Marketing emails never include information about the child.
13. Cookies
We use cookies only to keep you signed in, for up to 30 days. Our sign-in system may split this into several small cookies. We don't use analytics or advertising cookies. You can block or delete cookies in your browser settings, but you will then need to sign in each time.
While you make a book, your browser also keeps the book you chose, the child's name, the word for the grown-up and your consent choices in that browser tab's own storage, so you can carry on after signing in. This is not a cookie. It stays on your device and is cleared when you close the tab.
14. Data breaches
If we become aware of a data breach, or of circumstances in which the law treats a breach as possible, we will notify the people affected and the relevant regulators within the time and in the way the law requires (in Korea, generally within 72 hours, and in Australia, as soon as practicable where serious harm is likely).
15. Questions and complaints
Please contact us first at privacy@juino.com.au. We will reply within 10 days.
If you are not satisfied with our response, you can contact:
- Australia: Office of the Australian Information Commissioner, oaic.gov.au, 1300 363 992
- Korea: Personal Information Infringement Report Center, privacy.kisa.or.kr, +82 118; Personal Information Dispute Mediation Committee, kopico.go.kr
16. Changes to this policy
If we make a significant change to this policy, we will email you before it takes effect, and we post each new version here with its date. Each version stays online, unchanged, at its own dated address, and previous versions are listed at the end of this page.
Published 23 October 2026.