How Cursus Books handles personal information

We collect information needed to provide personalised, illustrated, choice-driven books and account features. This can include:

• account details such as name, email address, username, and authentication identifiers;
• parent, family, and child profile information, including age range or date of birth where needed for age-appropriate experiences;
• subscription status, plan, usage allowances, and billing identifiers processed through Stripe;
• book creation inputs, genres, language preferences, character details, prompts, generated books, chapters, pages, choices, covers, and illustrations;
• reading progress, bookmarks, reader choices, and bookshelf activity;
• support messages, contact form submissions, and privacy or data requests;
• technical data such as IP address, user agent, session metadata, logs, diagnostics, and API usage records.

We use personal information to:

• create, store, and continue personalised books;
• apply age-range and family profile settings;
• sync reading progress, bookmarks, and bookshelf state across devices;
• manage accounts, subscriptions, trials, and usage limits;
• provide support and respond to contact or privacy requests;
• monitor service reliability, investigate failures, prevent abuse, and improve generation quality;
• send essential service communications.

Where UK or EU data protection law applies, we rely on the following lawful bases: performance of our contract with you to provide and manage the service; our legitimate interests in keeping the service secure, preventing abuse, and improving quality; compliance with our legal obligations; and your consent where it is required, such as for non-essential cookies and for processing a child’s information through a parent or guardian.

Cursus uses AI services to generate book plans, chapters, covers, illustrations, and related prompts. Only the book information needed to create your content is sent to AI providers — no personal information, such as your name, email address, or account details, is ever sent to an AI service. We also keep operational logs of AI prompts and responses where needed for diagnostics, quality review, and abuse prevention.

Cursus supports family-managed child profiles and age-aware books. Parents or guardians are responsible for creating and managing child accounts, choosing appropriate profile settings, and supervising use of the service.

Child profiles must be set up and managed by a parent or guardian through a family account. We do not offer standalone accounts to children. Where a child is under the age at which they can consent to online services on their own (13 in the UK), we rely on the consent and authority of the parent or guardian who creates and manages the profile.

We design children’s experiences to be age-appropriate, applying writing rules, themes, and tone suited to each age band, and we collect only the information needed to provide those experiences. Parents and guardians can review the books on a child’s account and can contact us to access, correct, or delete a child’s information at any time.

We use trusted providers to operate Cursus and to process information on our behalf. We currently use Clerk for authentication, Convex for application data and storage, Stripe for payments, Resend for email, Sentry for monitoring, and AI and image generation providers to create book content. Each provider only receives the information needed to perform its function.

We keep this list current and review it whenever we add or change a provider. If you would like the most up-to-date list of the providers we use, please contact us.

Some providers may process information outside the UK or European Economic Area. Where required, we rely on appropriate safeguards such as adequacy arrangements, standard contractual clauses, or other lawful transfer mechanisms.

We keep information for as long as needed to provide the service, maintain accounts, meet legal obligations, resolve disputes, and operate support and security workflows.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export your personal information. We may need to verify your identity before fulfilling a request.

If you are in the UK or EEA and believe we have not handled your personal information properly, you have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner’s Office (ICO) at ico.org.uk. We would welcome the chance to address your concerns directly first.

We use cookies and similar technologies for authentication, session continuity, preferences, security, and service operation. Disabling essential cookies may stop parts of the service working.

We use technical and organisational measures designed to protect personal information. No online service can guarantee absolute security, but we work to limit access, monitor reliability, and reduce unnecessary retention of sensitive data.

We may update this policy from time to time to reflect changes to the service, our providers, or legal requirements. When we make material changes, we will update the “Last updated” date above and, where appropriate, let you know through the service or by email.

For privacy questions or data requests, email privacy@cursusbooks.com or use our contact form.