Evie & Theo

The short version

Evie & Theo is a storybook maker for a grown-up to use together with a child, in our iOS / iPad app. It's made and run by Tech Bebop LLC (“we”, “us”), the company responsible for the information described in this policy. Here's the heart of it: we don't keep the stories you make. Once your story is shown to you, we don't store what you typed or the story we created — the finished book lives only in the app on your device. The only time we see a story is if you choose to share it with us in feedback.

We also keep a few small things, each explained below: an anonymous record of each story (including roughly where in the world it was made), a count of the free stories used on your device, and any feedback or messages you choose to send us. We never sell your data, and we never show ads.

Please don't type a child's full name, address, or other identifying details — a first name or nickname is all you need.

Who this service is for

Evie & Theo is designed to be operated by an adult (18 or older), making a story together with a child in our iOS / iPad app. It is intended for parents and guardians to use with their children, not for children to use on their own, and we do not provide accounts or logins. The grown-up using Evie & Theo is responsible for what is typed in and for any child sitting alongside them.

What happens to what you type

To create your storybook, the details you enter — your story idea, the chosen flavor and art style, the reader's age (used to set the reading level and length), and any optional extras like character names, the setting, or a magical element — are sent to the AI services that write and illustrate the book and check that the idea is appropriate for children. We then show you the finished story and don't keep it: not the story, not what you entered. We don't build a profile of you, and stories are never shared publicly or shown to anyone else.

For each story that's created we do keep a small anonymous record, so we can understand how Evie & Theo is used and what it costs to run: when it was made, the reader's age, the story type, the number of scenes, and how much AI work (and money) it took. The record also includes an approximate location — only the city and country the request came from, nothing more precise — which our hosting provider estimates from your internet connection's IP address. It never comes from your device's GPS: the app doesn't ask for your location. This record is not linked to your identity, your device, or your IP address, and it never includes what you typed or the story itself.

If you send us feedback, we receive your thumbs-up or thumbs-down and any comment you write, and we keep them (with the country you sent them from) to help improve Evie & Theo. If you write a comment, it's also emailed to us along with your approximate location (city and country). On a thumbs-down, the feedback box also has a switch to share that story's details, which is off unless you turn it on. Only if you turn it on do we receive the full story (including its title) and what you entered — so we can look into what went wrong. Leave it off and we get just your rating and any comment. (Version 1.0 of the app also sends the story's title along with a rating; our server discards it without logging or storing it, unless you've turned sharing on.)

Email addresses

In the app, tapping “Email us” simply opens your own mail app — we only ever receive a message you choose to send. On the website, our contact form asks for your message and, if you like, your name and email address; sending it emails those details to us. Either way, we use them only to read and reply to your message — we don't add you to any list or send you marketing — and you can ask us to delete your message anytime.

Keeping Evie & Theo safe

We use Apple's built-in device check (Attest) to confirm that requests come from a genuine, unmodified copy of our app on your device, without telling us who you are. To do this, the app creates a key on your device just for Evie & Theo; we keep that key's ID, its public half, and a counter, so we can check each new story request. To prevent abuse and spam, we also limit how often requests can be made, using a scrambled (hashed) form of your IP address rather than the address itself. The website's contact form uses Cloudflare Turnstile, which looks at your IP address and browser signals to tell people from bots. We don't use tracking cookies or build advertising profiles; the only thing our website saves in your browser is your light/dark theme choice.

Free stories and subscriptions

The app comes with 3 free stories. To count them, our server keeps a tally of the free stories made on your device, tied to the Attest key ID described above — just that ID, the number of stories, and when the tally started.

Subscriptions are sold and billed by Apple, under Apple's own privacy policy: we never see your payment details, your Apple Account, or your purchase history. The app checks your subscription with Apple on your device and simply tells our server that it's active when you make a story (so that story isn't counted). We don't receive or store receipts or transaction details.

The services that help run Evie & Theo

We rely on a few trusted providers:

• Anthropic — its Claude AI writes your story and runs the safety check on your idea.
• fal.ai — runs the FLUX AI image model that draws the pictures.
• Cloudflare — our hosting and security, the database that holds the records described above, the emails that reach us, and the website's Turnstile check.
• Apple — the built-in device check (Attest), and App Store purchases and subscriptions.

They process only what's needed to do their job, under their own terms. We never sell your information or share it for advertising.

On training: Anthropic does not use what you type, or the stories written for you, to train their models. Our image provider, fal.ai, does not make that same commitment on the plan we use — their terms allow them to use anonymized or aggregated data derived from image requests to help develop their models. What they receive is the picture description and the character reference pictures the app creates — which is exactly why we ask you to use a first name or nickname only, never a full name or contact details.

Children's privacy

Evie & Theo is meant to be used by a grown-up together with a child, and the grown-up is the person interacting with the app. It is not directed to children and is not designed for a child to use on their own. There are no accounts or profiles, and we do not knowingly collect personal information from children. When you make a story, the only details about a child that reach us are whatever a grown-up types in — used to make the story and not kept. Please don't enter a child's full name, contact details, photo, or other identifying information into the story form. If you think a child has sent us personal information, let us know and we'll delete it.

Storage on your device

In the app, the storybooks you create are saved on your device — the words and pictures stay in the app on your iPhone or iPad (and in your own device backups, such as iCloud Backup, if you use them) and are never uploaded to us. When you export a book as a PDF, it's made on your device and goes only where you choose to save or send it. You can delete any saved book anytime from within the app, or by removing the app.

How long we keep things

Your stories themselves: never — we don't keep them to begin with. For everything else:

• Anonymous story records are kept for as long as they help us understand how Evie & Theo is used and what it costs to run. They aren't linked to you.
• Your device's free-story tally and its Attest key are kept so the free stories and the device check keep working.
• Feedback and messages you send us are kept for as long as they're useful for improving Evie & Theo or replying to you, and you can ask us to delete them anytime.
• Request counters hold only a hashed IP address, a count, and a time, and are used for nothing but limiting how often requests can be made.
• Like any online service, our hosting provider handles your IP address to deliver each request, and keeps short-lived technical logs — which can include a request's approximate location and the text of any feedback — that we use only to keep the service working and secure.

Your choices and rights

Depending on where you live (for example, under GDPR in the UK/EU or the CCPA in California), you may have rights to access, correct, or delete personal information, or to object to certain processing. To make a request — including deleting feedback you've shared — just get in touch. Because there are no accounts and most of what we keep isn't linked to you, we often can't tell which records are yours; if you tell us what you sent (say, the date and what your comment said), we'll do our best to find it.

Where your data is processed

Evie & Theo runs on a global hosting network, and the AI services that write and illustrate your story, like our other providers, may process data in the United States, so the details you submit may be handled in countries other than your own. We rely on these providers' safeguards for such transfers.

Security

The app connects securely (over HTTPS), and stories are never shared publicly. No method of transmission or storage is ever 100% secure, but we work to protect your information.

Changes to this policy

We may update this policy from time to time. When we do, we'll post the new version here and change the "Last updated" date at the top of this page. The version at evieandtheo.com/privacy is always the current one; the copy inside the app is refreshed with app updates.

Contact us

Evie & Theo is run by Tech Bebop LLC (techbebop.com). Questions about privacy, or want us to delete feedback or a message you sent? Please reach out through our contact page.