Hugs & Smiles - A Fun way to learn and grow!

1. Who We Are

Hugs & Smiles(the “Service,” “we,” “us,” or “our”) is operated by EngenuityAI. We provide an AI-powered platform — available as a website and as mobile apps on the Apple App Store and Google Play — that helps parents and guardians create personalized storybooks for their children and offers supportive behavioral guidance for families.

This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. By using the Service, you agree to the practices described here.

2. Who the Service Is For

The Service is designed for and directed to adults (18 years or older)— parents, guardians, and caregivers. It is not directed to children, and we do not knowingly allow children to create accounts or use the Service directly.

While the books we create star your children, the information about a child is provided by you, the responsible adult. By providing a child’s information, you confirm that you are that child’s parent or legal guardian (or have that person’s permission) and consent to our processing of that information as described in this policy. If you believe a child has provided us information without parental consent, please contact us and we will delete it.

3. Information We Collect

Account information: your name and email address, and authentication details when you sign up or sign in (including via Apple or Google sign-in).
Child & family information:details you choose to share to personalize a book or guidance — such as a child’s first name, age, interests, family context, and limited demographic information.
Photos and images: the pictures you upload so we can generate personalized characters and illustrations.
Order, shipping & payment information: when you purchase a printed book, the shipping address and contact details needed to fulfill and deliver your order. Payments are processed by our payment provider; we do not store full card numbers.
Usage & device data:information about how you use the Service — device and browser type, app version, pages viewed, links and buttons clicked, how far you scroll, the site that referred you, approximate location derived from your IP address, and diagnostic logs — used to keep the Service secure and improve it. On our website this includes session recordings and heatmaps, as described in section 6.
Marketing & referral data: when you arrive from an ad or a campaign link, we store the campaign identifiers in that link (such as UTM tags and Google or Meta click identifiers) in your browser so we can tell which campaigns lead people to sign up.

4. How We Use Your Information

To create and deliver your personalized stories and books.
To print, fulfill, and ship physical book orders.
To provide supportive, general behavioral guidance you request (see our Terms of Service for important limits on this).
To operate, secure, troubleshoot, and improve the Service.
To communicate with you about your account, orders, and support requests.
To understand how people find and use the Service, and to measure whether our advertising works, as described in section 6.
To comply with legal obligations.

5. How We Use Your Photos

Photos you upload are used exclusively to generate the personalized characters and illustrations in your stories. We do not sell your photos, use them for advertising, or use them to train our own general-purpose AI models. Images are processed through the secure third-party AI services described below solely to fulfill your request.

6. Cookies, Analytics & Advertising

On our website, we and our providers use cookies and similar browser storage to keep you signed in, remember your preferences, understand how the site is used, and measure our advertising. We use:

Microsoft Clarity— product analytics and session recordings and heatmaps. Clarity reconstructs a playback of your visit from the structure of the page, including the pages you view, your mouse movement, scrolling, and clicks. Any photo you upload and the text you type into form fields are masked in the browser and are never sent to Clarity. We use these recordings only to find confusing or broken parts of the site.
Amplitude— product analytics. It records events such as pages viewed, sign-ups, and purchases. Signed-in activity is associated with your account identifier so we can understand a journey across visits; we do not send your child’s information or your uploaded photos to Amplitude.
Google Tag Manager and Google Ads conversion tracking — used to load the tools above and to measure which ads lead to sign-ups and purchases. This may involve Google setting cookies in your browser and receiving a signal that a conversion happened.

We do notuse these tools to show you personalized ads based on your child’s information, and we do not sell the data they collect. Our mobile app does not include any of these analytics or advertising tools.

You can block or delete cookies in your browser settings, use your browser’s Do Not Track or tracking-prevention features, or opt out of Clarity and Amplitude by using a browser that blocks their scripts. Doing so does not affect your ability to use the Service. You can also email us to ask that we exclude your activity from analytics.

7. How We Share Information

We do not sell your personal information, and we do not share it with anyone outside EngenuityAI for purposes unrelated to providing the Service. We share information only with trusted service providers who process it on our behalf and under contractual confidentiality and security obligations:

Cloud hosting & database (e.g., Supabase and Google Cloud Platform) to securely store your account, content, and orders.
AI / large language model providers to generate the text and images in your stories and to power guidance features.
Print & shipping partners to manufacture and deliver your physical books.
Payment processors to handle purchases securely.
Analytics and advertising-measurement providers (Microsoft Clarity, Amplitude, and Google) to help us understand website usage and measure our ads, as described in section 6. They receive usage data only — never your uploaded photos, and never your child’s profile information.

We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer (e.g., merger or acquisition), in which case this policy will continue to govern your information.

8. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service, fulfill orders, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

Analytics and session-recording data are held by the providers named in section 6 under their own retention schedules, which are shorter than the life of your account.

9. Your Rights & Choices

You can access, update, or delete your information at any time. In particular:

Delete your account and data:you can request deletion from within the app or by emailing us — see how to delete your account. Your account is locked immediately and permanently erased after a 14-day grace period, during which you can cancel the request. Deletion removes your account, every child profile and all information you provided about your children, uploaded photos, generated characters and stories, journeys, and logged notes. If you made a purchase, we retain the transaction record only as tax and accounting law requires, after stripping your name, email, address, and other contact details and detaching it from your account. Routine encrypted backups may hold residual copies until they age out normally.
Access & correction: you can ask for a copy of your information or request corrections.
Withdraw consent: you can stop using the Service and remove uploaded content at any time.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any right, contact us at the email below.

10. Data Security

We use industry-standard safeguards — including encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No method of transmission or storage is 100% secure, but we work hard to protect your data and to promptly address any issues.

11. International Data Transfers

We operate internationally and may process and store information in the United States, India, and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

13. Contact Us

Questions about your privacy or this policy? Reach our team at hello@hugsnsmiles.co. Hugs & Smiles is operated by EngenuityAI.