Privacy Policy
Last updated: 2026-09-27
At Meapica, the privacy of our users — especially when it comes to children's data — is our top priority.
1. Data controller
The data controller for personal data collected through meapica.shop is Xavier Huix Trenco (Meapica), tax ID 41649433K, address Carrer Aribau 140, 5º, 08036 Barcelona (Spain). For any privacy question, write to admin@casmar.tech.
2. Data we collect
We collect the data needed to create your personalised book: the child's name, age, city, interests and physical features for the illustrations and, only if you choose to upload one, a photo of the child (see section 8). We also collect your email and shipping address to process orders.
3. Purpose of processing
We use your data only to: create the personalised story and its illustrated character, process payment and shipping, and contact you about your order. We never sell data to third parties.
4. Legal basis
Creating, previewing and printing your book, managing your account, payment and shipping: performance of the contract you request (Art. 6(1)(b) GDPR). The child's photo: explicit consent of the child's parent or legal guardian (Art. 6(1)(a) GDPR and Art. 7 of Spain's LOPDGDD), which you can withdraw at any time. Newsletter and waitlist: your consent (Art. 6(1)(a) GDPR), which you can withdraw whenever you like. Keeping invoices and accounting records: legal obligation (Art. 6(1)(c) GDPR). Service security and abuse prevention (for example, usage limits): legitimate interest (Art. 6(1)(f) GDPR). Measuring our ads with Meta (advertising cookies and purchase event): your consent (Art. 6(1)(a) GDPR), which you can withdraw from "Cookie settings".
5. Processors and international transfers
To provide the service we work with providers that process data only on our instructions: OpenAI Ireland Ltd. (generating the story text and illustrations and, if you upload one, the character from the photo), Supabase (database and storage), Vercel (web hosting), Stripe Payments Europe Ltd. (payments), Gelato (printing and shipping) Resend (order emails) and, only if you accept advertising cookies, Meta Platforms Ireland Ltd. (measuring our ads). OpenAI does not use the data we send it to train its models and may keep it for up to 30 days to detect abuse. When a provider or its sub-processors process data outside the European Economic Area (for example, in the United States), the transfer relies on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to admin@casmar.tech. We will reply within one month at the latest. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
7. Children's data protection
We do not collect data directly from children. The child's data is provided by the parent or legal guardian who creates the book.
8. Photos of children
Uploading a photo is optional: you can also create the character by choosing their features. If you upload one, we use it only to create the child's illustrated character (their portrait and character sheet), and only with the consent of the child's parent or legal guardian. Before storing it we remove all its metadata, including GPS location, and keep it in private storage that only our server can access. The photo is sent to OpenAI to draw the character; OpenAI does not use it to train its models and may keep it for up to 30 days to detect abuse. We delete the photo as soon as the character is created, and in any case within 24 hours. The book (preview and final version) is illustrated only from the drawn character, never from the photo. We do not use it for facial recognition or for any other purpose. You can withdraw your consent at any time by writing to admin@casmar.tech and we will delete it immediately. We keep a record of your consent (date, version of the accepted text and language) as proof that you gave it.