Sub-processors
Last updated: October 17, 2026
ToonyStory is operated by Modlific LLC from the United States. This page lists every third party that receives personal data when you use ToonyStory, what it is used for, what it receives, and where it is processed. Our Privacy Policy explains your rights and how long we keep data.
- We do not sell personal data, to these providers or anyone else.
- No training on your content. We never use your photos, characters or books to train AI models, and content sent through the Google Gemini API is not used by Google to train its models under the API terms we operate on.
- Our database, file storage and servers are in the United States. Transfers from other countries rely on the safeguards described in the Privacy Policy.
- Changes. We update this page before a new provider starts receiving personal data, and we tell our retail and reseller partners about any change to the list.
Providers that process data for us
These providers run parts of the service and process personal data only on our instructions.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Neon | Primary database (Postgres) | Account details, characters, stories, orders, shipping addresses, partner order records | United States (AWS us-east-1) |
| Vercel | Website and app hosting, server functions, file storage | All requests to the service (including IP address), uploaded photos, generated images, book PDFs | United States |
| Google (Gemini API) | AI story text and illustration generation | Prompts, story details, character descriptions, uploaded reference photos | United States and other countries where Google operates |
| Runway | Story video clips and narration, only when you create a video | Generated illustrations, motion prompts, page text for narration | United States |
| Twilio SendGrid | Transactional and service email, unsubscribe handling | Name, email address, email content (order and book updates) | United States |
| Stripe | Payments, subscriptions, billing | Name, email address, payment details (sent directly to Stripe), billing address | United States |
| Lulu Direct | Printing and shipping books | Recipient name, shipping address, phone number, book print files | United States; books are printed at the facility nearest the delivery address |
| Printful | Printing and shipping merchandise | Recipient name, shipping address, phone number, print images | United States; items are made at the facility nearest the delivery address |
| Cloudflare (Turnstile) | Bot and abuse protection at sign-up | IP address, browser signals collected by the challenge | Global network |
| Apple (Push Notification service) | Notifications in the iOS app, if you allow them | Device token, notification text | United States |
| Google (Firebase Cloud Messaging) | Notifications in the Android app, if you allow them | Device token, notification text | United States |
| Zoho Mail | Support inbox | Anything you send us by email, including attachments | United States |
Sign-in, app stores and services you choose to use
Data goes to these services only when you use the feature that needs them.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Google Sign-In | Optional sign-in with a Google account | Name, email address, profile picture (received from Google) | United States |
| Sign in with Apple | Optional sign-in with an Apple ID | Apple user ID, email address or Apple relay address, name (received from Apple) | United States |
| Apple App Store and Google Play | In-app purchases in the mobile apps | Purchase and subscription records; payment is handled by Apple or Google | United States |
| Gravatar (Automattic) | Profile picture in the app header and account pages | A hash of your email address, requested by your browser | United States |
| Facebook, Instagram, Threads, LinkedIn, TikTok | Publishing a book to a social account you connect | The book images or video and caption you choose to post, account access tokens | United States |
| Etsy | Orders placed in the ToonyStory Etsy shop | Buyer name, email address, shipping address and order details (received from Etsy); tracking numbers (sent to Etsy) | United States |
| Google Fonts | Web fonts | IP address and browser details, requested by your browser | United States and other countries where Google operates |
Analytics and advertising (only with cookie consent)
These load on our website only after you accept cookies, never in the iOS or Android app, and never on a partner’s pages (a partner’s own tags may load there, under the partner’s privacy policy).
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Google Analytics | Website usage measurement | Pages viewed, device and browser details, IP address, purchase events | United States |
| Google Ads | Measuring advertising conversions | Conversion events, hashed (SHA-256) email address | United States |
| Meta (Pixel and Conversions API) | Measuring advertising on Facebook and Instagram | Page views, sign-ups, purchases, hashed (SHA-256) email, name and user ID, IP address, browser details | United States |
| ClickRank | SEO tooling on public pages | Page URL, IP address and browser details | United States |
Books made through a partner
When a retailer or reseller gives its customers a code for a ToonyStorybook, we process what the customer enters on the partner's behalf, using the providers above. The partner stays responsible for its own customer records. Customer data from partner books is deleted when the partner's retention period ends, by default 365 days after delivery.
Contact
Questions about this list, or a request for our data processing terms: privacy@toonystory.com.