A plain-language data map
Story content is family content, not marketing inventory.
Budding needs to process story ideas and media to make the book. The privacy boundary is designed around adult accounts, limited public measurement, parent controls, and permanent noindex treatment for shared books.
What enters the story-making system
A book may include typed prompts, voice recordings and transcripts, generated page and cover images, narration scripts and audio, helper requests, and sharing settings. Parent account and billing data live in adult-facing account systems.
Why providers process some content
Budding sends the minimum task-relevant content to configured AI services for illustration, transcription, Story Helper guidance, and narration. A provider refusal is not bypassed by silently moving the child-facing request to another provider.
Marketing Google Analytics is limited to public marketing and legal pages. It is not intended to run inside child creation, private account, admin, or public share-reader surfaces.
What parents can control
Authenticated parents can request a data export, make a privacy request, and use a two-step account and library deletion flow. A public share can be disabled separately. Storybook PDF and ZIP-style exports are assembled for the browser and are not stored as durable server-side exports by Budding.