Is It Safe to Upload My Child's Photo for a Personalized Book?

The pause is always the same.

You’ve found the personalized book you want to make. You’ve entered the child’s name, chosen the adventure, felt the small thrill of imagining their face when they see it. And then the interface asks for a photo, and something in you hesitates.

This is not irrational. This is a parent’s instinct doing exactly what it should: slowing down at the moment when your child’s face is about to leave your phone and enter someone else’s system. The question is not whether you should hesitate. The question is what should satisfy that hesitation.

What You’re Actually Asking

When a parent asks “is it safe to upload my child’s photo?” they are really asking several questions at once:

Where does the photo go? Does it sit on a server somewhere? For how long? Who can access it?

What is it used for? Is it only used to make the book, or does it become training data, marketing material, or something else entirely?

What happens after? Once the book is printed, is the photo deleted? Or does it persist indefinitely in a database you can’t see?

Who is on the other end? Is this a company that has thought about these questions, or one that hasn’t?

These are reasonable questions. Any company that makes you feel unreasonable for asking them is telling you something about how they handle the answers.

What Should Happen to Your Photo

Here is what a trustworthy process looks like. Not every company does all of these things, but these are the standards worth expecting:

Encrypted transfer. The photo should travel from your device to the server over HTTPS — the same encryption your bank uses. This is table stakes in 2026. If a site doesn’t have the padlock icon in the address bar, close the tab.

Purpose limitation. The photo should be used to create the book and nothing else. Not to train AI models. Not to appear in advertising. Not to be shared with third parties for any reason. The privacy policy should state this explicitly, in language you can understand without a law degree.

Retention limits. After the book is produced, the photo should be deleted — or at minimum, you should have the ability to request deletion. A company that keeps your child’s photo indefinitely “just in case” is a company that hasn’t thought carefully about what they’re holding.

No human browsing. The photo should move through the production pipeline without being visible to employees who don’t need to see it. Automated processing is the standard for modern personalized books — the photo goes in, the illustration comes out, and no one sits in between scrolling through a gallery of children’s faces.

GDPR and COPPA compliance. If you’re in Europe, the company must comply with GDPR, which gives you the right to access, correct, and delete your data. In the US, COPPA provides specific protections for children’s information. A company that serves parents globally should comply with both, regardless of where their servers are.

What Libronauts Does

We built the photo upload process with a specific assumption: the parent uploading the photo is trusting us with something more valuable than money.

Your child’s photo is uploaded over encrypted connection, used to generate the illustrated version of your child for the book, and that is the boundary of what we do with it. It does not become training data. It does not appear in marketing. It is not shared with anyone.

The illustration process transforms the photo into a storybook character — your child rendered in the style of the book’s artwork. The result looks like an illustration, not a photograph. This is a deliberate choice: the book should feel like a story your child lives inside, not a photo album with text around it.

We process photos in compliance with GDPR and treat every upload as children’s data, which means the highest standard of care regardless of where you are.

Questions Worth Asking Any Company

If you’re evaluating a personalized book company — ours or anyone else’s — here are the questions that separate the careful operators from the careless ones:

1. Does the privacy policy specifically mention children’s photos? A generic privacy policy that covers “user data” without addressing the specific sensitivity of children’s images is a red flag.

2. Can you delete your data? If there is no mechanism to request deletion of your child’s photo, the company is treating your data as their asset.

3. Is the photo used for AI training? Some companies use uploaded photos to improve their AI models. This should be disclosed clearly and should require explicit opt-in, not opt-out buried in terms of service.

4. Where are the servers? Data stored in the EU is subject to GDPR. Data stored in the US has different protections. This matters.

5. What happens if the company is sold or shut down? Your child’s photo should not become an asset in an acquisition. The privacy policy should address data handling in the event of a business transfer.

If a company cannot answer these questions clearly, they have not earned the upload.

The Hesitation Is the Point

Here is the thing about that pause you feel before uploading the photo: it is not an obstacle to overcome. It is a signal to respect.

A company that makes personalized children’s books should understand that the photo upload is the moment of highest trust in the entire transaction. More than payment. More than entering an address. The photo is the child, and the parent is handing it over.

The right response to that trust is not to minimize it (“don’t worry, it’s totally safe!”) but to honor it with transparency, clear policies, and a process that treats the photo with the gravity it deserves.

Your instinct to hesitate is good parenting. A company’s response to that hesitation tells you everything about whether they deserve what you’re about to give them.

Upload the photo when you are satisfied. Not before.

---

For more on how Libronauts handles the creation process: how personalized books are made walks through the full journey from photo to printed book. And why personalized stories sometimes feel distant explains why the quality of personalization — not just the presence of a photo — determines whether the book connects.