Draft, updated 20 Oct 2026. Built from the Australian Privacy Act, GDPR, and our print/AI partners’ published terms. Not a substitute for a lawyer’s review before Tripleaf takes paying customers.

Privacy Policy

Last updated: 20 Oct 2026.

1. Who this policy covers

Tripleaf (registered business name), operated by a sole trader, ABN 33 115 682 693. Public email: contact@tripleaf.app Not GST-registered.

This policy explains what personal information we collect when you use this site to create and order a photo book, why we collect it, who we share it with, and what rights you have.

We follow the Australian Privacy Principles voluntarily. If you are in the EEA or UK, GDPR / UK GDPR also applies because we offer goods there.

2. What we collect

• Your photos — everything you upload to build a book.
• Book content you create — layout, captions, titles, cover choices, edits.
• Account and order information — name, email, shipping address, order history. Card numbers are handled by Stripe, not stored by Tripleaf.
• Support messages you send us.

We only collect what we need to build, produce, and ship your book, and to run the business.

3. How we use it, and who we share it with

AI photo curation. Small copies of your photos may be sent to Anthropic (Claude) to pick shots and group them by day and place. Anthropic’s commercial API does not use that data to train models by default, and deletes it from their backend within 30 days unless a request is flagged for safety review (then up to 2 years). Anthropic is in the United States.

Print production. After you order, the laid-out book file — not your raw library — is sent to Prodigi to print and ship. Prodigi has print facilities in Australia, the UK, the US and Germany. Some formats for Australian delivery are printed overseas.

Payment. Stripe processes cards. Tripleaf does not store full card numbers.

Database and sign-in. Supabase (Sydney, Australia) holds the database and sign-in, plus photo copies for older books.

Photo storage. Photos for newer books are stored in Cloudflare R2 (Asia-Pacific).

Hosting. Render hosts the site in Singapore. The working copy of a book stays there while it is being made.

DNS. Cloudflare provides DNS for the site and the country hint on a visit.

Email. Resend sends order and account emails. Google Workspace holds the support inbox.

We do not sell your personal information. We do not share photos except with the providers above who need them to build, host, or print the book.

4. Legal basis (EU/UK)

Contract (creating and delivering the book you asked for), consent (anything extra, such as marketing), and legitimate interests (security and fraud prevention).

5. Sending data overseas

Photos and order data may be processed in the United States (Anthropic), Singapore (Render), Cloudflare R2 (Asia-Pacific, for newer books), and Prodigi’s print facilities in Australia, the UK, the US and Germany. Stripe processes payment. Supabase (Sydney, Australia) holds the database and sign-in, plus photo copies for older books. Cloudflare also provides DNS and a country hint on each visit. Resend sends order and account emails. Google Workspace holds the support inbox. We rely on those companies’ contractual privacy terms. EU/UK transfers use standard contractual clauses or an adequacy decision where those partners provide them.

6. Your rights

In Australia you can ask what we hold and ask us to correct it. In the EU/UK you also have access, rectification, erasure, portability, objection, and the right to complain to a local authority. Email contact@tripleaf.app — we aim to reply within 30 days.

See the data retention policy for how deletion works with photos already in production.

7. Children

This is a general-audience service. We do not knowingly collect information from children. Contact us if you think a child has uploaded photos and we will delete them.

8. Security

We take reasonable steps to protect photos and personal information (encrypted storage and transmission, access controls). No online service is perfectly secure. We do not keep your original library longer than we need — see data retention.

9. Cookies and analytics

We use a signed cookie so this browser can keep you signed in and remember an in-progress book. That cookie lasts 30 days and is refreshed when you visit. We have not added marketing analytics yet. If we do, this section will be updated.

10. Changes

We may update this policy as Tripleaf grows. We will change the date above and flag material changes on the site.

11. Contact

Email contact@tripleaf.app. Australian customers can also contact the OAIC at oaic.gov.au if a concern is unresolved.