What we collect

Your name, phone, email. The rough age you give for your parent on the "Make their book" form, as a bracket, never an exact number. Your family elder's voice recordings and photos. Your delivery address when you order. If you browse this site or use our recording platform, we log basic visit data (which pages, what device), never the content of your recordings. If you subscribe with your email, we also keep a record of that moment of consent, itemised under "Your consent" below.

Each visit to this site is logged with the IP address, the page, the buttons pressed, the time, where the visit came from (Instagram, for example) and the browser, so we know which pages and which campaigns bring people here. Kept for up to three months. What you tap and type in the help panel at the bottom right is recorded too, with the IP, so we learn what people actually ask.

How we use it

Two different things, kept apart on purpose, because they are not on the same level and should never be treated as if they were.

The recordings, the photographs, and what your family said: only to make your book. Transcription, layout, printing, and the voice QR beside each quote. None of it is used for promotion, sold, or shared with a third party.

The email address you leave us: to write to you. New books, news from the studio, and a reminder before the days a book gets given, like Mother's Day, Father's Day or Lunar New Year. We do not sell your address, rent it, or hand it to anyone for advertising. To stop, reply to any email or message us on WhatsApp. One line is enough, and we won't ask why.

Your consent, and the record we keep of it

When you leave your email on this site, we store the following alongside it. Not to track you, but so that if anyone ever asks, yourself included, we can say exactly what you agreed to:

• The exact wording of the consent line that was on your screen when you pressed the button, and its version number
• The date and time, in UTC
• Which page you left it on, and whether you were reading the Cantonese or the English
• Your IP address, region and browser at that moment

This record exists to prove the thing happened. It is never used for advertising, never used for analytics, and never joined to anything else. When you ask us to delete your email, this record goes with it.

When we change the wording, old versions are kept untouched rather than rewritten. The version you saw is the version you agreed to, and editing today's sentence does not retroactively change what you were told.

If you never ask us to delete anything, the record lives exactly as long as the email address it belongs to, and not a day longer. We do not keep it as a separate archive after the address is gone.

Who else is involved

Making a book takes a handful of outside services. Rather than a directory of company names, here is the part that actually matters: what kind of company gets what.

• Payments. A card processor handles every payment. Your card number never passes through us. We do not see it and have never stored it.
• Hosting and storage. Providers who run our servers and hold the audio behind the QR codes. Recordings are stored in the Asia-Pacific region. The database holding your name, email address, phone number and delivery address is our own, running on a server we rent, and it never holds a recording.
• Advertising and analytics. Providers who count how many people read which page, and who let us show our ads to people who have been here. None of them touches a recording, and none of them runs at all unless you accepted on the cookie bar.
• Transcription. Most of the work runs on our own machines, and that audio never leaves them. One step goes to an outside speech model, run with retention switched off, so nothing of yours is kept and nothing can be trained on it. A person then edits the written draft into chapters.
• Printing. Our printer receives the final print file only. No original recordings, and none of your personal details.

If you want to know exactly which companies sit behind any of those, ask us and we will tell you. It is your right to know and we are not going to make you work for it. We would just rather answer the people who care than publish a map of our suppliers for everybody else.

Cookies and advertising

Since September 2026, the advertising tag and the click-recording tool do not run until you say yes to them. If you declined, or simply have not answered, neither has loaded. One thing runs regardless: a basic count of which pages are read, done on our servers rather than by a script in your browser. It sets a cookie that tells a returning visitor apart from a new one, and it holds no name, no email address, and nothing that identifies you to us.

You can change your mind whenever you like, and you do not need to clear anything to do it: bring the bar back and answer again.

If you accepted, two things run. An advertising tag, which lets us show our ads on social media to people who have been on this site, and tells us which ad actually led to an order. And a click-recording tool, which shows us where people click and scroll, so we can see where they get stuck. Both set cookies on your device. Neither holds your name or your email address, and neither ever touches a recording.

The advertising tag belongs to the social network we advertise on, which handles what it collects under its own privacy policy and may connect it to your account there. That is the trade, and it is the reason you get asked before it loads rather than after.

If you would rather not, decline on the bar and none of it loads. The site works exactly the same and nothing breaks. Blocking cookies in your browser or using a content blocker still works too, and so does limiting what a social network may do with data from other websites, in your ad settings there. Those are now belt and braces rather than your only option, which is the way round it should always have been.

One thing worth saying plainly: a cookie cannot tell us who you are. It tells us how many people read which page. From a cookie or an IP address alone we do not, and could not, obtain your email address. The only way we have your email is that you typed it in yourself.

Payment

All payments go through an outside card processor. What reaches us is which order was paid, never your card.

Who can see it

Only your family and the people making your book. Voice QR links use a random, unguessable ID and a short-lived signed token, and they are not indexed by search engines, so a stranger cannot find or scrape their voice.

How long we keep it, and deleting it whenever you want

After your book ships the recordings and files stay on our servers, because that is what keeps the QR codes working: your family scans a quote and hears the voice, for as long as there is a book to scan. It also means you can order reprints later, and none of this can ever be recorded again anyway. There is no expiry date on them, and there never will be. Nothing you give us quietly disappears after some number of years.

You can also download the original recordings whenever you want, free, without giving a reason. That copy is yours to keep, so your family holds its own and does not depend on us still being here.

Deletion only ever runs one way, from you to us. You can ask us to delete anything from our servers at any time. Message us on WhatsApp or by email and it is done within seven days, and we write back to confirm. If you want another copy of the original audio, just ask.

We will not delete your family's voice because you went quiet: not being able to reach you is not a decision you made. Even if you never order from us again, the recordings are still your family's.

If the elder passes away

We won't dodge this one. The recordings belong to your family, permanently, and the three choices are yours: hand them to a family member you name, leave them encrypted with us, or delete everything for good. Decide whenever you're ready. Until you do, we keep them safe.

AI model training

We do not use your family's recordings, text or photographs to train any AI model. We have never trained a model, and we do not use your material to improve one. The audio passes through a speech-to-text service to produce a written draft, and a person edits it into chapters from there. This isn't a technical detail for us, it's a line we don't cross.

Copyright, and promotional use

The text, the recordings and the photographs belong to your family, not to us. Without your written permission, not one line, one second of audio or one photograph appears in any promotion, on social media, on this website or in a portfolio.

The books we use for demonstrations are our own family, recorded by our own family, precisely so we never have to touch a client's material.

We don't treat other families' private lives as material. We won't do anything to yours that we wouldn't want done to our own.

Why we are allowed to hold this

Three different reasons, and they do not stand in for one another. Which one applies to what is the whole point of listing them.

• To make the thing you ordered. The recordings, the photographs, your name and your delivery address. We hold these because you asked us to make a book and there is no way to make it without them.
• Because you said yes, and you can unsay it. The email list, and the advertising cookies described above. Permission you gave, which you can take back at any time, without giving a reason.
• To keep the site standing up. Visit and server logs, kept for up to three months, so we can see what broke and stop people abusing the forms.

Your rights

• Ask us for a copy of your data and the original audio, anytime
• Ask us to delete it from our servers, anytime
• Opt out of any message from us, anytime, without giving a reason. We won't ask for one
• Ask us to send you your consent record, so you can see exactly what we wrote down
• Ask us to correct anything we hold that is wrong
• Ask us to pause what we do with your data while a question about it is still open
• Object to one particular use, and we stop it unless we can show you a reason that outweighs yours
• Complain about us without coming to us first, to the Hong Kong Privacy Commissioner for Personal Data, or to your own authority if you are reading this from Europe

How to reach us

For anything privacy related, including asking to see what we hold on you, to correct it, to delete it, or to get a copy of your consent record:

• Email: contact@m.kiorybooks.com
• WhatsApp: +852 5232 2321
• By post: Lapine Group Limited, Rm 27, 2/F, Winning Commercial Building, 46-48 Hillwood Road, Tsim Sha Tsui, Kowloon, Hong Kong

KIORY is a brand of Lapine Group Limited, the Hong Kong company named above, and that company is the one responsible for your data. Requests to see, correct or delete it are handled by our Data Privacy Officer, at that postal address.

Email if you want it in writing, WhatsApp if you want it answered sooner. Under the Hong Kong Personal Data (Privacy) Ordinance you have the right to request access to your data and to correct it. There is no particular form of words to use and nothing needs to sound official: tell us what you want, and we do it within seven days and write back to confirm.