KidzTale Privacy Policy

1. Introduction

Welcome to KidzTale. We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personalized children's storybook service. By using KidzTale you agree to the practices described below. If anything is unclear, you can contact our support team and we'll walk you through it.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Child's name for story personalization
• Photos uploaded for story illustrations
• Payment information (processed securely through Stripe)
• Story preferences and customization choices

3. How We Use Your Information

We use the information we collect to:

• Create personalized storybooks for your child
• Process payments and deliver digital products
• Send order confirmations and updates
• Improve our services and develop new features
• Respond to your inquiries and provide customer support

4. Photo Privacy

We take special care with photos of children. Photos you upload are:

• Used solely for generating the illustrations in your storybook
• Processed in memory using secure AI technology
• Discarded automatically once the book is generated — we do not retain the original photo
• Never used to train AI models
• Never shared with third parties for marketing or any other purpose

The generated storybook illustrations are yours to keep, download, and print. See our photo personalization page for more details on how photo-based books work, and our about page for more on how we approach AI-generated content responsibly.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS) and at rest, access controls and least-privilege permissions for our team, secure credential storage, and regular review of our security posture. No system is perfectly secure, but we work to make sure your data is protected by current industry-standard practices.

6. Children's Privacy (COPPA)

KidzTale is designed for parents and guardians to create stories for their children. We do not knowingly collect personal information directly from children under 13, in line with the FTC's Children's Online Privacy Protection (COPPA) guidance. All account creation and purchases must be made by a parent or guardian who is at least 18 years old. Children's names and likenesses are provided by the parent strictly for the purpose of generating that family's storybook, and are not used for any marketing, profiling, or model-training purpose. If you believe a child has provided personal information to us without parental consent, email privacy@kidztale.com and we will remove that information.

7. GDPR & CCPA Rights

If you reside in the European Economic Area, the United Kingdom, California, or another jurisdiction with comparable privacy law, you have specific rights regarding your personal data under the EU General Data Protection Regulation (GDPR) and equivalent statutes. KidzTale honors these rights regardless of where you live. To exercise any of the rights below, email privacy@kidztale.com from the address tied to your account; we respond within 30 days.

Right to Access

You can request a copy of the personal data we hold about you, including account details, generated storybook metadata, and any communications we've had. We will provide this in a portable, human-readable format (typically JSON or PDF) within 30 days of a verified request.

Right to Deletion

You can request that we delete your account and associated personal data at any time. Once verified, we delete the account, generated storybooks, and personal data within 30 days. Certain records (notably billing and tax records) are retained for the legally required period but are walled off from any other use.

Right to Portability

You can request a machine-readable export of your data and have it transmitted to another service where technically feasible. For most users this is a JSON bundle of account data plus PDF copies of generated storybooks.

California residents also have the right to know what personal information we collect, the right to opt out of any “sale” or “sharing” of personal information (we don't sell personal information), and the right not to be discriminated against for exercising these rights. EEA/UK residents have the right to lodge a complaint with their local supervisory authority.

8. Data Retention Periods

We retain personal data only for as long as we need it to provide the service or to meet legal obligations. Concrete retention windows:

• Original photos: discarded automatically after illustration generation, typically within 5 minutes of upload.
• Generated storybooks: retained while your account is active and for up to 30 days after account closure, then deleted.
• Order and billing data: retained for 7 years to comply with US tax and accounting law.
• Email communications: retained while your account is active or up to 3 years after our last contact, whichever is longer.
• Anonymized usage data: retained indefinitely for analytics and product improvement; contains no personally identifiable information.

9. Subprocessors

KidzTale relies on a small number of third-party services to operate the platform. We use vetted third parties for AI image generation, payment processing (Stripe), email delivery, and cloud hosting. Each subprocessor is bound by a written data-processing agreement that prohibits using your data for their own purposes (including model training). A current list of named subprocessors is available on request from privacy@kidztale.com. We'll publish the list publicly once our subprocessor count or enterprise customer base warrants it.

10. Cookies

We use cookies and similar technologies to enhance your experience, keep you signed in, analyze aggregate usage, and assist in marketing measurement. You can control cookie preferences through your browser settings. Disabling certain cookies may affect functionality such as staying signed in across visits.

11. Third-Party Services

We use trusted third-party services for payment processing (Stripe), authentication, AI image generation, and analytics. These services have their own privacy policies governing the use of your information. Stripe handles all card data; KidzTale does not see or store credit-card numbers. For questions about refunds or billing, please reach out to support directly.

12. International Transfers

KidzTale is operated from the United States. If you access KidzTale from outside the US, your information will be transferred to and processed in the United States. We rely on Standard Contractual Clauses or equivalent mechanisms where required for transfers from the EEA, UK, and Switzerland.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have any concern about our data practices, please contact us at:

Email: privacy@kidztale.com

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. For significant changes that affect how we use your data, we will also email account holders at least 14 days before the change takes effect.

Frequently Asked Questions