KidzTale Privacy Policy

1. Introduction

Welcome to KidzTale. We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personalized children's storybook service. By using KidzTale you agree to the practices described below. If anything is unclear, you can contact our support team and we'll walk you through it.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Child's name and age for story personalization
• Photos uploaded for story illustrations
• Voice recordings you provide for voice-clone narration (see Section 4a)
• Payment information (processed securely through Stripe on the web and through Apple/Google in-app purchase via RevenueCat on mobile)
• Story preferences and customization choices

3. How We Use Your Information

We use the information we collect to:

• Create personalized storybooks for your child
• Process payments and deliver digital products
• Send order confirmations and updates
• Improve our services and develop new features
• Respond to your inquiries and provide customer support

4. Photo Privacy

We take special care with photos of children. Photos you upload are:

• Uploaded to fal.ai storage and sent to AI services to generate personalized illustrations
• Referenced by URLs saved with generation jobs, storybooks, and any child profiles you save
• Retained beyond generation for display and reuse; processing is not limited to memory
• Not used by KidzTale to run model-training or fine-tuning jobs
• Not sold by KidzTale or provided by KidzTale to advertisers

Provider-hosted media links can be accessible to anyone who has the link; they are not the same as files protected by your KidzTale sign-in. Only upload photos you are authorized to provide, and avoid sharing original-photo links. Provider retention and deletion are explained in Sections 7 and 8.

The generated storybook illustrations are yours to keep, download, and print. See our photo personalization page for more details on how photo-based books work, and our about page for more on how we approach AI-generated content responsibly.

4a. Voice Recording Privacy

KidzTale offers an optional voice-clone feature that lets parents record a short voice sample so stories can be narrated in their own voice. Voice recordings you provide are:

• Used solely to create a voice profile for narrating your family's storybooks
• Uploaded to fal.ai storage and processed through voice-cloning and narration services, including MiniMax models accessed through fal.ai
• Linked to your account through a saved sample URL and, when created, a provider voice identifier
• Not sold by KidzTale or provided by KidzTale to advertisers
• Removed from your saved voice list when you delete a voice or your account; provider-hosted samples and cloned voices are not automatically erased by that action

Microphone access is requested only when you choose to record a voice sample. We do not access the microphone at any other time or for any other purpose.

4b. In-App Purchases

Purchases made through the KidzTale mobile app are processed by Apple (App Store) or Google (Google Play) via RevenueCat, our purchase management partner. KidzTale does not receive or store your credit card number, bank details, or other financial credentials from in-app purchases. We receive only a transaction receipt confirming your purchase, which we use to credit your account. Refunds for in-app purchases are handled through Apple or Google per their respective refund policies.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS) and at rest, access controls and least-privilege permissions for our team, secure credential storage, and regular review of our security posture. No system is perfectly secure, but we work to make sure your data is protected by current industry-standard practices.

6. Children's Privacy (COPPA)

KidzTale is designed for parents and guardians to create stories for their children. We do not knowingly collect personal information directly from children under 13, in line with the FTC's Children's Online Privacy Protection (COPPA) guidance. All account creation and purchases must be made by a parent or guardian who is at least 18 years old. Children's names and likenesses are provided by the parent strictly for the purpose of generating that family's storybook and any child profile the parent saves. KidzTale does not use them for advertising or run model-training jobs on them. Service-provider processing is described in Section 9. If you believe a child has provided personal information to us without parental consent, email privacy@kidztale.com and we will remove that information.

7. GDPR & CCPA Rights

If you reside in the European Economic Area, the United Kingdom, California, or another jurisdiction with comparable privacy law, you have specific rights regarding your personal data under the EU General Data Protection Regulation (GDPR) and equivalent statutes. KidzTale honors these rights regardless of where you live. To exercise any of the rights below, email privacy@kidztale.com from the address tied to your account; we respond within 30 days.

Right to Access

You can request a copy of the personal data we hold about you, including account details, generated storybook metadata, and any communications we've had. We will provide this in a portable, human-readable format (typically JSON or PDF) within 30 days of a verified request.

Request Account or Data Deletion

To request deletion of your KidzTale account without using the app, email privacy@kidztale.com from your account email address. Tell us whether you want the whole account deleted or only specific photos, stories, or voice data. Do not send your password or reattach a child's photo. We may ask for information needed to verify ownership and identify the records.

You can request that we delete your account and associated personal data at any time. Once verified, we handle your request in accordance with applicable law. In-app account deletion removes your account and linked database records, including stories, generation jobs, child profiles, and saved voice records. It does not automatically delete original photos, voice samples, generated files, or cloned voices held by providers. Email privacy@kidztale.com to request deletion of those copies; we will explain the provider process, any verification needed, and any retention limits. We do not promise that deleting a database record immediately removes a hosted file. Records required for legal, billing, or security purposes may be retained as required by applicable law.

Right to Portability

You can request a machine-readable export of your data and have it transmitted to another service where technically feasible. For most users this is a JSON bundle of account data plus PDF copies of generated storybooks.

California residents also have the right to know what personal information we collect, the right to opt out of any “sale” or “sharing” of personal information (we don't sell personal information), and the right not to be discriminated against for exercising these rights. EEA/UK residents have the right to lodge a complaint with their local supervisory authority.

8. Data Retention Periods

We retain personal data only for as long as we need it to provide the service or to meet legal obligations. Different records and hosted files have different lifecycles:

• Original photos and voice samples: uploaded to provider storage. KidzTale does not set a fixed expiration period or automatically delete these uploads after generation. Files may remain available until removed or expired by the provider. Deleting a story, profile, voice record, or account does not itself delete the hosted file. Contact us for deletion requests.
• Account, story, child-profile, and voice records: retained to provide your library and saved features. Account deletion removes linked database records. Provider-hosted generated images, audio, video, and voice profiles have separate retention and deletion processes.
• Order and billing data: payment providers retain transaction records under their policies and applicable tax, accounting, and fraud-prevention requirements.
• Email communications: retained as needed to respond to requests, provide support, and meet applicable legal obligations.
• Anonymized usage data: retained indefinitely for analytics and product improvement; contains no personally identifiable information.

9. Subprocessors

We use service providers to operate KidzTale. They receive information needed for the requested feature. These include fal.ai for photo and audio uploads, illustration generation, narration, and video; OpenRouter and its model providers for story text; Stripe for web payments; and RevenueCat with Apple or Google for mobile purchases. We also use hosting, database, and email providers for accounts, story records, and service communications.

Story-generation prompts can include the child's name, age, preferences, and the story description you enter. Voice features send your sample and narration text to the relevant provider. These transfers are part of providing the service, not memory-only processing. fal.ai describes its handling in its data-retention documentation and API services terms. Those terms include restrictions on training use with exceptions for designated models; we do not claim a separate blanket no-training or no-retention agreement. Contact privacy@kidztale.com for questions about the providers used for your content.

10. Cookies

We use cookies and similar technologies to enhance your experience, keep you signed in, analyze aggregate usage, and assist in marketing measurement. You can control cookie preferences through your browser settings. Disabling certain cookies may affect functionality such as staying signed in across visits.

11. Third-Party Services

We use trusted third-party services for payment processing (Stripe), authentication, AI image generation, and analytics. These services have their own privacy policies governing the use of your information. Stripe handles all card data; KidzTale does not see or store credit-card numbers. For questions about refunds or billing, please reach out to support directly.

12. International Transfers

KidzTale uses cloud and AI providers that may process information outside your country, including in the United States. Processing locations depend on the provider and model used. Contact privacy@kidztale.com for information about the providers and transfer safeguards applicable to your data.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have any concern about our data practices, please contact us at:

Email: privacy@kidztale.com

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. For significant changes that affect how we use your data, we will also email account holders at least 14 days before the change takes effect.

Frequently Asked Questions