Privacy Policy
Last updated: January 1, 2025: 2025-01-15
Privacy Policy
Last updated: 2025-01-15
1. Introduction
This Privacy Policy describes how we collect, use, and share your personal information when you use our platform. We are committed to protecting your privacy and handling your data responsibly.
2. Information We Collect
Information you provide:
- Account information (name, email, password)
- Organization details
- Payment information (processed by Stripe)
- Content you create or upload
Information collected automatically:
- Usage data and analytics
- Device and browser information
- IP addresses and location data
- Cookies and similar technologies
3. How We Use Your Information
We use your information to:
- Provide and maintain the service
- Process payments and manage subscriptions
- Send important notifications and updates
- Improve the service and develop new features
- Protect against fraud and abuse
- Comply with legal obligations
4. Data Sharing
We do not sell your personal information. We may share data with:
- Service providers — Hosting, payment processing, email delivery
- Legal requirements — When required by law or to protect our rights
- Business transfers — In connection with a merger or acquisition
5. Data Security
We implement industry-standard security measures including:
- Encryption at rest and in transit (TLS 1.3)
- Row-level security for multi-tenant data isolation
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
6. Data Retention
We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data in standard formats
- Opt out of marketing communications
8. Cookies
We use essential cookies to maintain your session and preferences. Analytics cookies help us understand usage patterns. You can manage cookie preferences through your browser settings.
9. International Transfers
Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for international data transfers.
10. Children's Privacy
Our service is not intended for children under 18. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or in-app notification.
12. Contact Us
For privacy questions or concerns, contact our Data Protection Officer at privacy@example.com.
Retention and deletion
What this service keeps, for how long, and how it is deleted. This part is generated from the privacy rules in force, so it always matches what the service does.
- Drawings
- A drawing — made on the canvas or uploaded as a photo of a drawing — is deleted 24 hours after the character it became is created. A drawing that never becomes a character is deleted after 30 days.
- Photos in photo mode
- A photo used to make a character is deleted before the character is shown to you, and never later than 15 minutes after it was uploaded. No face data is ever stored.
- What is held about a child
- Only what you enter for their profile — a first name or nickname, an age range and reading level, the story language, and the interests, reading, sensory and supervision choices you set — plus the stories, characters and saved words made for them. A child never has an email address, a password or an account of their own.
- Share links
- Share links are off until you turn them on, and each one expires after 30 days.
- Deleting your data
- When you ask for the account or a child’s profile to be deleted, the deletion is completed within 30 days. Requests are made from Settings → Privacy.
Generated from privacy profile version 1, in force since September 26, 2026.