Privacy Policy

Welcome to Tale Tailor, an AI-powered children's story creation application ("App," "Service," or "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, web application, and related services provided by Polynoes ("Company," "we," "us," or "our").

Please read this Privacy Policy carefully. By using Tale Tailor, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.

1. Information We Collect

1.1 Personal Information

When you create an account with Tale Tailor, we collect the following personal information:

• Account Information: Name, email address, and profile picture (when using Google Sign-In)
• Authentication Data: Google account information for secure login
• Language Preferences: Your preferred language for the app interface
• Usage Statistics: Content creation counts and app usage patterns

1.2 User-Generated Content

We collect all content you create within Tale Tailor, including:

• Story Worlds: Descriptions, settings, themes, and world attributes
• Characters: Character descriptions, names, and personality traits
• Stories: Story titles, plots, and narrative content
• Story Entries: Individual chapters, scenes, and story continuations
• Images: AI-generated images and any uploaded images
• Audio Content: Text-to-speech audio and any uploaded audio files

1.3 Technical Information

We automatically collect certain technical information, including:

• Device Information: Device type, operating system, and app version
• Usage Data: How you interact with the app, features used, and time spent
• Performance Data: App performance metrics and error reports
• Network Information: IP address and network connection details

1.4 Subscription and Payment Information

For paid subscriptions, we collect:

• Subscription Details: Plan type, subscription status, and billing cycle
• Payment Information: Processed securely through Stripe (we don't store payment card details)
• Billing History: Transaction records and payment history
• Usage Limits: Content creation limits and usage tracking

2. How We Use Your Information

2.1 Core Service Provision

We use your information to:

• Create and manage your Tale Tailor account
• Generate AI-powered story content and images
• Store and organize your stories, worlds, and characters
• Provide personalized story recommendations
• Enable cross-platform synchronization between devices

2.2 Content Generation and AI Services

Your content is used to:

• Generate contextual story continuations using AI
• Create character-consistent narratives across stories
• Generate appropriate images for your stories
• Provide story summaries and organization features
• Improve AI model performance for better story generation

2.3 Service Improvement

We analyze usage data to:

• Improve app performance and user experience
• Develop new features and capabilities
• Optimize AI content generation algorithms
• Identify and fix technical issues

3. AI Services and Content Generation

3.1 AI Service Providers

We use the following AI services to power Tale Tailor:

• Google Gemini: For text generation, story content, and character development
• Runware AI: For image generation and visual content creation
• OpenAI (via Supabase): For additional AI capabilities and content processing

3.2 Data Processing for AI

When you use AI features, we:

• Send your story content, character descriptions, and prompts to AI services
• Process your content through AI models to generate new content
• Apply safety filters to ensure child-appropriate content
• Store generated content in your account for future use

3.3 AI Content Safety

We implement multiple safety measures:

• Content Filtering: AI responses are filtered for inappropriate content
• Child Safety: All content is designed to be child-friendly and educational
• Zero Tolerance: We have strict policies against harmful or inappropriate content
• Human Review: Suspicious content may be reviewed by our team

4. Payment and Subscription Data

4.1 Payment Processing

We use Stripe for secure payment processing:

• No Card Storage: We never store your payment card information
• Secure Processing: All payments are processed through Stripe's secure infrastructure
• PCI Compliance: Stripe is PCI DSS Level 1 compliant
• Encryption: All payment data is encrypted in transit and at rest

4.2 Subscription Management

We track subscription information including:

• Subscription tier and plan details
• Billing cycle and renewal dates
• Usage limits and current usage
• Payment history and transaction records

4.3 Usage Tracking

We monitor your usage to:

• Enforce subscription limits (worlds, stories, entries per tier)
• Provide usage statistics in your profile
• Reset limits at the beginning of each billing cycle
• Offer appropriate upgrade recommendations

5. How We Share Your Information

5.1 Third-Party Service Providers

We share information with trusted third-party services:

Service Provider	Purpose	Data Shared
Google	Authentication and user management	Name, email, profile picture
Supabase	Database, storage, and backend services	All user content and account data
Stripe	Payment processing and subscription management	Payment information, subscription details
Google Gemini	AI text generation and story content	Story content, prompts, character descriptions
Runware AI	AI image generation	Image prompts, context images

5.2 Legal Requirements

We may share your information when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Investigate potential violations of our terms
• Prevent fraud or security threats

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

6. Data Security and Protection

6.1 Security Measures

We implement comprehensive security measures:

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Strict access controls and authentication
• Regular Audits: Security audits and vulnerability assessments
• Secure Infrastructure: Hosted on secure, monitored servers

6.2 Data Protection Standards

We follow industry best practices:

• GDPR compliance for European users
• CCPA compliance for California users
• Regular security updates and patches
• Employee training on data protection

6.3 Incident Response

In the event of a data breach, we will:

• Notify affected users within 72 hours
• Report to relevant authorities as required
• Take immediate steps to secure the breach
• Provide guidance on protective measures

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access all personal data we hold about you
• Download your stories and content in a portable format
• Request a copy of your data in a machine-readable format
• View your account information and usage statistics

7.2 Correction and Updates

You can:

• Update your profile information at any time
• Edit or delete your stories and content
• Change your language preferences
• Modify your subscription settings

7.3 Deletion and Account Closure

You have the right to:

• Delete your account and all associated data
• Request deletion of specific content
• Cancel your subscription at any time
• Withdraw consent for data processing

7.4 Data Processing Controls

You can control:

• Whether your content is used for AI training (opt-out available)
• Marketing communications and notifications
• Data sharing with third-party services
• Location data collection (if applicable)

8. Data Retention

8.1 Retention Periods

We retain your data for the following periods:

• Account Data: Until account deletion or 3 years of inactivity
• User Content: Until you delete it or close your account
• Payment Data: As required by law (typically 7 years)
• Usage Analytics: Aggregated data retained for 2 years

8.2 Automatic Deletion

We automatically delete:

• Inactive accounts after 3 years
• Temporary files and cache data after 30 days
• Error logs and debug information after 90 days
• Backup data after 1 year (unless legally required)

9. Children's Privacy

9.1 Age Restrictions

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information immediately.

9.2 Content Safety

All content generated by our AI is:

• Filtered for age-appropriate content
• Designed to be educational and entertaining
• Monitored for safety and appropriateness
• Subject to our zero-tolerance policy for harmful content

9.3 Parental Controls

We provide tools for parents and caregivers to:

• Review all generated content before sharing with children
• Control what content is accessible
• Monitor usage and activity
• Report any concerning content

10. International Data Transfers

10.1 Global Operations

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Binding Corporate Rules for internal transfers
• Certification schemes and codes of conduct

10.2 Data Processing Locations

Our data is primarily processed in:

• United States: Primary servers and data centers
• European Union: For EU user data compliance
• Other Regions: As needed for service optimization

11. Changes to This Privacy Policy

11.1 Policy Updates

We may update this Privacy Policy from time to time. When we do, we will:

• Post the updated policy on our website
• Update the "Last Updated" date
• Notify you of significant changes via email or app notification
• Provide a summary of changes when possible

11.2 Continued Use

Your continued use of Tale Tailor after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you should discontinue use of the Service.

12. Contact Information

Terms of Service | Privacy Policy