Privacy

The short version

We collect as little about your child as we can while still making them a book. No email address, no surname, no date of birth, no location, no photographs. Nothing about your child is shared with anyone else, used for advertising, or used to train anything outside this product.

What we hold about a parent

• Your email address and a hashed password, so you can sign in.
• A record that your account was verified as belonging to an adult: which method, when, and a one-way hash. If a card was used for the check, we never see or store the card number. It is not charged for the check.
• Your plan and payment history, held by our payment provider, not by us.
• A record of the settings you change, so there is a history of who changed what.

What we hold about a child

• A first name, or whatever you choose to call them. There is no field for a surname.
• An age band such as five to seven, not a date of birth.
• A picture they chose as an avatar.
• A hashed PIN or picture sequence, so they can sign in on your device.
• The books they have made and read, and which pages they reached.
• The choices they made from the picture menus.

If you turn on learning from what they enjoy, we also keep a record of which books they finished and re-read, and a summary of what those books had in common. It is off unless you turn it on. Turning it off deletes what was learned.

Consent before anything else

We do not let you add a child until your account has been verified as belonging to an adult. This is a legal requirement where you are, and it is also the point of the whole design: everything about a child hangs off a verified adult account.

How long we keep things

• Remove a child, and their books and pictures are deleted after thirty days. The delay is there so a deletion by accident can be undone.
• Close your account, and everything is deleted after thirty days.
• Signed-in sessions are removed thirty days after they expire.
• Records of how a book was made, and what it cost us, are kept for ninety days.
• An account that goes unused, with no children on it, is removed after a year.
• Records of consent and of what was changed are kept, because they are the evidence that consent was given and honoured.

These are not aspirations. A scheduled job runs every day and deletes what is past its window.

Who else sees anything

Our hosting, database and payment providers process data on our behalf under contract. A story is sent to the service that writes and illustrates it, under terms that forbid using it to train their models. Nothing about your child is sold, and nothing is shared for advertising.

What you can ask for

A copy of everything we hold, a correction, or deletion. Deletion is available from your settings without asking us. For anything else, write to us and we will answer.

Getting in touch

SpaltX Industries, at the address on our website. Email privacy@taletykes.com.