Privacy Policy
This Privacy Policy outlines how Twinkle Tales ("we," "our," or "us") collects, uses, and protects information when you use our website (twinkletalesapp.com) and services. Twinkle Tales is designed to empower parents and guardians to create and share AI-generated stories with their children.
1. Our Commitment to Children's Privacy
The Twinkle Tales app is provided to a general audience, including parents and guardians, but is not intended to be used directly by children. We are deeply sensitive to concerns regarding children's safety and privacy and have built our platform to comply with the Children's Online Privacy Protection Act (COPPA) and the GDPR for Children (GDPR-K).
Verifiable Parental Consent (VPC)
We do not collect personal information directly from children without verifiable parental consent. Parents or legal guardians may voluntarily provide limited child profile information for personalization purposes. By agreeing to our Terms of Use and creating an account, you provide this consent and affirm that you are the parent or legal guardian of any child whose information is entered into the app.
2. Information We Collect
To provide a personalized storytelling experience, we collect the following categories of information:
Personal Information Provided by Parents
- Parent Identity: Full name and email address.
- Payment Information: Payments are processed by third-party providers such as Stripe. Twinkle Tales does not store or process credit card information. Limited billing details such as name, email, and address may be shared with our payment partners solely to complete transactions.
- Child's Profile: Name, age, gender, and an image (if uploaded) to personalize story characters.
- Images (if uploaded) are used solely to extract visual characteristics to personalize story characters
- Images are processed transiently and are not stored by Twinkle Tales after processing
- Images are not shared except with service providers strictly necessary to perform this processing on our behalf, and are never retained or used for training
AI and Usage Data
- AI Input & Prompts: We store any text or voice prompts you provide to the AI to generate stories.
- Cookies: We use cookies to enhance your experience and maintain session continuity.
- Device Timezone: Device timezone may be used locally to adjust content based on time of day. This information is not used to determine a user's physical location.
3. How We Use and Share Information
AI Model Training
We do not use children's personal information to train AI models. We may analyze anonymized or aggregated usage patterns to improve the service.
Third-Party AI Providers
To generate high-quality content, limited data may be shared with sub-processors and third-party AI providers strictly to provide the service. No third party may retain, reuse, or train on child data. These providers have their own privacy practices, which we encourage you to review:
- OpenAI (ChatGPT): Data processed via API is governed by the OpenAI Privacy Policy and their Enterprise Privacy Commitments.
- Anthropic (Claude): Information shared is subject to the Anthropic Privacy Policy and their Trust Center guidelines.
- Google (Gemini): Data usage for developers is outlined in the Google Privacy Policy and the Gemini API Additional Terms of Service.
Content Safety
We utilize automated filters to prevent the AI from generating harmful or age-inappropriate content. However, please note that AI output is generative and we cannot always guarantee the output will perfectly align with user expectations. As parents are the users of Twinkle Tales, it is incumbent upon the parents to review each story before the child views it.
4. Data Retention and Security
We take the security of your family's data seriously:
- Encryption: We utilize SSL/TLS encryption and restricted access protocols to protect data during transmission and storage.
- Minimization: We only retain data for as long as is "reasonably necessary" to provide our services.
- Automatic Deletion: Primary account data is deleted within 7 days of account closure; limited data may be retained where required by law or for security purposes.
5. Parental Rights and Control
Under global privacy laws, parents maintain "ultimate control" over their child's information. You may exercise the following rights at any time:
| Right | Description |
|---|---|
| Review | Request to see exactly what data has been collected about your child. |
| Revoke | Withdraw your consent for our continued collection of data at any time which will result in the cancellation of the account. |
| Delete | Request the permanent deletion of your child's profile and story history. |
Additional Rights for EU/CA users
- Right to correction
- Right to portability
- Right to restrict processing
- Right to lodge a complaint with a supervisory authority
To exercise these rights or submit a User Data Deletion Request, please contact us at support@twinkletalesapp.com.
6. Contact Us
If you have any questions or concerns regarding this Privacy Policy or our data practices, please reach out to us:
- Email: support@twinkletalesapp.com
- Website: twinkletalesapp.com