Legal

Privacy Policy

Effective Date: June 29, 2026 · Last Updated: June 29, 2026

Important:Tale & Star is a service for parents and guardians. We take children's privacy extremely seriously and comply with COPPA (US), GDPR (EU), UK GDPR, and applicable children's privacy laws worldwide. Please read this policy before using our service.

1. About Our Service

Tale & Star (“we,” “us,” or “our”) creates personalized AI-generated storybooks featuring your child as the hero. To personalize a book, we require a photo of your child and basic information such as their name and age.

Our service is intended for parents and guardians aged 18 and over. We do not permit children to create accounts or directly use our service.

2. Information We Collect

Account Information (parent/guardian):

  • Full name and email address
  • Password (stored as a secure cryptographic hash — never plain text)

Child Information:

  • Child's first name (for story personalization)
  • Child's photograph (for AI illustration generation)
  • Age and story preferences (theme, character traits)
  • Dedication message (if provided)

Order Information:

  • Shipping name and address
  • Payment information (processed by Stripe — we never store card numbers)

Automatically Collected:

  • IP address, browser type, device type
  • Pages visited, time spent, referral source
  • Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect to:

  • Create and personalize your child's storybook
  • Process and fulfill your order
  • Send order confirmations and shipping updates
  • Respond to support requests
  • Improve our service through aggregated, anonymized analytics
  • Comply with legal obligations

We do notuse your child's photo or personal information for advertising, behavioral profiling, or any purpose beyond creating their personalized book.

4. Children's Privacy — COPPA & Global Compliance

United States — COPPA

Our service is directed at parents and guardians of children, not at children themselves. We do not knowingly permit children under 13 to create accounts or submit personal information.

By creating an account and uploading a child's photo, you represent that you are the parent or legal guardian of the child depicted, and you consent to our processing of their information as described in this policy.

In compliance with the Children's Online Privacy Protection Act (COPPA):

  • We collect only the minimum information necessary to provide our service
  • We do not share or sell children's personal information to third parties for marketing
  • Parents may request deletion of their child's information at any time by contacting privacy@taleandstar.com

European Union — GDPR

For EU users, our legal basis for processing personal data is performance of contract (providing the service you requested) and, for children's data, parental consent (Article 8 GDPR).

By using our service, you confirm you are the parent or guardian providing lawful consent for your child (under 16 in most EU member states).

Under GDPR, you have the right to: access, rectify, erase, restrict, portability, and object to our processing of your data.

United Kingdom — UK GDPR & Age Appropriate Design Code

We follow the ICO Children's Code. Children's data is not used for profiling or behavioral advertising.

5. Your Child's Photo — Special Handling

Your child's photograph is treated with the highest level of care:

PurposeUsed solely to generate AI illustrations for your personalized storybook
ProcessingSent to our AI illustration provider via encrypted connection; not retained beyond the generation request
StorageStored in encrypted cloud storage (Supabase)
RetentionDeleted within 30 days after book creation, or immediately upon request
SharingNever shared with third parties, advertisers, or other users
AI TrainingYour child's photo is never used to train AI models

6. How We Share Information

SupabaseSecure database and authentication — account and order data
StripePayment processing — payment information only
AI ProviderBook illustration generation — child's photo (encrypted, per-request only)
Shipping CarriersOrder fulfillment — name and shipping address
VercelWebsite hosting — server logs

We do not sell personal information to third parties. Ever.

7. Data Retention

Account informationUntil you delete your account
Child's photo30 days after book creation, or sooner on request
Generated book contentUntil you delete your account
Order records7 years (legal and tax requirements)
Payment recordsAs required by Stripe and applicable law

8. Security

We use industry-standard security measures including:

  • TLS/HTTPS encryption for all data in transit
  • Encrypted storage for all data at rest
  • Access controls limiting who can view your data
  • Regular security reviews

9. International Data Transfers

We operate from the United States. If you are outside the US, your data may be transferred to and processed in the US. For EU/UK users, such transfers are covered by appropriate safeguards (Standard Contractual Clauses).

10. Your Rights

To exercise any of the following rights, contact privacy@taleandstar.com:

  • Access — request a copy of the personal data we hold about you
  • Deletion — request deletion of your account and all associated data
  • Correction — request correction of inaccurate information
  • Portability — receive your data in a machine-readable format
  • Objection — object to certain processing activities
  • Restrict — request restricted processing in certain circumstances

We will respond to all requests within 30 days.

11. Changes to This Policy

We may update this policy periodically. We will notify you of material changes by email or by posting a notice on our site. Your continued use of our service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy requests, questions, or concerns: