Legal
Privacy Policy
Effective Date: June 29, 2026 · Last Updated: June 29, 2026
Important:Tale & Star is a service for parents and guardians. We take children's privacy extremely seriously and comply with COPPA (US), GDPR (EU), UK GDPR, and applicable children's privacy laws worldwide. Please read this policy before using our service.
1. About Our Service
Tale & Star (“we,” “us,” or “our”) creates personalized AI-generated storybooks featuring your child as the hero. To personalize a book, we require a photo of your child and basic information such as their name and age.
Our service is intended for parents and guardians aged 18 and over. We do not permit children to create accounts or directly use our service.
2. Information We Collect
Account Information (parent/guardian):
- Full name and email address
- Password (stored as a secure cryptographic hash — never plain text)
Child Information:
- Child's first name (for story personalization)
- Child's photograph (for AI illustration generation)
- Age and story preferences (theme, character traits)
- Dedication message (if provided)
Order Information:
- Shipping name and address
- Payment information (processed by Stripe — we never store card numbers)
Automatically Collected:
- IP address, browser type, device type
- Pages visited, time spent, referral source
- Cookies and similar tracking technologies (see our Cookie Policy)
3. How We Use Your Information
We use the information we collect to:
- Create and personalize your child's storybook
- Process and fulfill your order
- Send order confirmations and shipping updates
- Respond to support requests
- Improve our service through aggregated, anonymized analytics
- Comply with legal obligations
We do notuse your child's photo or personal information for advertising, behavioral profiling, or any purpose beyond creating their personalized book.
4. Children's Privacy — COPPA & Global Compliance
United States — COPPA
Our service is directed at parents and guardians of children, not at children themselves. We do not knowingly permit children under 13 to create accounts or submit personal information.
By creating an account and uploading a child's photo, you represent that you are the parent or legal guardian of the child depicted, and you consent to our processing of their information as described in this policy.
In compliance with the Children's Online Privacy Protection Act (COPPA):
- We collect only the minimum information necessary to provide our service
- We do not share or sell children's personal information to third parties for marketing
- Parents may request deletion of their child's information at any time by contacting privacy@taleandstar.com
European Union — GDPR
For EU users, our legal basis for processing personal data is performance of contract (providing the service you requested) and, for children's data, parental consent (Article 8 GDPR).
By using our service, you confirm you are the parent or guardian providing lawful consent for your child (under 16 in most EU member states).
Under GDPR, you have the right to: access, rectify, erase, restrict, portability, and object to our processing of your data.
United Kingdom — UK GDPR & Age Appropriate Design Code
We follow the ICO Children's Code. Children's data is not used for profiling or behavioral advertising.
5. Your Child's Photo — Special Handling
Your child's photograph is treated with the highest level of care:
| Purpose | Used solely to generate AI illustrations for your personalized storybook |
| Processing | Sent to our AI illustration provider via encrypted connection; not retained beyond the generation request |
| Storage | Stored in encrypted cloud storage (Supabase) |
| Retention | Deleted within 30 days after book creation, or immediately upon request |
| Sharing | Never shared with third parties, advertisers, or other users |
| AI Training | Your child's photo is never used to train AI models |
6. How We Share Information
| Supabase | Secure database and authentication — account and order data |
| Stripe | Payment processing — payment information only |
| AI Provider | Book illustration generation — child's photo (encrypted, per-request only) |
| Shipping Carriers | Order fulfillment — name and shipping address |
| Vercel | Website hosting — server logs |
We do not sell personal information to third parties. Ever.
7. Data Retention
| Account information | Until you delete your account |
| Child's photo | 30 days after book creation, or sooner on request |
| Generated book content | Until you delete your account |
| Order records | 7 years (legal and tax requirements) |
| Payment records | As required by Stripe and applicable law |
8. Security
We use industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit
- Encrypted storage for all data at rest
- Access controls limiting who can view your data
- Regular security reviews
9. International Data Transfers
We operate from the United States. If you are outside the US, your data may be transferred to and processed in the US. For EU/UK users, such transfers are covered by appropriate safeguards (Standard Contractual Clauses).
10. Your Rights
To exercise any of the following rights, contact privacy@taleandstar.com:
- Access — request a copy of the personal data we hold about you
- Deletion — request deletion of your account and all associated data
- Correction — request correction of inaccurate information
- Portability — receive your data in a machine-readable format
- Objection — object to certain processing activities
- Restrict — request restricted processing in certain circumstances
We will respond to all requests within 30 days.
11. Changes to This Policy
We may update this policy periodically. We will notify you of material changes by email or by posting a notice on our site. Your continued use of our service after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
For privacy requests, questions, or concerns:
- Privacy requests: privacy@taleandstar.com
- General inquiries: hello@taleandstar.com
- Support: support@taleandstar.com