TaleToaster

Privacy Policy

Last updated: May 8, 2026

TaleToaster ("we", "us", "our") is operated by Amit Bhawnani, a sole proprietor. This Privacy Policy explains how we collect, use, share, and protect information about you and your children when you use the TaleToaster mobile app and the public share-link pages on this website.

TaleToaster is designed for parents and guardians to use on behalf of children ages 2 through 10. Children do not create their own accounts and we do not knowingly collect any personal information directly from children under 13. If you are a parent or guardian and you do not agree with this Privacy Policy, please do not use TaleToaster.

TaleToaster is published in the Apple App Store under the Kids Category. This means the app contains no third-party advertising, no behavioral profiling, no tracking SDKs, and no behavioral or contextual ads of any kind. This is a deliberate product choice that we will not change without prior notice and an opportunity to delete your account.

1. Information we collect

Account information (provided by you when you sign up)

  • Email address (used for sign-in and account recovery)
  • If you sign in with Apple or Google, an opaque identifier and verified email from those providers

Child profile information (provided by you, the parent or guardian)

  • Each child's first name (used inside the story so the child is the hero)
  • Date of birth (used to determine the age tier so story complexity is appropriate)
  • Optional: list of interests, names of friends
  • Optional: a one-line "Anything else?" instruction you may add for a specific story
  • Preferred narrator voice (male or female)

Stories and audio

  • Story text generated for your child
  • Audio narration of those stories. The narration speaks the child's first name verbatim, so the audio file itself contains personal data. We treat audio files with the same care as profile data and delete them when you delete the underlying story or your account (see Section 7).
  • The order in which saved stories appear in your playlist (manually reorderable from the app)

Limited service-quality logs

  • Story-generation events: theme used, story title, story length, time generated
  • Audio-generation events: voice used, success/failure, processing time
  • Feedback you submit through the in-app Send Feedback form

What we do NOT collect

  • We do not collect device identifiers, advertising IDs, location, or browsing history
  • We do not use any third-party analytics SDKs in the mobile app
  • We do not collect biometric data or microphone audio of your child
  • We do not knowingly collect any information directly from children under 13
  • We do not run third-party advertising of any kind in the app

2. How we use the information

We use the information described above only to:

  • Generate personalized stories for your child by passing relevant child-profile information to our story-generation provider so the story stars your child by name
  • Generate audio narration through our audio providers
  • Save generated stories to your account so they appear in your playlist
  • Operate, secure, debug, and improve the service
  • Respond to your feedback and support requests

We do not use information about your children for advertising, profiling, or any purpose unrelated to running TaleToaster.

3. Sharing of information

We share the minimum information necessary with the following third-party service providers, each of whom processes the data on our behalf under their own confidentiality and data-processing terms. None of these providers are advertising or marketing partners.

  • Supabase, Inc. (United States) — hosts our database, authentication, and audio file storage. Receives all data we store about you.
  • Anthropic, PBC(United States) — receives the child's first name, age, interests, friends, narrator gender, theme title, and your "Anything else?" instruction (if provided) to generate the story text.
  • ElevenLabs, Inc.(United States) — receives the finished story text (which already contains the child's first name as a story character) for audio narration. Receives no separate child identifier or profile information.
  • Google LLC / Google AI Studio (United States) — receives only theme metadata (title, description, category) for cover-image generation; never receives child profile information.
  • Apple Inc. and Google LLC — only if you choose to sign in with those providers; they verify your identity and pass us your email and an opaque user identifier.
  • Vercel Inc. (United States) — hosts the public share pages on this website.

We do not sell your data. We do not share data with advertisers, marketing networks, or data brokers. We do not share data with anyone for cross-context behavioral advertising. We may disclose information if required by law (e.g., a valid subpoena), in which case we will notify you unless legally prohibited from doing so.

4. Public sharing (the "Share" button)

Stories are private by default. When you tap "Share" inside the app, you authorize the creation of a public link of the form taletoaster.net/s/<random-id>. Anyone with the link can view that single story's cover image, title, and audio. The link does notexpose your child's full name, date of birth, age, profile information, your email, or any other account information. The audio narration does include the child's first name as a character in the story.

You can stop a share link from working at any time by deleting the underlying story in the app, or by deleting your account. Once the story or account is deleted, the link returns "not found."

5. Children's privacy (COPPA)

TaleToaster operates in compliance with the U.S. Children's Online Privacy Protection Act (COPPA). Children do not create their own accounts and we do not knowingly collect any personal information directly from children under 13. The parent or guardian creates the account, creates the child profile, and provides any information about the child.

By creating a child profile, you (the parent or guardian) verify that you have the authority to provide the information about that child and you consent to our collection, use, and sharing of that information as described in this Privacy Policy.

As a parent or guardian, you may at any time:

  • Review the personal information we have collected about your child (visible in the app)
  • Edit any child profile (Settings tab → tap profile)
  • Delete a child profile (Settings tab → tap profile → "Delete this profile"), which removes the profile immediately. Saved stories remain in your library but are no longer linked to that specific child.
  • Refuse the further collection or use of your child's information by deleting the profile or your entire account

If you believe we have inadvertently collected information directly from a child without parental consent, please contact us at amitbhawnani@gmail.com and we will delete it within 7 days.

6. Your rights — and how to delete your account

You can at any time, through the app:

  • View all of your data (it is visible inside the app)
  • Edit any child profile (Settings tab → tap profile → edit fields → Save)
  • Delete a child profile(Settings tab → tap profile → "Delete this profile" link at the bottom of the form). Two confirmation prompts protect against accidental deletion.
  • Delete your entire account, including all data, in-app:
    1. Open Settings.
    2. Scroll to the "Danger Zone" at the bottom.
    3. Tap "Delete Account."
    4. Read the warning, tap Continue.
    5. You will be asked to solve a simple math problem (e.g., "27 + 38 = ?"). This step prevents accidental deletion by a child or by mistaken taps. Solve and tap Delete.
    On confirmation, your account, all child profiles, all saved stories, all audio files, and all service-quality logs tied to your account are deleted from our database immediately. Any public share links you had created stop working at the same moment. You will be signed out and returned to the login screen.

If for any reason the in-app deletion does not work, you can also email amitbhawnani@gmail.com from your registered email address and we will complete the deletion within 7 days.

Data export — email amitbhawnani@gmail.com and we will provide a JSON archive of your data within 30 days.

European Economic Area, United Kingdom, Switzerland (GDPR / UK-GDPR)

If you are in the EEA, the UK, or Switzerland, you also have the right to:

  • Access, rectify, or erase your personal data
  • Restrict or object to certain processing
  • Data portability
  • Lodge a complaint with your local supervisory authority

Our lawful bases for processing are (a) your consent, in respect of child profile information, and (b) the performance of our contract with you, in respect of account information and content generated for you.

California (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect about you
  • Delete that information
  • Opt out of the "sale" or "sharing" of personal information — TaleToaster does not sell or share personal information for cross-context behavioral advertising as those terms are defined under CCPA/CPRA
  • Limit the use and disclosure of sensitive personal information
  • Not be discriminated against for exercising these rights

7. Data retention and deletion specifics

We retain your account information for as long as your account is active. When you:

  • Delete a story from the app, the story row, the cached audio file on your device, and the audio file on our storage are removed. Any public share link for that story stops working.
  • Delete a child profile, the child profile row is removed immediately. Any saved stories that were tied to that child remain in your library but are no longer linked to a specific child.
  • Delete your account, your account row, every child profile, every saved story, every audio file you generated, every public share link, all in-app feedback, all service-quality logs tied to your user id, and your authentication record are removed immediately. Audio files are deleted from our storage on a best-effort basis as part of the same operation.

Anonymized aggregate logs (e.g., "X stories were generated from theme Y on date Z," with no user identifier) may be retained for up to 12 months for service-quality monitoring. These logs cannot be re-associated with you or your child.

8. Security

We use industry-standard practices to protect your information:

  • All connections to TaleToaster servers use HTTPS / TLS 1.2 or higher
  • Stored data is encrypted at rest by our database provider
  • Access to our database is restricted to authenticated administrators
  • Row-Level Security policies in our database ensure each user can only access their own data
  • Per-user storage paths for generated audio prevent one user's deletion request from affecting another user's files

No system is 100% secure. If we discover a security incident affecting your data, we will notify affected users within 72 hours of discovery, as required by applicable law.

9. Cross-border data transfer

Information you provide will be transferred to and processed in the United States, where our service providers are located. By using TaleToaster you consent to this transfer. Where required for users in the EEA, the UK, or Switzerland, we rely on Standard Contractual Clauses or other appropriate safeguards.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page indicates the version. If we make material changes — for example, adding a new third-party processor, or changing what data we collect — we will notify users via email and post a notice in the app at least 30 days before the changes take effect.

11. Contact

Questions about this Privacy Policy or your data?