Privacy policy

Tales By You is a service that helps adults create personalised picture books for children they care for. The account holder is always an adult. Children do not have accounts and cannot sign in.

• Adult account information: your email address, authentication records, and the household you belong to.
• Child profile information you choose to enter: a first name or nickname, an age range, and interests. We ask for the minimum needed to personalise a story and we do not require a full name, birth date, address, school, or photograph.
• Story inputs and outputs: the answers you give in the builder, the generated text and illustrations, and the safety decisions recorded about them.
• Billing information: handled by Stripe. We store a customer reference, your plan, and your subscription status. We never see or store your full card number.
• Technical and security logs: request metadata and audit records of sensitive actions such as sign-ins, sharing, downloads, and deletions. Family story content is redacted from these logs.

• We do not sell your information, and we do not sell information about your children.
• We do not use your family's story inputs or outputs to train AI models.
• We do not run behavioural advertising, and we do not build advertising profiles of children.
• We do not publish your stories. There is no public gallery and no discovery feed.
• We do not allow children to create accounts, so we do not knowingly collect information directly from a child.

Generating a story means sending your prompt inputs to third-party AI providers for text, illustration, and content-safety review. We send the minimum needed for the task, and we instruct providers not to retain the content for training. We cannot guarantee the internal practices of any provider, so we recommend you avoid entering sensitive details you would not want processed by a vendor. See our safety approach for how those calls are reviewed.

• Finished books stay in your library until you delete them or delete your account.
• Temporary generation inputs and intermediate assets are removed on a rolling retention window.
• Webhook and audit records are kept for a limited period for security, billing accuracy, and dispute handling.
• Deleted content is queued for removal from our database, our file storage, and our providers.

From Privacy and sharing you can export everything in your household as a file, change what sharing and downloads are allowed, adjust retention, and request deletion of your account. Deletion is a real deletion request, not a hidden flag on your row.

Because children's information is involved, we keep a separate, shorter document written specifically about it. Please read the children's privacy notice alongside this page.

Questions, corrections, or requests can go through our contact page. If you are asking us to delete or export data, please use the account you created the household with so we can confirm it is really you.