Privacy Policy

StoryTales ("we", "us") operates storytales.art and creates personalized, AI-illustrated children's storybooks. This Privacy Policy explains what we collect, how we use it, who we share it with, and your choices. Contact: privacy@storytales.art.

Your child's photo

You may upload a photo of your child so we can describe their appearance for illustrations. When you upload, the photo is sent over HTTPS to StoryTales servers, which forward it to third-party AI models to (1) create a text appearance description and (2) use it as a visual reference when generating story scenes so likeness stays consistent. For some engines, the photo (or a copy) may be temporarily uploaded to a third-party provider's content delivery network solely to generate your book. When Live Books ("Make this scene live") is used, a generated scene image (AI art of your child, not necessarily your original photo) is sent to a third-party video model to create a short clip. The uploaded photo and any temporary processing copies are retained for up to 7 days for debugging and troubleshooting support, then deleted. Per our AI providers' declarations and the paid API terms we operate under, uploaded photos are not used to train their models.

StoryTales does not permanently store the original uploaded photo in our database or media library. We do store the text appearance description, AI-generated images, and (if you use Live Books) video files or URLs. AI providers may process and transiently retain inputs under their terms and retention practices; we configure our paid API tiers so that customer content is not used to train the providers' models under their applicable paid terms. Other providers process data under their own terms. We do not control their residual logs or caches. We do not build face-recognition profiles and we do not sell children's photos.

Uploading your child's photo is required to use StoryTales's core feature, generating a personalized storybook with your child's likeness. If you decline to provide a photo, we cannot create the character description or visual reference the illustrations depend on, and you will not be able to generate a book.

What we collect

• Account data: email, name, authentication credentials (hashed or managed by our auth provider), login metadata.
• Book data: child first name, age, gender preference for language, appearance description (text), story choices, scene text, generated images/videos, share links you create. Sharing: anyone with a share link can view the book's text and images/videos (including the child's name and AI likeness). Treat links as public; revoke them in the product where available.
• Purchase data: plan, credit balance and usage history. Payments are processed by Lemon Squeezy as merchant of record. We do not store full card numbers.
• Technical data: security and operational logs (e.g. IP, browser, error diagnostics). We do not use third-party advertising trackers on the product.

AI and infrastructure providers

Depending on configuration, processing may involve third-party AI models (vision, text, image generation, and/or image-to-video), hosting and database providers (site hosting, database, auth, and file storage for generated scene images), and our email delivery provider. Providers process data only to deliver the service under our agreements with them. Paid AI API tiers are configured not to use customer content for model training under the providers' applicable terms; other vendors process inputs per their terms.

Why we process (legal bases)

To perform the contract you requested (create and deliver books); to secure and operate the service (legitimate interests); marketing emails only with consent where required (you may opt out); and to meet legal obligations (e.g. tax and accounting records).

Children

StoryTales is for parents and legal guardians. Accounts are for adults (18+). By uploading a child's photo you confirm you are the parent or legal guardian and consent to the processing described here. We do not knowingly provide accounts for children.

Retention & deletion

Account and book data are kept while your account is active. Deleting a book removes it from your library. Account deletion removes personal data we control within 30 days, except (i) records we must keep by law (e.g. purchases, typically up to 7 years), (ii) limited security logs, and (iii) residual copies on third-party systems that we instruct to delete or that expire under their retention schedules. Appearance descriptions are deleted with the related books. Uploaded photos and temporary processing copies (ours and our AI providers') are retained for up to 7 days for debugging and troubleshooting support, then deleted.

Your rights

Subject to applicable law (including Israeli Privacy Protection Law and, where applicable, GDPR), you may request access, correction, deletion, export, restriction, or objection, and withdraw consent where processing is consent-based. Contact privacy@storytales.art; we aim to respond within 30 days. You may also complain to the Israeli Privacy Protection Authority or your local supervisory authority.

Security

We use encryption in transit, hashed passwords (or equivalent auth security), role-restricted database access, audit-logged admin actions, and multi-factor authentication for administrative access. No system is perfect; if a breach affects you, we will notify you and regulators as required by law.

International transfers

We and our providers process data in Israel and abroad, including the United States and other countries where our third-party AI model providers, hosting and database providers, Lemon Squeezy, our email provider, and video-model infrastructure operate. This includes child photos and AI-generated images/videos when you use those features. Where required, we rely on appropriate transfer tools (such as Standard Contractual Clauses) and contractual data-protection terms with providers.

Changes

We will post material changes on this page and, when appropriate, notify you by email. Continued use after the effective date constitutes acceptance of the updated policy.

Related: Terms of Service.