Privacy Policy

SproutTales is an AI children's picture-book generator. The Service is operated by SproutTales, which is the data controller responsible for the personal information described in this policy.

This policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices available to you. It applies to the SproutTales website, apps, and services (the “Service”), including the accounts parents use and the children depicted in the books they create.

• •Operator: SproutTales
• •Privacy contact: privacy@sprouttales.com
• •Effective date: 2026-10-19

We collect only the information needed to operate the Service.

(a) Parent or guardian account data

• •Your name and email address, provided when you create an account.
• •Profile information returned by an OAuth provider (for example, Google) when you sign in with one — such as your name, email address, and provider account identifier.
• •Subscription and billing status (plan and renewal date). Full payment-card details are collected and stored by our payment processor, not by us.

(b) Children's personal information

For this product, the child's personal information is limited to the following, and is only collected when a parent chooses to include it:

• •The child's first name, when the parent chooses to include it.
• •A child's photograph — but only when the parent deliberately selects the photo-based character option (Option B). If the parent uses the description-based option (Option A) instead, no photograph is collected at all.
• •Optionally, a recording of the parent's or the child's voice, when the read-aloud feature is used.

Important limits. We do not collect the child's date of birth. A photograph you upload is used solely to derive an illustrated character; it is not retained as a standalone asset once character processing is complete.

(c) Service and technical data

• •Device, browser, IP address, and cookie or similar identifiers, and log and usage data needed to operate, secure, and debug the Service.

We use the information above only for the following purposes:

• •Generating the illustrated character from the parent's inputs, including a photograph where the parent chooses that option.
• •Generating the book pages that make up the story.
• •Generating the read-aloud audio for a book.
• •Keeping the parent's library of books and characters available to the account.

We do not use children's personal information for any purpose beyond these.

• •We do not serve behavioral advertising to children, and we do not use children's personal information for targeted advertising of any kind.
• •We do not sell or rent children's personal information.
• •We do not disclose children's personal information to third parties for those third parties' own purposes.

This section explains how we handle children's personal information. It is central to how the Service works, because the books a parent creates may depict their own child.

Verifiable parental consent

We do not knowingly collect personal information from a child under 13 without verifiable parental consent obtained before collection. The account holder must be the child's parent or legal guardian, and consent for the child's participation is captured before any child personal information is collected or used.

How we obtain consent

Consent is obtained through a verification step that ties the consenting adult to their own identity or payment instrument — for example, a small verification charge or confirmation on a payment instrument the parent controls, a check of a government-issued ID, or an equivalent method designed to ensure the person consenting is the parent or guardian. We record the version of this policy under which consent was granted.

Parental rights

At any time, a parent or guardian may:

• •review the personal information we hold about their child;
• •refuse to permit further collection or use of that information;
• •revoke consent at any time; and
• •request deletion of the child's personal information.

Withdrawing consent

You can revoke consent using the “Withdraw consent” control in your account (or the equivalent in-product setting), or by contacting us at privacy@sprouttales.com. Withdrawal stops further collection and use and triggers deletion as described in the Retention section below.

Retention limits

We keep children's personal information only for as long as needed to provide the features the parent enabled, and we delete it on revocation or account deletion, subject to the limited exceptions described in the Retention section.

We use a limited set of processors that act only on our instructions and under contracts that restrict how they may use the data:

• •OpenRouter and Black Forest Labs — model access and image generation.
• •Neon — database hosting.
• •Cloudflare — file storage.
• •Creem — payment processing.
• •Resend — transactional email.

Each processor handles personal information only to perform the service we have engaged it for, and not for its own purposes.

• •Account data: kept for as long as the account is active, then deleted or anonymized after closure, except where we must retain records (for example, billing or tax records) for a limited period required by law.
• •Uploaded photograph: used only to derive the illustrated character and not kept as a standalone asset after processing.
• •Voice recordings: retained only while needed to produce the read-aloud audio for the associated book.
• •Child's first name and generated assets: kept for as long as the parent keeps the book or character in the library.
• •On revocation: we delete the child's personal information and stop further collection and use; generated books that depend on it are removed from the library.

We use administrative, technical, and organizational measures to protect personal information, including encryption in transit, access controls, and least-privilege access. No method of transmission or storage is completely secure, but we work to protect the information we hold and to limit how long we keep it.

We may process and store information in countries other than the one in which you live, including where our processors operate. Where required, we use appropriate safeguards for these transfers.

Depending on where you live, you may have the right to:

• •access the personal information we hold about you and your child;
• •correct inaccurate information;
• •delete the information;
• •receive a portable copy of the information; and
• •withdraw consent at any time.

To exercise any of these rights, contact us at privacy@sprouttales.com.

We may update this policy. When we do, we change the effective date shown on this page (the current version is 2026-10-19). If a change affects how we handle children's personal information, we will request renewed verifiable parental consent before the change takes effect for the child. A change to the policy version invalidates prior consent records and requires parents to re-consent.

For questions, requests, or complaints about privacy, contact SproutTales at privacy@sprouttales.com.