1. Scope and role
Policy applies when you access, log in, create a child profile, read or personalize stories, use your voice, submit a review or purchase a plan. The adult who creates the account is responsible for selecting appropriate data and accompanying the child when using the service.
We only process data to provide the functionality you choose, operate safely, provide user support and meet legal obligations. We do not sell data for other parties to self-promote.
2. Data is processed
- Account: Firebase user ID, email, display name, account picture, role, usage plan, and when it was active.
- Child profile entered by parent: name or nickname, year of birth, optional gender, and profile picture if uploaded.
- Activity: stories viewed or listened to, likes, personalization, reviews, technical data and usage events needed to operate, prevent abuse and improve the service.
- Payment: order code, plan, amount, status, email, Polar checkout ID, transaction ID, and payment status. talepillow.com does not receive or store full card details.
- Voice: sample file actively recorded or uploaded by adult, consent confirmation, voice label, processing status, and narrative file created.
3. Purpose and grounds for processing
Data used for authentication; display and personalize stories; create, save, and play narration; plan access recognition; application processing; save cookie choices; support; security; and compile aggregate data on service quality.
Depending on the activity, processing is based on consent, the request to perform the service you choose, legal obligations or legitimate interests of security and anti-fraud. You can withdraw your consent; the revocation does not invalidate the processing that took place previously.
4. Storage and suppliers
Firebase Authentication supports login. Cloudflare D1 saves account, child profile, orders, likes, reviews, usage events, and voice metadata. Firestore serves content and administrative data. Cloudflare R2 saves story images, uploaded photos, voice samples, and narrative sounds.
Necessary prompts and data can be handled by the OpenAI-compatible service; Google Cloud Text-to-Speech processes narration text; a VietTTS-compatible service processes voice samples when voice cloning is selected; Polar provides hosted checkout, payment processing, tax handling, invoices, and refunds. Data may be processed outside your country depending on the provider; we limit submissions to what each feature requires.
5. Children and parental controls
talepillow.com is designed for parents or guardians to manage the experience. Children should not create their own accounts, upload photos, download voice samples, or make payments. Adults need age-appropriate explanations and only provide data that is truly needed.
Parents can edit or delete individual child profiles and voice profiles in the account. For requests for access, correction, restriction, objection, withdrawal of consent or other data deletion, please send an email. Some records need to be kept for transaction resolution, disputes, safety or legal obligations, so deletion is not always instantaneous or covers backups immediately.
6. Security and retention
We apply authentication, authorization, and access restrictions appropriate to the scale of the service. No online system is completely secure; Incidents will be assessed, remedied and notified according to applicable regulations.
Data is retained as long as the account or function is active and for a reasonable period of time for support, security, reconciliation, disputes or legal purposes. Voice samples can be deleted in the voice manager; Order records may need to be kept longer than personalization data.
7. Your rights
- It is known that you can request to access and correct your data or the children you legally represent.
- Withdraw consent; request restriction, objection or deletion where permitted by law.
- Ask for an explanation of the purpose, type of data, processor, and complaints if data is used improperly.
8. Reference text
Contact and send request
talepillow.com is operated by individual Nguyễn Xuân Thông. Any questions, complaints or requests regarding data can be sent to thong.nguyenn56@gmail.com.
To avoid providing data to the wrong person, we may ask to verify account permissions or the parent or guardian relationship with the child. We will acknowledge receipt and respond within a time limit appropriate to the nature of the request and applicable regulations.